macOS Containers and defaults

Jeff Johnson:

If Terminal app has Full Disk Access, then defaults write com.apple.Safari is smart enough to use the preferences file in Safari’s container. But if Terminal does not have Full Disk Access, then defaults falls back to the preferences in the ~/Library/Preferences folder! So if you do defaults write com.apple.Safari IncludeInternalDebugMenu -bool true without Full Disk Access, it’ll write to ~/Library/Preferences/com.apple.Safari.plist, but that has no effect, because Safari is sandboxed and only reads preferences from its own container. Note that this happens even if there’s no old file at ~/Library/Preferences/com.apple.Safari.plist, because defaults will create a new file when necessary.

Previously:

• Safari 14

Update (2020-11-02): See also: Dan Moren.

Mac macOS 10.15 Catalina macOS 11.0 Big Sur Privacy Safari Sandboxing System Integrity Protection Terminal Transparency Consent and Control (TCC)

Comments RSS · Twitter

Leave a Comment