Thanks for your reply. About Full Disk Access permission, when deployed via MDM, TCC db query seems also not correct in some machines. sudo sqlite3 "/Library/Application Support/com.apple.TCC/TCC.db" \ "SELECT service, client, auth_value, auth_reason FROM access WHERE client LIKE 'bundleid%';" Do we have other method that can correctly check Full Disk Access permission granted by MDM profile? Thanks

Thanks @eskimo Yes, I use sudo to launch process BB for testing. From you provided execution context, I know it can not work. As My understanding, It should post notification between launch daemon and launch daemon, or GUI application and GUI application. except when it need post notification from daemon to GUI application, it need to use NSDistributedNotificationPostToAllSessions option.