How ssh is by default given full access to private data, and how removing it from the Privacy pane only enables that access.
TCC
This article is being replaced with a completely fresh one which should be far more accurate.
Which of the three vulnerabilities in privacy protection has been fixed in 10.14.1? Is it good protection now?
A new version of Mojave brings some fixes, and introduces some new bugs. Here a few for starters. I’ll add more as we discover them.
If privacy is a fundamental human right, should we also have access to the private data held on our Macs? Tim Cook’s 4 principles are starting points for debate, and Apple needs to discuss more than to dictate.
Permissions, ACLs, SIP, TCC privacy protection, and now DataVaults – Mojave has many ways of stopping software from opening files and folders.
Now reports the version number of TCC_Compatibility.bundle in Mojave, to watch for pushed updates of this from Apple.
TCC observed loading overrides during startup, and two typical sequences responding to access requests. Useful tips for fixing problems.
Mojave checks newly-installed apps which are not from the App Store more thoroughly, and handles notarized apps differently too. Here are some details.
How command tools gain access to protected data, through their Attribution Chain. Diagnosing their problems, and fixing them.
The Eclectic Light Company 