https://eclecticlight.co/2026/04/10/why-you-cant-trust-privacy-security/ Skip to content [eclecticlight] The Eclectic Light Company Macs & painting - No AI content Main navigation Menu * Downloads * Freeware * All Macs * M1-M5 Macs * Troubleshooting * Painting * Mac Front Page hoakley April 10, 2026 Macs, Technology Why you can't trust Privacy & Security [insenticon] In this Friday's magic demonstration, I'm going to show how what you see in Privacy & Security settings can be misleading, when it tells you that an app doesn't have access to a protected folder, but it really does. Although it appears you can achieve this using several ordinary apps, to make things simpler and clearer I've written a little app for this purpose, Insent, available from here: insent11 I'm working in macOS Tahoe 26.4, but I suspect you should see much the same in any version from macOS 13.5 onwards, as supported by Insent. [insent00] For this magic demo, I'm only going to use two of Insent's six buttons: * Open by consent, which results in Insent choosing a random text file from the top level of your Documents folder, and displaying its name and the start of its contents below. As it does this without involving the user in the process, the macOS privacy system TCC requires it to obtain the user's consent to list and access the contents of that protected folder. * Open from folder, which opens an Open and Save Panel where you select a folder. Insent then picks a random text file from the top level of that folder, and displays its name and the start of its contents below. Because you expressed your intent to access that protected folder, TCC considers that is good enough to give access without requiring any consent. Demonstration Once you have downloaded Insent, extracted it from its archive, and dragged the app from that folder into one of your Applications folders, follow this sequence of actions: 1. Open Insent, click on Open by consent, and consent to the prompt to allow it to access your Documents folder. Shortly afterwards, Insent will display the opening of one of the text files in Documents. Quit Insent. [insent01] 2. Open Privacy & Security settings, select Files & Folders, and confirm that Insent has been given access to Documents. [insent02] 3. Open Insent, click on Open by consent, and confirm it now gains access to a text file without asking for consent. Quit Insent. 4. Open Privacy & Security settings, select Files & Folders, and disable Documents access in Insent's entry there using the toggle. 5. Open Insent, click on Open by consent, and confirm that it can no longer open a text file, but displays [Couldn't get contents of Documents folder]. 6. Click on Open from folder and select your Documents folder there. Confirm that works as expected and displays the name and contents of one of the text files in Documents. 7. Click on Open by consent, and confirm that now works again. 8. Confirm that Documents access for Insent is still disabled in Files & Folders. 9. Whatever you do now, the app retains full access to Documents, no matter what is shown or set in Files & Folders. Indeed, the only way you can protect your Documents folder from access by Insent is to run the following command in Terminal: tccutil reset All co.eclecticlight.Insent then restart your Mac. That should set Insent's privacy settings back to their default. You can also demonstrate that this behaviour is specific to one protected folder at a time. If you select a different protected folder like Desktop or Downloads using the Open from folder button, then Insent still won't be able to list the contents of the Documents folder, as its TCC settings will function as expected. How does this work? Insent is an ordinary notarised app, and doesn't run in a sandbox or pull any clever tricks. When System Integrity Protection (SIP) is enabled some of its operations are sandboxed, though, including attempts to list or access the contents of locations that are protected by TCC. When you click on its Open by consent button, sandboxd intercepts the File Manager call to list the contents of Documents, as a protected folder. It then requests approval for that from TCC, as seen in the following log entries: 1.204592 Insent sendAction: 1.205160 Insent: trying to list files in ~/Documents 1.205828 sandboxd request approval 1.205919 sandboxd tcc_send_request_authorization() IPC TCC doesn't have authorisation for that access by Insent, either by Full Disk Access or specific access to Documents, so it prompts the user for their consent. If that's given, the following log entries show that being passed back to the sandbox, and the change being notified to com.apple.chrono, followed by Insent actioning the original request: 3.798770 com.apple.sandbox kTCCServiceSystemPolicyDocumentsFolder granted by TCC for Insent 3.802225 com.apple.chrono appAuth:co.eclecticlight.Insent] tcc authorization(s) changed 3.809558 Insent: trying to look in ~/Documents for text files 3.809691 Insent: trying to read from: /Users/hoakley/Documents/ asHelp.text 3.842101 Insent: read from: /Users/hoakley/Documents/asHelp.text If you then disable