CoreServicesUIAgent.app

[Kaltsas]

This morning I have several reports of users systems prompting them

"CoreServicesUIAgent.app" is trying to gain access to your calendar. Do you want to allow?”

I note an event involving CoreServicesUIAgent on my workstation from the day I updated to 10.9.2 though I was never prompted for anything.

It's not very intuitive as to what is going on here, does anyone know exactly what CoreServicesUIAgent does, and what it's relation to the calendars is?

[pblake]

My guess would be iCloud or any calendar accounts setup on the machine.

[Kaltsas]

I wasn't too worried about it, and I'm positive it's something getting reauthorized after the 10.9.2 update but it's not very intuitive and I'm not sure my users/boss (who are surrounded by windows folks getting hit with stuff like cryptolocker) take much solace when I say "It's probably legit, but I don't know what exactly it's doing". I'm hoping to hear back from Apple Support on this soon just to have something a little more concrete.

[mm2270]

I did a quick Google search on this and pulled up threads several years old from Apple support forums of people posting similar questions. Apparently CoreServicesUIAgent has been in OS X for a while now. Others have seen similar 'wants to access your data' messages.
I haven't seen it myself, but kind of dumb that Apple doesn't make some of these items more descriptive. If we as IT people don't understand what its doing, how can a layperson possibly understand whether to allow this?

[KenDWR]

I got the message this morning. I have not upgraded to 10.9.2, still on 10.9.1, so it doesn't seem related to upgrading.