Michael Tsai
Rosyna Keller
@mjtsai locking TCC.db under SIP only prevents non-Apple signed software from direct manipulation. And tccutil (which resets) still works.
WIth TCC.db under SIP, I guess we'd better hope it doesn't get corrupted and need resetting like with past versions of the OS.
-
-
-
@rosyna That’s what I’m saying. Even though the Finder is Apple-signed, you can’t delete the file anymore. Have to go through tccutil. -
@mjtsai Is that an issue considering the security it adds? -
@rosyna I don’t know. We’ll have to see how well the reset commands work. -
@mjtsai Hoe often are you needing to purge it? -
@rosyna For me, tccutil has been enough. But customers have had issues with changes not sticking without purging it.
-
-
-
@mjtsai tccutil still works. I just ran "tccutil reset Accessibility" successfully. (Whew. You scared me for a minute.) -
@petermaurer That’s good to hear. Forgot about “reset Accessibility” as it’s still not documented.
-
-
@mjtsai And we need to hope Apple’s System Preferences actually work. A big ask given the past performance (esp prior to 10.10.3!)
Peter Maurer
Peter N Lewis
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.