WIth TCC.db under SIP, I guess we'd better hope it doesn't get corrupted and need resetting like with past versions of the OS.
@mjtsai locking TCC.db under SIP only prevents non-Apple signed software from direct manipulation. And tccutil (which resets) still works.
-
-
@rosyna That’s what I’m saying. Even though the Finder is Apple-signed, you can’t delete the file anymore. Have to go through tccutil. -
@mjtsai Is that an issue considering the security it adds? -
@rosyna I don’t know. We’ll have to see how well the reset commands work. -
@mjtsai Hoe often are you needing to purge it? -
@rosyna For me, tccutil has been enough. But customers have had issues with changes not sticking without purging it.
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
Michael Tsai
Rosyna Keller