Post

Replies

Boosts

Views

Activity

Full disk permissions for compliance script, or alternative?
Hey guys, so I'm writing a business compliance script for my company's internal audits, and part of it needs to validate that users are allowing time machine to make backups on a regular basis. tmutil listbackups ...does a great job of this in a shell script, but once I bundle the script into an application bundle, it fails to return any data. Realized it was because of "Full Disk Access" permissions - however, adding the application bundle explicitly to Prefs/Security & Privacy /Privacy/Full Disk Access makes no difference, nor does adding the script inside the app bundle, or whitelisting /usr/bin/bash. Part of the issue could be that I'm having users run this by putting a shell script in a .app package. (see: https:// mathiasbynens.be/notes/shell-script-mac-apps) If you run the script directly via terminal, and the terminal is whitelisted for disk access, it works fine. Is there any way to have the script request fill disk access from the user at runtime the way regular Mac apps do on first attempt? Could it be that I need to whitelist something else?
5
0
2.7k
Jan ’21