![]() ![]() It would be better if I could say “let ls access my Mail” rather than “let anything I run from Terminal access my Mail.” Ideally these permission grants would be applicable at the tool level, rather than at the application level. A consequence of this is that, unless I grant unlimited network access to Terminal, I can’t perform routine tasks such as pushing git changes to a server. I use the excellent TripMode to limit bandwidth usage when I’m traveling, and tethered to my phone. I’ve run into a variation of this problem in the past. This isn’t earth-shattering: it’s been the case forever that tools you run in the Terminal have access to “all your files.” But the new restrictions in macOS Mojave shine a light on a problem: the bluntness of security restrictions and relaxations with regard to Terminal. To grant myself the ability to list files in ~/Library/Mail, am I willing to grant the same access to every single thing I’ll ever run in Terminal? Now you can “ls” anything in your home folder, but absolutely every other thing you run in Terminal can as well. If you really wanted to regain access to these files via the Terminal, you have to grant the app “Full Disk Access.” This is a new section of the Security & Privacy pane in System Preferences. As a privacy enhancement, access to these files is now restricted unless apps have requested or been proactively granted access. In all previous macOS releases, this would list the contents of Apple’s internal Mail files. Don’t believe me? Try opening Applications > Utilities > Terminal, and run the following command: One consequence of these changes is that you can no longer access certain parts of your home directory from the Terminal. Activities such as running scripts, or using apps that access private information, are altered now such that users are prompted with one-time permission-granting requests. Subscribers get access to an exclusive podcast, members-only stories, and a special community.In macOS Mojave, Apple introduced a number of new security features that impact the day-to-day use of the computer. ![]() If you appreciate articles like this one, support us by becoming a Six Colors subscriber. It would certainly open the door to MacBooks with built-in cellular radios.) I’m dubious about whether Apple will ever bother to introduce this concept to macOS, but since WWDC is just around the corner, we can at least hope. (And yes, it’s still incredibly frustrating that the Mac is unable to change its behavior when it’s tethered to a cellular data network, a feature that’s been a part of iOS since the beginning. If you’ve ever been frustrated by your Mac destroying your data plan while tethered to your iPhone, you need to get TripMode. TripMode 2 costs $8, and the upgrade is free for existing TripMode users like me. There’s a raft of other features, too, including accessibility and localization support and much more optimized processor and memory usage. TripMode 2 also adds a new data-limiting feature that will turn off the spigot of data when you reach a predefined limit, letting you pace yourself and not swamp your data plan. My settings for doing work on my MacBook Air tethered to my iPhone are quite a bit different for my settings when I’m podcasting, for instance-and with TripMode 2, I can create different profiles for both situations and switch between them. Most exciting to me is support for profiles, allowing you to change between different sets of blocks depending on what kind of work you’re doing or the particular network you’re connected to. TripMode 2 was just released, and it’s an upgrade that addresses several of the original version’s shortcomings. I use it primarily to keep bandwidth use low during podcasting sessions so I can prioritize my podcast data, but its most broad use is probably controlling data when you’re using a Mac tethered to a cellular device or other metered data connection. ![]() One of my favorite Mac utilities is TripMode, which lets you control which apps have access to your network and alert you to how much data they’re using. Note: This story has not been updated for several years. TripMode 2: Control your Mac’s data usage
0 Comments
Leave a Reply. |