Skip to content

fix: detect Full Disk Access on macOS 27 without user TCC.db - #41

Open
AltFl0w wants to merge 1 commit into
bysiber:mainfrom
AltFl0w:fix/macos27-full-disk-access-probe
Open

fix: detect Full Disk Access on macOS 27 without user TCC.db#41
AltFl0w wants to merge 1 commit into
bysiber:mainfrom
AltFl0w:fix/macos27-full-disk-access-probe

Conversation

@AltFl0w

@AltFl0w AltFl0w commented Sep 6, 2026

Copy link
Copy Markdown

Fixes #40

macOS 27 moved the user TCC database out of ~/Library/Application Support/com.apple.TCC/TCC.db. ClearDisk 2.3.1 used fileExists on that path as the Full Disk Access probe, so onboarding stayed on Not enabled yet after the user enabled the app in System Settings.

This changes the probe to a real capability check:

  1. Read /Library/Application Support/com.apple.TCC/TCC.db when it exists (SQLite header required).
  2. Skip the old user TCC path if it is missing, instead of treating that as denial.
  3. Fall back to contentsOfDirectory on protected locations ClearDisk actually scans (~/Library/Safari, ~/Library/Mail, ~/Library/Containers/com.apple.stocks).

Verified on macOS 27.0 (26A5425a): the user TCC path is missing, the system TCC database still exists, and a directory listing of Safari/Mail/Stocks succeeds after Full Disk Access is granted.

On macOS 27 the user TCC database no longer lives at
~/Library/Application Support/com.apple.TCC/TCC.db, so fileExists
always failed and onboarding stayed on "Not enabled yet".

Probe a real read of the system TCC database first, then fall back
to listing protected app-data directories. Missing paths are skipped
instead of treated as denial.

Fixes bysiber#40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] macOS 27: Full Disk Access remains “Not enabled yet” because the user TCC database probe no longer exists

1 participant