Unable to verify full disk access

Hello, I followed the directions below in the article, but I receive an error "Unable to open database" when I run the command "sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db "select client,auth_value from access" | grep -i sophos | sort"

https://community.sophos.com/intercept-x-endpoint/big-sur-eap/f/recommended-reads/124246/how-to-confirm-the-endpoint-is-protected

I have the AV loaded, but it keeps asking for me to allow it to have "Full Disk Access"

Any ideas?

Thanks! 

Top Replies

  • Hi,

    Has Terminal been granted Full Disk Access? Often that error is when Terminal doesn't have the permissions to read the database.

    Sophos processes also require Full Disk Access in order to function correctly. You can follow the prompts on the popup and the software will walk you through how to set that up.

    Let us know if you have any other questions.

    Jump to answer