Mobile menu toggle

macOS could make Full Disk Access harder for apps to get

By •

A disk icon used in a story about macOS 27.3 changing the way apps can ask for Full Disk Access.
A macOS 27.3 Full Disk Access change is possibly on the way.
Photo: Cult of Mac

A change to the way macOS 27.3 handles Full Disk Access could close a shortcut that apps use to get sweeping access to your Mac. Apps wouldn’t land in the permissions list on their own anymore.

It’s a small change, but it does hint at how Apple may make this powerful permission more deliberate to grant. For now, the feature flag behind it is reportedly switched off.

What the macOS 27.3 Full Disk Access change does

Full Disk Access is a macOS privacy permission that lets an app read and modify files across much of your Mac, including data normally protected from ordinary applications. Apple provides the permission so trusted utilities such as backup tools, antivirus software and file managers can do their jobs. But it’s also a powerful capability that could expose sensitive personal information if granted to an untrustworthy app.

That’s why Apple is looking at ways to make users go through extra steps to give apps Full Disk Access. Code researcher pdfu spotted the change in the macOS 27.3 beta 1 and shared it on X.

Right now, an app that reads a protected file without Full Disk Access gets no prompt. macOS automatically denies the request and logs it. But the app is then added to a list at System Settings > Privacy & Security > Full Disk Access, with the toggle off. The app can then ask users to open Settings and flip the switch.

That’s the shortcut that may go away. With a feature flag called TCC/FDA_WARNING turned on, macOS no longer automatically saves those denials. What it means is that users would have to add an app by hand, using the plus button or by dragging it in from Applications.

Don’t expect new warnings or dialogs just yet. The flag doesn’t add any, pdfu wrote, though its name hints they could show up in later betas. And it’s disabled in beta 1. Developers can reportedly ask users to drag an app icon into the panel, even with the flag on. But that’s still in development.

Apple promised tighter controls last month

Apple first flagged the changes on October 2 in a post for developers. The company warned that some developers use Full Disk Access in ways that might expose everything on a Mac, with users not fully understanding what they’re granting.

Apple says the permission exists so backup apps can work properly. The company also promised new controls so users can grant access through “very explicit user action.” It added that it making changes at a time that AI agents are a growing risk.

While it didn’t name any apps, the post landed just days after Meta’s Muse app reportedly read a columnist’s private messages. Meta disputes that.

Private Folders could fix things

In the beta, pdfu also found a new feature called Private Folders. It’s a new folder-by-folder permission, set up just like Full Disk Access. It’s not working right now, but could offer a narrower alternative.

The same flag affects it as well. With the flag on, automatic Private Folders denials aren’t saved either. That might matter a lot more than you’d think. But it’s still unclear whether that will work as not much is known about how Private Folders will function.

When macOS 27.3 could ship

macOS 27.3 beta 1 landed on November 3, and a public beta followed two days later. Public release is expected sometime in December.

Apple hasn’t confirmed whether the Full Disk Access change will go live before then, so we’ll have to see whether the flag flips on in the next beta.

Comments

Your email address will not be published. Required fields are marked *

  • Subscribe to the Newsletter

    Our daily roundup of Apple news, reviews and how-tos. Plus the best Apple tweets, fun polls and inspiring Steve Jobs bons mots. Our readers say: "Love what you do" -- Christi Cardenas. "Absolutely love the content!" -- Harshita Arora. "Genuinely one of the highlights of my inbox" -- Lee Barnett.