Skip to content

Commit 87b1e4f

Browse files
danielbodartclaude
andcommitted
Remove tccutil reset from macOS update script
The mic permission reset was added when TCC used cdhash to track grants. With Fulcio signing + hardened runtime, TCC should use the designated requirement identity instead. Removing the reset lets us test whether mic permission persists across binary updates. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 73d3a26 commit 87b1e4f

1 file changed

Lines changed: 0 additions & 4 deletions

File tree

dist/macos/capsper-update.sh

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -146,11 +146,7 @@ main() {
146146
mv "$INSTALL_DIR/current.tmp" "$INSTALL_DIR/current"
147147

148148
# Copy binary to stable path (TCC tracks by absolute path).
149-
# Reset mic permission — TCC stores the cdhash at grant time, so a new
150-
# binary at the same path gets silently denied. Resetting clears the stale
151-
# entry so the next launch triggers a fresh mic permission dialog.
152149
mkdir -p "$INSTALL_DIR/bin"
153-
tccutil reset Microphone 2>/dev/null || true
154150
cp "$release_dir/bin/capsper" "$INSTALL_DIR/bin/capsper.tmp"
155151
mv "$INSTALL_DIR/bin/capsper.tmp" "$INSTALL_DIR/bin/capsper"
156152

0 commit comments

Comments
 (0)