1 posts tagged ‘Transparency Consent and Control (TCC)’

• TCC and Gatekeeper Bypasses

  mjtsai, Oct 21, 2024

  Wojciech Reguła (September 2021, tweet): I was looking for code injection opportunities that may allow reaching TCC bypasses. My simple shell script discovered a potential victim - /System/Library/CoreServices/Applications/Directory Utility.app. It had (and has) the following private TCC entitlement[…] This entitlement allows the Directory Utility to modify the user’s records stored in the /var/db/dslocal/nodes directory. […] […]

  TechnologyApple Security BountyBugExploitExtended AttributesGatekeeperLaunch ServicesMacmacOS 12 MontereymacOS 14 SonomamacOS 15 SequoiaSafariSecuritySQLiteTransparency Consent and Control (TCC)VirtualizationZIP Archive