Hey all, has anyone hit this on macOS 27? The new app-data protection blocks osquery from reading

~/Library/Application Support/Google/Chrome/

(Edge and Brave too). Stat works, but listing and reading don't. On 5.9.1+

chrome_extensions

throws an error instead of returning 0 rows. On 5.8.2 it just returns empty. The only fix we've found is Full Disk Access on the process that launches osqueryd (FDA on osqueryd alone doesn't help). Has anyone found a way to get Chromium extensions without FDA?

Hey @Shreshtha, thanks for reaching out. Since macOS 27 introduces additional file system protections, we recommend deploying this configuration profile to grant Full Disk Access to osquery. Without it, fleetd can’t read protected file paths. This matters more on macOS 27, where Apple now protects the app data folders under

/Library/Application Support

for eight apps: • Browsers: Chrome, Brave, Edge, Firefox • Messaging: Discord • Crypto wallets: Ledger Live, Exodus, Wasabi

Thanks @right.deer5376, makes sense! Most of our Macs aren't under MDM though, so the profile isn't an option there. Do you know of any non-FDA way to get Chromium extensions on 27, or is FDA the only route now?