Hey all, has anyone hit this on macOS 27? The new app-data protection blocks osquery from reading

~/Library/Application Support/Google/Chrome/

(Edge and Brave too). Stat works, but listing and reading don't. On 5.9.1+

chrome_extensions

throws an error instead of returning 0 rows. On 5.8.2 it just returns empty. The only fix we've found is Full Disk Access on the process that launches osqueryd (FDA on osqueryd alone doesn't help). Has anyone found a way to get Chromium extensions without FDA?

We run osquery with FDA, but this doesn't surprise me. Apple has been announcing changes here, and stricter permissions

Thanks @seph! Do you know of any non-FDA way to get Chromium extensions on 27, or is FDA pretty much the only option now?

I haven't done the research on it.