Apple to introduce new controls for Mac Full Disk Access permission
Apple announced changes to the Mac’s Full Disk Access permission, aiming to tighten security controls for applications accessing drive data.
Key points
- Apple announced new controls for Full Disk Access on macOS last week.
- The permission currently allows apps to read nearly everything on a user’s drive.
- Details on the specific changes remain unclear, leading to industry speculation.
Apple announced last week that it is adding new controls to Full Disk Access on the Mac, a permission that currently allows applications to read nearly all data on a user’s drive. The company provided initial details to developers regarding these upcoming changes.
According to 9to5Mac, the announcement has triggered significant speculation within the security community about the exact nature of these modifications. The outlet reported that Apple’s communication to developers served as the catalyst for widespread discussion regarding how these new controls will function and what specific behaviors they will restrict.
Context and Background
Full Disk Access is a critical permission in macOS that grants an application the ability to read files and data across the entire system drive. This level of access is necessary for certain system functions and backup utilities but also presents a potential security risk if granted to malicious or poorly secured applications.
The recent announcement by Apple indicates a shift in how this permission will be managed. While the company confirmed that changes are coming, it did not provide a comprehensive technical specification in the initial communication. This lack of detail has led to varied interpretations among security professionals and developers about the scope of the new controls.
Who is Affected
The changes primarily impact software developers who create applications for macOS that require Full Disk Access. These developers must now prepare for a modified permission model. Additionally, system administrators and security professionals who manage Mac fleets will need to monitor how these changes affect their existing security policies and application approvals.
End users may see changes in how applications request and maintain this permission. The new controls are intended to enhance the security posture of the operating system by limiting unnecessary access to sensitive data. However, the exact user experience changes have not been fully detailed.
What should you do?
Security professionals and developers should monitor official Apple developer channels for further technical documentation. It is advisable to review current applications that utilize Full Disk Access to understand their data access patterns. Organizations should prepare to update their security testing procedures to account for the new permission controls once more details are released.
What to do and how to stay safe: Apple
- Review applications in your environment that currently hold Full Disk Access permissions.
- Monitor Apple’s developer documentation for technical specifications on the new controls.
- Update internal security policies to reflect potential changes in permission requests.
- Test application compatibility with the new permission model once beta software is available.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is Full Disk Access on macOS?
Full Disk Access is a permission that allows an app to read nearly everything on the user’s drive.
When did Apple announce these changes?
Apple announced the changes to developers last week.
What are the specific details of the new controls?
The exact details of the changes are not yet fully known, leading to speculation in the security community.
