Audit Full Disk Access for Applications

НискаНиво 2Ручни прегледmacos

Опис

Starting with macOS 10.14 Mojave, Apple introduced Transparency, Consent, and Control (TCC) to enhance user privacy by requiring apps to get explicit permission before accessing sensitive data or system features. Full Disk Access (FDA) is a privacy category managed by the TCC (Transparency, Consent, and Control) framework.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

GUI: System Settings > Privacy & Security > Full Disk Access > Verify that the applications are set to your organization's requirements. Terminal: sudo /usr/bin/sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db 'select client from access where auth_value and service = "kTCCServiceSystemPolicyAllFiles"' The output will be what applications have full disk access enabled.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

GUI: System Settings > Privacy & Security > Full Disk Access > Set any listed applications to your organization's requirements > (Optional) Select the + to add applications to the list, or - to remove them.

Својства

Оперативни системи: macos-26
Ознаке: macossystem-settings
Референца: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.2.1 Audit Full Disk Access for Applications