{"id":3766,"date":"2019-06-09T17:47:55","date_gmt":"2019-06-09T22:47:55","guid":{"rendered":"https:\/\/dev.iachieved.it\/iachievedit\/?p=3766"},"modified":"2019-12-02T07:43:27","modified_gmt":"2019-12-02T13:43:27","slug":"macos-10-15-catalina-adds-additional-filesystem-restrictions","status":"publish","type":"post","link":"https:\/\/dev.iachieved.it\/iachievedit\/macos-10-15-catalina-adds-additional-filesystem-restrictions\/","title":{"rendered":"macOS 10.15 Catalina Adds Additional Filesystem Restrictions"},"content":{"rendered":"

macOS 10.15 (Catalina) has added additional Privacy restrictions that require user intervention before applications can access the certain portions of the filesystem. Not only that, but taking screenshots for this post required permissions to be explicitly granted to Skitch<\/a>. If you find that Skitch only gives you a screenshot of your Mac’s background, this is the post for you. The fact that macOS 10.15 introduces new security and privacy safeguards is unsurprising as we got introduced to stricter automation controls<\/a> in Catalina’s predecessor.<\/p>\n

Let’s look at what happens when we try to cd ~\/Documents<\/code> in the macOS 10.15 Terminal<\/code> app:<\/p>\n

\"\"<\/a><\/p>\n

We’re greeted by a dialog box presented by Finder requesting specific permission for Terminal<\/code> to access files in the Documents<\/code> folder:<\/p>\n

\"\"<\/a><\/p>\n

\"Terminal\" would like to access files in your Documents folder.<\/code> Once this permission is granted, Terminal<\/code> can access the contents of ~\/Documents<\/code>. If the permission isn’t<\/i> granted, trying to ls ~\/Documents<\/code> results in something along the lines of:<\/p>\n

[code lang=text]
\n# ls ~\/Documents
\nls: Documents: Operation not permitted
\n[\/code]<\/p>\n

Updating which filesystem access permissions have been granted for a given application can be accomplished in the Security & Privacy<\/code> preference panel. In this example Terminal<\/code> has been granted access to the Documents<\/code> folder whereas iTerm<\/code> has not been granted any access.<\/p>\n

\"\"<\/a><\/p>\n

It was an added bonus while writing this post that even trying to take a screenshot with Skitch<\/code> on Catalina prompted a dialog requesting explicit access. The final result was that I’ve now authorized Skitch<\/code> to capture my screen:<\/p>\n

\"\"<\/a><\/p>\n

There has been much speculation regarding Apple’s WWDC 2019 announcement of Sign in with Apple<\/a> as to its real intent. What is clear (to me, at least) is that Apple is positioning itself as the guardian of security and privacy (compared to Facebook and Google who are clearly not in the interest of safeguarding either), whether it is Sign in with Apple<\/code> or tighter controls around what applications can access your data on your own Mac.<\/p>\n","protected":false},"excerpt":{"rendered":"

macOS 10.15 (Catalina) has added additional Privacy restrictions that require user intervention before applications can access the certain portions of the filesystem. Not only that, but taking screenshots for this post required permissions to be explicitly granted to Skitch. If you find that Skitch only gives you a screenshot of your Mac’s background, this is […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-3766","post","type-post","status-publish","format-standard","hentry","category-apple"],"_links":{"self":[{"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/posts\/3766"}],"collection":[{"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/comments?post=3766"}],"version-history":[{"count":8,"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/posts\/3766\/revisions"}],"predecessor-version":[{"id":3912,"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/posts\/3766\/revisions\/3912"}],"wp:attachment":[{"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/media?parent=3766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/categories?post=3766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.iachieved.it\/iachievedit\/wp-json\/wp\/v2\/tags?post=3766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}