topic Re: XDR agent not accepting full disk permissions in Cortex XDR Discussions

XDR agent not accepting full disk permissions

Daniel_Itenberg — Thu, 25 Aug 2022 08:57:21 GMT

Hi, I have an agent that after installation insists that the full disk access permissions were not granted. however, said permissions are granted.

furthermore, said agent cannot be uninstalled. how can I force the agent to recognize that it has been given the full disk access permissions?

Re: XDR agent not accepting full disk permissions

bbucao — Thu, 25 Aug 2022 13:37:40 GMT

Hi Daniel_Itenberg,

Can you provide the OS version for the endpoint as well as what agent version you are installing?

Thanks,

Ben

Re: XDR agent not accepting full disk permissions

creddy — Fri, 26 Aug 2022 09:04:25 GMT

Hi @Daniel_Itenberg
I believe you are referring to MAC OS endpoints.
Can you try to reboot the endpoint once and see if that resolves the issue here.
Thank you!

Re: XDR agent not accepting full disk permissions

Vinothkumar_SBA — Tue, 07 Nov 2023 11:26:21 GMT

Hi creddy,

We have already granted full disk permissions in macOS for Cortex XDR. However, we are still encountering the following popup:

The popup continues to reappear on the machine.

We are experiencing the same issues after a reboot in the cloud. Please help me

Re: XDR agent not accepting full disk permissions

RFischer2023 — Wed, 08 Nov 2023 15:17:44 GMT

absolutely exactly the same behavior here 😞

Re: XDR agent not accepting full disk permissions

MarcoMJ — Mon, 04 Dec 2023 19:18:35 GMT

Hi, did you check this documentation?

Re: XDR agent not accepting full disk permissions

RFischer2023 — Tue, 05 Dec 2023 08:35:34 GMT

Hey Marcos, as written above "We have already granted full disk permissions in macOS for Cortex XDR" I assume we did step 9 already 😉
But it seems there was an update on the agent, the message disappeared on my Mac.

Re: XDR agent not accepting full disk permissions

RFischer2023 — Tue, 05 Dec 2023 14:57:37 GMT

i was too early, it's back and just as annoying as before. full disk access for pmd and TrapSecurityExtenstion allowed, but doesn't help at all 😞

Re: XDR agent not accepting full disk permissions

jtalton — Tue, 05 Dec 2023 16:28:51 GMT

Please check that full disk access is really granted. To confirm, go to System Settings >> Privacy & Security >> Full Disk Access and verify PMD and TrapsSecurityExtension are enabled for full disk access:

The next recommendation is to update macOS to the latest available version to see if the issue is resolved.

If you have not already done so, please open a Support Case for additional troubleshooting by a TAC engineer to help resolve the issue.

Re: XDR agent not accepting full disk permissions

RFischer2023 — Tue, 05 Dec 2023 16:31:26 GMT

Done this, looks the same, expect "Terminal".
But honestly it's easier to answer here as opening a ticket, so I just click it away until someone at PANW solved the issue 😉