Manually Granting Applications Full Disk Access in macOS Catalina

M

Since the release of macOS Mojave, applications have required authorisation to access your personal data and locations including the ~/Documents and ~/Downloads directories.

Authorisation requests are routinely handled by macOS when an application requiring access is first launched. Occasionally, an application may need to be authorised by manually granting it access.

Before looking at how an application can be manually authorised, we need to configure Finder windows to display hard disks in the sidebar. Select Finder > Preferences > Sidebar and ensure that under Locations the Hard disk option is checked:

Sidebar preferences for Finder windows
Sidebar preferences for Finder windows

 

 

To manually authorise an application it needs to be given full disk access. Select System Preferences > Security & Privacy > Privacy > Full Disk Access and click the + button:

Full Disk Access pane of the Privacy tab
Full Disk Access pane of the Privacy tab

 

 

To give, say, the GitHub Desktop application full disk access, navigate to the /Applications directory, select GitHub Desktop.app and click Open:

Manually granting Full Disk Access to the GitHub Desktop application
Manually granting Full Disk Access to the GitHub Desktop application

 

 

With macOS Catalina, full disk access may need to be given to a program not located in the /Applications directory. An example is the bash interpreter that currently ships with macOS and whose binary is in the /bin directory.

To grant /bin/bash full disk access, first click Macintosh HD in the sidebar of the Open dialog:

Open dialog showing the MacIntosh HD volume
Open dialog showing the MacIntosh HD volume

 

 

The /bin directory – amongst others – isn’t shown until the ++. keys are pressed simultaneously:

Open dialog showing the MacIntosh HD volume including hidden items
Open dialog showing the MacIntosh HD volume including hidden items

 

 

Navigate to the /bin directory, select bash then click Open to grant the bash binary full disk access:

Using the open dialog to add the /bin/bash binary
Using the open dialog to add the /bin/bash binary

 

 

This Open dialog method can also be used to grant full disk access to an application by selecting a symbolic link that points to that application. An example is /usr/local/bin/bash which is a symbolic link to the bash binary /usr/local/Cellar/bash/5.0.16/bin/bash installed through Homebrew:

Using the open dialog to select the /usr/local/bin/bash symlink
Using the open dialog to select the /usr/local/bin/bash symlink

 

 

An alternative to the Open dialog method is to first navigate to the application in the Finder, then drag and drop the application icon onto the Full Disk Access pane of System Preferences:

Adding the /bin/bash binary using the Finder
Adding the /bin/bash binary using the Finder

 

 

This drag and drop method doesn’t work with symbolic links in macOS Catalina. While it is possible to drag and drop the symbolic link icon onto the Full Disk Access pane of System Preferences, the application the symbolic link points to doesn’t appear to be granted full disk access. Consequently, only the Open dialog method described above should be used with symbolic links.

Avoid adding the /usr/local/bin/bash symbolic link using the Finder
Avoid adding the /usr/local/bin/bash symbolic link using the Finder

 

 

About the author

A native Brit exiled in Japan, Steve spends too much of his time struggling with the Japanese language, dreaming of fish & chips and writing the occasional blog post he hopes others will find helpful.

1 response

1 Comment

  • The /bin directory – amongst others – isn’t shown until the ⇧+⌘+. That was very good advice, thanks!

Steve

Recent Comments

Recent Posts