Insent's access to Documents in Privacy & Security settings, TCC denies access to Documents, and Insent can't get the list of its contents: 1.093533 com.apple.TCC AUTHREQ_RESULT: msgID=440.109, authValue=0, authReason=4, authVersion=1, desired_auth=0, error=(null), 1.093669 com.apple.sandbox kTCCServiceSystemPolicyDocumentsFolder denied by TCC for Insent 1.094007 Insent: couldn't get contents of ~/Documents If you then access Documents by intent through the Open and Save Panel, sandboxd no longer intercepts the request, and TCC therefore doesn't grant or deny access: 0.897244 Insent sendAction: 0.897318 Insent: trying to list files in ~/Documents 0.900828 Insent: trying to look in ~/Documents for text files 0.901112 Insent: trying to read from: /Users/hoakley/Documents/ T2M2_2026-01-06_13_03_00.text 0.904101 Insent: read from: /Users/hoakley/Documents/ T2M2_2026-01-06_13_03_00.text Thus, access to a protected folder by user intent, such as through the Open and Save Panel, changes the sandboxing applied to the caller by removing its constraint to that specific protected folder. As the sandboxing isn't controlled by or reflected in Privacy & Security settings, that allows TCC, in Files & Folders, to continue showing access restrictions that aren't applied because the sandbox isn't applied. Conclusion Access restrictions shown in Privacy & Security settings, specifically those to protected locations in Files & Folders, aren't an accurate or trustworthy reflection of those that are actually applied. It's possible for an app to have unrestricted access to one or more protected folders while its listing in Files & Folders shows it being blocked from access, or for it to have no entry at all in that list. Is this likely to occur? Most apps that want access to protected folders like Documents appear to seek that during their initialisation, and before any user interaction that could result in intent overriding the need for consent. However, many users report that apps appear to have access to Documents but aren't listed in Files & Folders, suggesting that at some time that sequence of events does occur. To be effectively exploited this would need careful sequencing, and for the user to select the protected folder in an Open and Save Panel, so drawing attention to the manoeuvre. Most concerning is the apparent permanence of the access granted, requiring an arcane command in Terminal and a restart in order to reset the app's privacy settings. It's hard to believe that this was intended to trap the user into surrendering control over access to protected locations. But it can do. I'm very grateful to Richard for drawing my attention to this. Share this: * Share on X (Opens in new window) X * Share on Facebook (Opens in new window) Facebook * Share on Reddit (Opens in new window) Reddit * Share on Pinterest (Opens in new window) Pinterest * Share on Threads (Opens in new window) Threads * Share on Mastodon (Opens in new window) Mastodon * Share on Bluesky (Opens in new window) Bluesky * Email a link to a friend (Opens in new window) Email * Print (Opens in new window) Print * Like Loading... Related Posted in Macs, Technology and tagged bug, folders, Insent, log, privacy, sandbox, TCC. Bookmark the permalink. 5Comments Add yours 1. 1 Extrawdw's avatar Extrawdw on April 10, 2026 at 7:55 am Reply After step 6, a `com.apple.macl` xattr is added to `~/Documents`, which, I believe is what gives Documents access to Insent. I'm not sure if `tccutil reset All co.eclecticlight.Insent` will remove access granted by MACL, but running `xattr -d com.apple.macl path/to/Documents` under recovery mode will definitely do. LikeLiked by 1 person + 2 hoakley's avatar hoakley on April 10, 2026 at 1:00 pm Reply Yes, I believe the macl xattr is the key that escapes the sandboxing. I still haven't seen an explanation of how this works, though, and it certainly doesn't appear to work through TCC, but at a lower level. I suspect that tccutil command clears the macl database entry, so leaving the default sandboxing in effect. It's annoying that it requires a full restart to come into effect, though, and crazy that TCC doesn't change the Files & Folders listing. Howard. LikeLike o 3 hoakley's avatar hoakley on April 10, 2026 at 5:28 pm Reply I've confirmed the problem here: although tccutil reset does remove that macl from the database (wherever that might be), the xattr remains in place. So even if you know what's opened the sandbox, you still can't tell whether the app does have free access to that protected folder. And as macl xattrs are protected by SIP, it's non-trivial to remove them. Howard. LikeLike 2. 