r/MacOS • u/Philcomputing • 52m ago
Help macOS 27.0.1: Apps ask for privacy permissions again after every restart—permissions are stored but not honored
Since updating to macOS 27, many apps ask again for privacy permissions after every restart on my Mac mini M1 (macOS 27.0.1, 26A434). It covers Device Control and Data Access (formerly Accessibility), Screen Recording, Automation and Local Network.
Affected apps include KeyCue, Default Folder X, Shottr, RescueTime, the Elgato apps (Stream Deck, Camera Hub, Control Center) and DeepL.
What I’ve tried / found:
sudo tccutil reset Alland re-granted everything: no change.The system TCC.db (
/Library/Application Support/com.apple.TCC/TCC.db) contains all entries withauth_value=2before and after a restart. A diff shows nothing is lost. So the permissions are stored, but macOS doesn’t seem to honor them after boot.The per-user TCC.db is missing entirely:
~/Library/Application Support/com.apple.TCC/doesn’t exist, andfind ~/Library -name TCC.dbfinds nothing. Creating the folder manually didn’t help, because tccd never creates the database.Both tccd processes (system + user) are running, there are no crash reports, SIP is enabled and the permissions on ~/Library look correct.
I’ve filed a bug report with Apple.
Questions:
Is anyone else seeing this on macOS 27?
Could someone on macOS 27 check whether you have a per-user TCC database? (Terminal needs Full Disk Access for this.)
ls -l ~/Library/Application\ Support/com.apple.TCC/
I’d like to know whether macOS 27 moved it or whether it’s just missing on my system.
3. Any ideas short of reinstalling macOS?
Thanks!
Update / correction: I was wrong about the version. I’m actually running macOS 27.2.1 (26B131), the current release. The issue persists on 27.2.1.
Thanks for the replies so far! To answer the suggestions:
Full Disk Access: Terminal had Full Disk Access when I checked. It could read the system TCC.db, but
~/Library/Application Support/com.apple.TCC/still doesn’t exist andfind ~/Library -name TCC.dbfinds nothing.Device Management profiles: checking next.
log streamwhile launching an affected app: will post the output.Test user: will try if the above doesn’t reveal anything.