Detecting Full Disk Access on macOS 27 — TCC.db path no longer usable

We have been using this path to detect whether Full Disk Access is granted:

~/Library/Application Support/com.apple.TCC/TCC.db

Since macOS [27], reading this path fails with access denied even when Full Disk Access has been granted to the app, so the check now reports a false negative.

Questions:

  1. Is there an API an app can use to detect whether Full Disk Access has been

granted to it? 2. If not, is there another supported method to detect it? 3. If this path is no longer usable, which path can we probe to reliably determine that Full Disk Access is granted?

  1. Is there an API an app can use to detect whether Full Disk Access has been granted to it?
  2. If not, is there another supported method to detect it?
  3. If this path is no longer usable, which path can we probe to reliably determine that Full Disk Access is granted?

The answer to all three of these questions remains "no", due to the issues outlined in this thread. If you can provide some more details about your specific need for FDA then I may be able to provide more guidance, but there isn't currently a "general" solution to this issue.

__
Kevin Elliott
DTS Engineer, CoreOS/Hardware

Detecting Full Disk Access on macOS 27 — TCC.db path no longer usable
 
 
Q