Skip to main content
Question

Death of tccutil.py in Sierra (getting Spectacle working)

  • December 23, 2016
  • 5 replies
  • 30 views

AVmcclint
Forum|alt.badge.img+21

I've started rolling out Sierra to our Java developers in very small doses for testing and yesterday I was alerted that new installs of Spectacle wasn't working. I dug into it and discovered that the tccutil.py script that sets the Accessibility settings for the app no longer works in Sierra because SIP protections have been cranked up since El Capitan. Our devs are not admin users on their computers but they absolutely love Spectacle. The only way I'm seeing us continuing with Spectacle is if I manually go around to every user who installs Spectacle and configure the settings in Security & Privacy myself. Does anyone know of maybe another way around this? Is there an alternative to Spectacle that does NOT require changes to the Accessibility settings? OR is there some other way of modifying the settings in a similar manner to what tccutil.py did? Giving users admin rights or disabling SIP are not options I can entertain here.

5 replies

bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • December 24, 2016

@AVmcclint I killed off some of the TCC workarounds in a version of ADPassMon I'm working on.

I'd urge you to log a bug with Apple & ask for the TCC.db to become manageable via a profile.


Forum|alt.badge.img+3
  • New Contributor
  • May 30, 2018

@AVmcclint Did you ever find a solution for this? We are looking at trying to do this and it seems our options are to say no or visit every workstation.

@bentoms Any suggestions who at Apple? I got bounced around a bit with a support call and got nowhere trying to request this.


AVmcclint
Forum|alt.badge.img+21
  • Author
  • Esteemed Contributor
  • May 30, 2018

I submitted a bug report and gave my 2 cents at Apple.com/feedback I’ve given up on any way to automate this. Instead I’ve put Spectacle into my master image that I pre-approved so it applies to every computer imaged from that. If imaging truly is dead moving forward then I’ll have to manually approve Spectacle on every computer it’s installed on.


Forum|alt.badge.img+8
  • Valued Contributor
  • November 25, 2018

Anyone had any recent success? I to have raised a support ticket, now a feature request with Apple.


Forum|alt.badge.img+16
  • Valued Contributor
  • November 26, 2018

If you're running Mojave, you can now permit Accessibility access via a profile.

https://www.jamf.com/jamf-nation/articles/553/preparing-your-organization-for-user-data-protections-on-macos-10-14