Whether they enable an App Store app to go beyond its sandbox, provide access to features that are privacy-protected, or give access to macOS features only permitted for approved apps, entitlements are important.
privacy
The difference between security and privacy, how consent and intent are obtained, how this works with command tools, important links, lists of protected resources and tccutil arguments.
Survey of other privacy controls, including those involved in scripting and for development. Details of the new control on access to devices on the local network.
These work differently from other privacy controls, and are required for Find My… and Activation Lock. There are some catches too, and no command tool to help.
Control access from apps to devices like cameras and microphones. How to check the reason for their request, and whether they have entitlement to do so. How to remove apps from the privacy lists, and more.
The difference between consent and intent, why an app adds itself to Settings, and when you should add it to Full Disk Access.
Permissions, privacy and security protections can conspire to prevent us from accessing our own files. They aren’t integrated, consistent or documented, and badly need improvement.
Permissions, ACLs, TCC’s privacy controls, SIP and app sandboxes. What they are, and how you can control them to access and maintain your files.
After years of limited controls, in Mojave (2018) Apple unleashed TCC and greatly enhanced privacy settings, that have come to dominate System Settings.
Recommendations for the ‘standard’ user for security and privacy protection from startup to shutdown. A broad overview of all key systems and how they fit together.
