I'm trying to identify the source of each applet in the security and privacy panel. I assume there is a list that the panel refers to. Where can I find the list of applets referred in the security and privacy panel?
MacBook Pro 16″, macOS 12.5
As I understand your question, you would like to know how to determine the source, and therefore hopefully the validity, of items which appear in the Privacy Preferences requesting your approval to run on your system. I believe there currently is no way to tell. This has been a concern to me for some time.
I have several such instances on my computer. I leave them unchecked, so the associated processes do not have permission to run. This may cripple some legitimate software. The alternative, authorizing processes of unknown provenance, seems an extreme security risk and therefore to be avoided. Problems resulting in software crippled by not being given needed permissions are self-inflicted, much like any other coding error. Developers should provide software in a trustable form.
Yesterday I reported this issue to Apple via a Feedback Assistant report entitled "poorly labeled Privacy items invite trouble". Hopefully the message will be passed along to developers.
Meanwhile, stay safe. Do not enable anything you are not sure of. If you notice some app not working properly you might ask the developer if the mystery permission denied applies to them. If so, please ask them to identify the parts of their software more clearly in the future.
Sorry for the Delay but have combed the report in detail.
EtreCheckPro version: 6.7 (67009)
Report generated: 2022-08-04 01:30:49
Runtime: 4:25
Q - Performance: Below Average. MacBook Pro (16-inch, 2021), Apple M1 Max (m1) CPU: 10-core
A - For a machine like this one, this is an indicator of of some serious Software issues
Q - Description: Cannot identify the applets accessing my disk.
Q - System modifications - There are a large number of system modifications running in the background.
A - In my experience, running the computer with this many modifications, be they without intent, purposefully or without knowing exactly what Applications are doing to the system can and will have consequences.
Some of those consequence can include Giving Third Party Applications Full Disk Access making the computer more vulnerable that it could be.
As for Identifying the Source of the “ Applets “ in Privacy and Security >> Full Disk Access - try moving the Unknown Applets.
This may seem backwards and it is, but removing all of them will make the Applications either not function properly or Request Full Disk Access thereby, you the User will know exactly what Application are should appear in the Full Access section.
Q - Unsigned files - There are unsigned software files installed that could be malicious and should be reviewed.
A - Self explanatory and requires the User attention and to be actioned
Q - More than one antivirus app - This computer has multiple antivirus apps installed.
Q - Antivirus software: Apple, CleanMyMac, and Sophos
A - CleanMyMac aka BrickMyMac claims another victim
A -There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX Foundation and Permission Limitation.
Additionally, and specific to Big Sur macOS 11 and Monterey macOS 12, the Operating System resides in a Sealed and Read Only Volume that can not be opened by the User and protects against from “ Bad Actor “ Software.
The Only thing this Antivirus software is protecting is the Bank Account of the Developers and for zero return to the User aside from the problems this software creates.
AntiVirus Developers purposefully Market their product to create a “ Fear Factor “. In so doing, creating a False Need to for their Product.
The The Built in Security is all that is required to protect the computer.
A - Any Third Party Applications that will interfere with the normal operation of the OS, is an invitation for disaster and comprising the Operating System
Certain Applications maybe available on the Apple Apps Store - this only means the Developer is prepared to pay Apple a portion on each sale. What the Application may do to the computer is up to the User to check this out before purchase
Any of the below should be removed as per Developers Instructions
This will include CleanMyMac ,
It is suggested the user reads some of the Posting Specific to both above mentioned applications and the arrive at their own conclusions
Q - Runaway user process - A user process is using a large percentage of your CPU.
A - From what is reported in the Etrecheck Report, just about every Third Party Application or its Daemon is set to Launch when the computer start-up. Would suggest reviewing which Application are really Required to laugh at a cold boot up and which are not needed. The action this to improve overall performances
Q - System Software: macOS Monterey 12.5 (21G72)
A - Good up to date
Q - /Applications/ExpressVPN.app [Not Loaded] ExpressVPNSplitTunnel.kext - com.expressvpn.splittunnel (1.0.2 - SDK 10.17)
A - Commercial VPNs should only be used if Mandated by Corporate Head Office for working remotely. Otherwise - ones Privacy and Security touted by the VPN is suspect
If the User ( you ) need further Assistance or clarification - do not hesitant to post back with additional questions
For any Application ( or applet ) would Require the Administrator Account User to have given Explicit Authorization to Add these to Full Disk Access .
If the user does not know what Applications or Applets they have given this level Access to the Drive - not sure how to say this but the computer maybe be or could be severely compromised.
Understand, we are all working Remotely from all around the world.
Therefore, we do not have the On-Hands experience the User ( you ) has with this computer.
The next best thing for us to having a semi - actual On-Hand experience on this computer is to follow the steps below
Download the Application Etrecheck directly from the Developer.
The application is free or paid from added features.
It will take a Snap Shot - both the hardware and software.
The Report will Not Reveal Any Personal Information.
Post back the Full Report - copy and paste - using the Additional Text Icon ( 3rd Icon to last )
We can have a look at the report for possible issues and may have possible suggestions to resolve the issues.
I have no idea where any list exists. I would imagine it is a database somewhere.
Deleting the app will not remove the app from the list. The checkbox/slide switch (or whatever on/off widget they switch to) will enable or disable that setting for that app.
Take a look at this info on tccutil. https://eclecticlight.co/2020/01/28/a-guide-to-catalinas-privacy-protection-4-tccutil/
It’s from the time of the original rollout, but there may be something in there to point you to more info.
my question was how to identify the source of these applets in this image so I know where they come from, what they are and remove them.
Thank you for your suggestion. I've posted the additional text.
Thank you the Report.
I will dissect it in detail and get back to use as soon as I can
A Ultra Fast and passing look and see Multi AntiVirus Software installed
applets in security and privacy panel
