PSA: Upcoming Updates to Full Disk Access in macOS

Standard

On October 2nd, Apple posted a news article on developer.apple.com, stating that:

Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding.

And:

Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action. 

This has been posted on a few places, but I just wanted to post in case folks have missed it.

If you’re a Mac Admin, you’ll need to keep an eye on this and any changes. I’d also urge you to file feedback on this, with many fellow Mac Admins having already submitted feedback and posting it to the #apple-feedback MacAdmins Slack channel too.

macOS Ventura and bypassing the new SystemPolicyAppBundles privacy policy control

Standard

With every macOS release since macOS Mojave, Apple have added more privacy policy controls (PPPC) for Admins to manage via MDM. And todays release of macOS Ventura, is no different, with two new PPPC which coming with macOS Ventura:

Managed Login Items are something which will I expect will be widely blogged about, but SystemPolicyAppBundles might not be as to trigger this new PPPC requires a narrow path to be trodden and even then, can be bypassed.

The below details the path required to trigger this new PPPC, and how to bypass.

Continue reading