4 Arnaud's avatar Arnaud on April 10, 2026 at 2:38 pm Reply Do you happen to know what are the possible values for authReason in the "1.093533 com.apple.TCC AUTHREQ_RESULT: msgID=440.109, authValue=0, authReason=4, authVersion=1, desired_auth=0, error= (null)," log? (just wondering; this can lead to understanding more on the subject) LikeLiked by 1 person + 5 hoakley's avatar hoakley on April 10, 2026 at 2:39 pm Reply Sorry, I don't have a clue. Howard LikeLike Leave a comment Cancel reply [ ] [ ] [ ] [ ] [ ] [ ] [ ] D[ ] Quick Links * Free Software Menu * System Updates * Mac Troubleshooting Summary * M-series Macs * Painting Search Search for: [ ] [Search] Monthly archives * April 2026 (26) * March 2026 (82) * February 2026 (71) * January 2026 (72) * December 2025 (75) * November 2025 (74) * October 2025 (75) * September 2025 (78) * August 2025 (76) * July 2025 (77) * June 2025 (74) * May 2025 (76) * April 2025 (73) * March 2025 (78) * February 2025 (67) * January 2025 (75) * December 2024 (74) * November 2024 (73) * October 2024 (78) * September 2024 (77) * August 2024 (75) * July 2024 (77) * June 2024 (71) * May 2024 (79) * April 2024 (75) * March 2024 (81) * February 2024 (72) * January 2024 (78) * December 2023 (79) * November 2023 (74) * October 2023 (77) * September 2023 (77) * August 2023 (72) * July 2023 (79) * June 2023 (73) * May 2023 (79) * April 2023 (73) * March 2023 (76) * February 2023 (68) * January 2023 (74) * December 2022 (74) * November 2022 (72) * October 2022 (76) * September 2022 (72) * August 2022 (75) * July 2022 (76) * June 2022 (73) * May 2022 (76) * April 2022 (71) * March 2022 (77) * February 2022 (68) * January 2022 (77) * December 2021 (75) * November 2021 (72) * October 2021 (75) * September 2021 (76) * August 2021 (75) * July 2021 (75) * June 2021 (71) * May 2021 (80) * April 2021 (79) * March 2021 (77) * February 2021 (75) * January 2021 (75) * December 2020 (77) * November 2020 (84) * October 2020 (81) * September 2020 (79) * August 2020 (103) * July 2020 (81) * June 2020 (78) * May 2020 (78) * April 2020 (81) * March 2020 (86) * February 2020 (77) * January 2020 (86) * December 2019 (82) * November 2019 (74) * October 2019 (89) * September 2019 (80) * August 2019 (91) * July 2019 (95) * June 2019 (88) * May 2019 (91) * April 2019 (79) * March 2019 (78) * February 2019 (71) * January 2019 (69) * December 2018 (79) * November 2018 (71) * October 2018 (78) * September 2018 (76) * August 2018 (78) * July 2018 (76) * June 2018 (77) * May 2018 (71) * April 2018 (67) * March 2018 (73) * February 2018 (67) * January 2018 (83) * December 2017 (94) * November 2017 (73) * October 2017 (86) * September 2017 (92) * August 2017 (69) * July 2017 (81) * June 2017 (76) * May 2017 (90) * April 2017 (76) * March 2017 (79) * February 2017 (65) * January 2017 (76) * December 2016 (75) * November 2016 (68) * October 2016 (76) * September 2016 (78) * August 2016 (70) * July 2016 (74) * June 2016 (66) * May 2016 (71) * April 2016 (67) * March 2016 (71) * February 2016 (68) * January 2016 (90) * December 2015 (96) * November 2015 (103) * October 2015 (119) * September 2015 (115) * August 2015 (117) * July 2015 (117) * June 2015 (105) * May 2015 (111) * April 2015 (119) * March 2015 (69) * February 2015 (54) * January 2015 (39) Tags APFS Apple Apple silicon backup Big Sur Blake Bonnard bug Catalina Consolation Console Corinth Disk Utility Dore El Capitan extended attributes Finder firmware Gatekeeper Gerome High Sierra history history of painting iCloud Impressionism landscape LockRattler log M1 Mac Mac history macOS macOS 10.12 macOS 10.13 macOS 10.14 macOS 10.15 macOS 11 macOS 12 macOS 13 macOS 14 macOS 15 malware Metamorphoses Mojave Monet Monterey Moreau myth narrative OS X Ovid painting performance Pissarro Poussin privacy Renoir riddle Rubens Sargent security Sierra SilentKnight Sonoma SSD Swift Time Machine Tintoretto Turner update upgrade Ventura xattr Xcode XProtect Statistics * 22,018,470 hits Blog at WordPress.com. Footer navigation * About & Contact * Free Software Menu * Macs * Painting * Downloads * SilentKnight, Skint, SystHist, silnite, LockRattler & Scrub * XProCheck, T2M2, LogUI, Ulbow, blowhole and log utilities * Mints: a multifunction utility * xattred, SpotTest, Providable, Spotcord, Metamer & xattr tools * Versatility & Revisionist * DelightEd & Podofyllin * Precize, Alifix, UTIutility, Sparsity, alisma, Taccy, Signet * System Updates * Spundle, Cormorant, Stibium, DropSum, Dintch, Fintch and cintch * Virtualisation on Apple silicon * Cirrus & Bailiff * Text Utilities: Textovert, Disclipper, Nalaprop, Dystextia and others * sysctl information * Extended attributes (xattrs) * 32-bitCheck & ArchiChect * Keychains & Permissions * PDF * VisualLookUpTest * Updates * Long Reads * Mac Troubleshooting Summary * Saturday Mac Riddles * Last Week on My Mac * Painting topics * Mac problem-solving * M-series Macs Secondary navigation * Search Post navigation Apple has released an update to XProtect for all macOS Naturalists: The modern meal Search for: [ ] [Search] Begin typing your search above and press return to search. Press Esc to cancel. * Comment * Reblog * Subscribe Subscribed + [croppe] The Eclectic Light Company Join 9,038 other subscribers [ ] Sign me up + Already have a WordPress.com account? Log in now. * + [croppe] The Eclectic Light Company + Subscribe Subscribed + Sign up + Log in + Copy shortlink + Report this content + View post in Reader + Manage subscriptions + Collapse this bar Loading Comments... Write a Comment... [ ] Email (Required) [ ] Name (Required) [ ] Website [ ] [Post Comment] %d [b]