Prompt to access data from other apps #16844
Description
Since building with Xcode 16.2 Build version 16C5032a, the Transparency Consent and Control (TCC) of macOS triggers a warning for kTCCServiceSystemPolicyAppData when accessing the group container ~/Library/Group Containers/G69SCX94XU.duck.
Relevant log trace
2025-02-02 12:45:32.158957+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity matchesCodeRequirement:]: SecStaticCodeCheckValidity() static code (0xb563a6a00) from ch.sudo.cyberduck : identifier "ch.sudo.cyberduck" and (anchor apple generic and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G69SCX94XU) or certificate root = H"a1fb64aab7a4441436d50b91f310bf8c3dafc22c"); status: 0
2025-02-02 12:45:32.158985+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] Session authorization eval: 5
2025-02-02 12:45:32.158997+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] DB pid: 17531 pid_version: 50347 boot_uuid: 5E838996-27AC-4973-A174-4352774F3726
2025-02-02 12:45:32.159011+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] Request pid: 17533 pid_version: 50352 boot_uuid: 5E838996-27AC-4973-A174-4352774F3726
2025-02-02 12:45:32.159022+0100 0xa0781 Default 0x66b771 1070 0 tccd: [com.apple.TCC:access] Session scoped auth is invalid for client: ch.sudo.cyberduck
2025-02-02 12:45:32.159100+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity matchesCodeRequirement:]: SecStaticCodeCheckValidity() static code (0xb563a6a00) from ch.sudo.cyberduck : anchor apple; status: -67050
2025-02-02 12:45:32.159111+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] For ch.sudo.cyberduck: matches platform requirements: No
2025-02-02 12:45:32.169797+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] -[TCCDPlatformMacOS promptingPolicyForIdentity:accessingService:withAttributionChain:]: promptPolicy = 0; isApplePlatformBinary = 0
2025-02-02 12:45:32.169857+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] Handling access request to kTCCServiceSystemPolicyAppData, from Sub:{ch.sudo.cyberduck}Resp:{TCCDProcess: identifier=ch.sudo.cyberduck, pid=17533, auid=502, euid=502, binary_path=/Users/dkocher/Desktop/Cyberduck Nightly.app/Contents/MacOS/Cyberduck}, ReqResult(Auth Right: Unknown (Service Policy), promptType: 1,DB Action:None)
2025-02-02 12:45:32.172832+0100 0xa0781 Debug 0x66b771 1070 0 tccd: [com.apple.TCC:access] -[TCCDAccessIdentity designatedRequirementData]: DR for identifier ch.sudo.cyberduck with static code 0xb563a6a00: identifier "ch.sudo.cyberduck" and (anchor apple generic and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G69SCX94XU) or certificate root = H"a1fb64aab7a4441436d50b91f310bf8c3dafc22c")
2025-02-02 12:45:32.172891+0100 0xa0781 Debug 0x66b771 1070 0 tccd: [com.apple.TCC:access] Access Subject: Sub:{ch.sudo.cyberduck}Resp:{TCCDProcess: identifier=ch.sudo.cyberduck, pid=17533, auid=502, euid=502, binary_path=/Users/dkocher/Desktop/Cyberduck Nightly.app/Contents/MacOS/Cyberduck}: DR: identifier "ch.sudo.cyberduck" and (anchor apple generic and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G69SCX94XU) or certificate root = H"a1fb64aab7a4441436d50b91f310bf8c3dafc22c")
2025-02-02 12:45:32.173108+0100 0xa0781 Default 0x66b771 1070 0 tccd: [com.apple.TCC:access] AUTHREQ_PROMPTING: msgID=648.717, service=kTCCServiceSystemPolicyAppData, subject=Sub:{ch.sudo.cyberduck}Resp:{TCCDProcess: identifier=ch.sudo.cyberduck, pid=17533, auid=502, euid=502, binary_path=/Users/dkocher/Desktop/Cyberduck Nightly.app/Contents/MacOS/Cyberduck},
2025-02-02 12:45:32.173134+0100 0xa0781 Default 0x66b771 1070 0 tccd: [com.apple.TCC:access] got authorization choices for staged prompting request: legacy SPI: 0 service: kTCCServiceSystemPolicyAppData currentAuth: 1 desiredAuth: 2
2025-02-02 12:45:32.173147+0100 0xa0781 Default 0x66b771 1070 0 tccd: [com.apple.TCC:access] aButtonAuth: 5 bButtonAuth: 0 cButtonAuth: 1
2025-02-02 12:45:32.174472+0100 0xa0781 Default 0x66b771 1070 0 tccd: [com.apple.TCC:access] found general usage key: (null)
2025-02-02 12:45:32.174514+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] /Users/dkocher/Desktop/Cyberduck Nightly.app/Contents/MacOS/Cyberduck (offset 114688) linked against SDK version 0xf0200, platform: 1
2025-02-02 12:45:32.174532+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] No usage string found (key:NSAppDataUsageDescription) for client[17533] in bundle:/Users/dkocher/Desktop/Cyberduck Nightly.app
2025-02-02 12:45:32.174544+0100 0xa0781 Debug 0x66b771 1070 0 tccd: [com.apple.TCC:access] Usage key:NSAppDataUsageDescription service sdk version: 0xffffffff; client[17533](/Users/dkocher/Desktop/Cyberduck Nightly.app) sdk version: 0xf0200
2025-02-02 12:45:32.174554+0100 0xa0781 Default 0x66b771 1070 0 tccd: [com.apple.TCC:access] usage description: (null), minSDKVersionAuthSpecific: 0x0, client_sdk_verison: 0xf0200
2025-02-02 12:45:32.174574+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] Per-App Default Purpose String key: REQUEST_DEFAULT_PURPOSE_STRING_SERVICE_kTCCServiceSystemPolicyAppData, client[17533](/Users/dkocher/Desktop/Cyberduck Nightly.app) sdk version: 0xf0200: usage string: 'Keeping app data separate makes it easier to manage your privacy and security.'
2025-02-02 12:45:32.174589+0100 0xa0781 Info 0x66b771 1070 0 tccd: [com.apple.TCC:access] display_prompt: called for ch.sudo.cyberduck for service kTCCServiceSystemPolicyAppData
2025-02-02 12:45:32.174669+0100 0xa0781 Debug 0x66b771 1070 0 tccd: [com.apple.TCC:access] notification_dictionary: {
AlertHeader = "\U201cCyberduck Nightly.app\U201d would like to access data from other apps.";
AlertMessage = "Keeping app data separate makes it easier to manage your privacy and security.";
AlternateButtonTitle = "Don\U2019t Allow";
DefaultButtonTitle = Allow;
EnsureVisibilityForProcessID = 17533;
IconURL = "file:///private/var/folders/1f/t_d5xh9x4js1j0gt3z7tsmbh0000gp/T/com.apple.tccd/kTCCServiceSystemPolicyAppData.png";
LocalizationURL = "file:///System/Library/PrivateFrameworks/TCC.framework/";
SBUserNotificationDefaultButtonTag = 32;
}