I finally got around to blogging about this, and a separate bug (CVE-2024-44219). If you're interested in homedir TCC protections, enforcement via `sandboxd` or the sandbox kernel extension, I'd be pleased if you took a quick look! rdowd.com/castles-made-of-sa…
I doubt that I was the first to find this quirky bug, however the impact of basically having tccd fail open was very easy to overlook. Remains unpatched in Ventura and Sonoma unfortunately.

Aug 19, 2026 · 3:50 AM UTC

5
9
48
8,871
Sort replies: Relevant Recent Liked
Replying to @_rdowd
Nice research, congrats!
1
2
233
Thank you Mickey!
64
Replying to @_rdowd
Well done!
1
1
170
Thanks Csaba!
1
86
Replying to @_rdowd
I think it's a great writeup!
1
1
157
Thanks JBO, that means a lot mate!
1
103
Replying to @_rdowd
I loved this!
1
2
216
I learned from the best ;)
1
2
125