Post

Replies

Boosts

Views

Activity

Reply to New TCC Modify syestem extension event doesn't send svent when tcc db changed with sqlite
Hey @DTS Engineer, so there are 2 tcc db's: /Library/Application\ Support/com.apple.TCC/TCC.db - This one is the system one that has the permissions for FDA and etc. This one can't be changed because it's SIP protected (at least if you are not Csaba Fitzl ;) ) /Users//Library/Application\ Support/com.apple.TCC/TCC.db This one is the user tcc db, it contains permissions to desktop / microphone and etc. this one can be changed if 1. you are root 2. you have FDA so if for example a user let the terminal app FDA permissions and uses sudo they can change this tcc db and add / delete values from it. So we are interested in the user tcc db to know if someone for example added microphone permissions for unwanted app.
Topic: App & System Services SubTopic: Core OS Tags:
Jul ’25
Reply to Network Extension - On shutdown Xsan can't unmount and cause a crash when NEFilterProvider is enabled
Hey @DTS Engineer, regarding this topic we still hasn't got any info if it has been fixed on new versions / someone intends to fix it. Do you recommend open a Code-level support request? will it help regarding this bug. Again, sincerely thank you for all the help, Idan
Replies
Boosts
Views
Activity
Sep ’25
Reply to New TCC Modify syestem extension event doesn't send svent when tcc db changed with sqlite
Hey @DTS Engineer yes sorry, we closed and open again in order to make it part of the company and not personal. This is the correct one: FB17139326 Thank you again for all the help, Idan
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Sep ’25
Reply to New TCC Modify syestem extension event doesn't send svent when tcc db changed with sqlite
Hey, thanks <3 Yes the bug ticket is in the first question: FB17086328 but will add it again. Thank you, Idan
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Aug ’25
Reply to New TCC Modify syestem extension event doesn't send svent when tcc db changed with sqlite
Hey @DTS Engineer any new info regarding this security bug?
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Aug ’25
Reply to New TCC Modify syestem extension event doesn't send svent when tcc db changed with sqlite
Hey @DTS Engineer, so there are 2 tcc db's: /Library/Application\ Support/com.apple.TCC/TCC.db - This one is the system one that has the permissions for FDA and etc. This one can't be changed because it's SIP protected (at least if you are not Csaba Fitzl ;) ) /Users//Library/Application\ Support/com.apple.TCC/TCC.db This one is the user tcc db, it contains permissions to desktop / microphone and etc. this one can be changed if 1. you are root 2. you have FDA so if for example a user let the terminal app FDA permissions and uses sudo they can change this tcc db and add / delete values from it. So we are interested in the user tcc db to know if someone for example added microphone permissions for unwanted app.
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Jul ’25
Reply to Network Extension - On shutdown Xsan can't unmount and cause a crash when NEFilterProvider is enabled
Hey @DTS Engineer FB17483424 is the issue, opened back in start of may
Replies
Boosts
Views
Activity
Jul ’25