Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/kenchan0130/TCC-Permitter
Allow services that are denied in the TCC database.
https://github.com/kenchan0130/TCC-Permitter
jamf jamf-pro macadmins macos shell zsh
Last synced: about 20 hours ago
JSON representation
Allow services that are denied in the TCC database.
- Host: GitHub
- URL: https://github.com/kenchan0130/TCC-Permitter
- Owner: kenchan0130
- License: mit
- Created: 2020-12-02T13:45:20.000Z (almost 4 years ago)
- Default Branch: dev
- Last Pushed: 2021-05-18T15:42:31.000Z (over 3 years ago)
- Last Synced: 2024-05-01T20:57:44.621Z (6 months ago)
- Topics: jamf, jamf-pro, macadmins, macos, shell, zsh
- Language: Shell
- Homepage:
- Size: 60.5 KB
- Stars: 11
- Watchers: 4
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# TCC Permitter
Allow services that are denied in the TCC database.
## Background
For devices under management, there are some User Consent items that cannot be allowed even with PPPC.
If you have not granted administrators, the end user cannot change the access rights of some applications in the [System Preferences] > [Security & Privacy] > [Privacy] UI.
Therefore, I have created a script to force the User Consent item to be allowed.
## Requirements
* Full disk access
* This script reads TCC database
* macOS 10.14 Mojave or later
## How to use
### With command line
The script will require two arguments.
```sh
./TCC-Permitter.sh
```
If you want to allow camera of zoom app, you should run the following command:
```sh
./TCC-Permitter.sh "us.zoom.xos" "Camera"
```
### With Jamf Pro
1. Upload this script to Jamf Pro.
1. Create new policy with the script.
1. Set arguments for the script.
1. Bundle ID or Binary path
1. TCC service name
If you want to allow camera of zoom app, the setting will look like the image below.
### Parameters
#### Bundle ID or Binary path
If you want to get the bundle ID of the target application, the following command may be of help.
```sh
mdls -name kMDItemCFBundleIdentifier -r /Applications/zoom.us.app
```
And if you want to check the current status of the TCC database, the following command may be of help.
```sh
sqlite3 -header "$HOME/Library/Application Support/com.apple.TCC/TCC.db" "SELECT service, client, allowed FROM access"
```
#### TCC service name
You can specify one of the following list
It is case-insensitive.
If you want to specify more than one, you can use comma-separated values like:
```sh
./TCC-Permitter.sh "us.zoom.xos" "Camera,Microphone,ScreenCapture"
```
* Accessibility
* AddressBook
* All
* AppleEvents
* BluetoothAlways
* BluetoothPeripheral
* BluetoothWhileInUse
* Calendar
* Calls
* Camera
* ContactsFull
* ContactsLimited
* DeveloperTool
* FaceID
* Facebook
* FileProviderDomain
* FileProviderPresence
* KeyboardNetwork
* LinkedIn
* ListenEvent
* Liverpool
* Location
* Gone by 11.0
* MSO
* MediaLibrary
* Microphone
* Motion
* Photos
* PhotosAdd
* PostEvent
* Reminders
* ScreenCapture
* SensorKitAmbientLightSensor
* SensorKitDeviceUsage
* SensorKitElevation
* SensorKitForegroundAppCategory
* SensorKitKeyboardMetrics
* SensorKitLocationMetrics
* SensorKitMessageUsage
* SensorKitMotion
* SensorKitMotionHeartRate
* SensorKitOdometer
* SensorKitPedometer
* SensorKitPhoneUsage
* SensorKitSpeechMetrics
* SensorKitStrideCalibration
* SensorKitWatchAmbientLightSensor
* SensorKitWatchFallStats
* SensorKitWatchForegroundAppCategory
* SensorKitWatchHeartRate
* SensorKitWatchMotion
* SensorKitWatchOnWristState
* SensorKitWatchPedometer
* SensorKitWatchSpeechMetrics
* ShareKit
* SinaWeibo
* Siri
* SpeechRecognition
* SystemPolicyAllFiles
* SystemPolicyDesktopFolder
* SystemPolicyDeveloperFiles
* SystemPolicyDocumentsFolder
* SystemPolicyDownloadsFolder
* SystemPolicyNetworkVolumes
* SystemPolicyRemovableVolumes
* SystemPolicySysAdminFiles
* TencentWeibo
* Twitter
* Ubiquity
* Willow