A single permission in System Preferences grants an app access to almost the entire Mac – files, emails, messages, and browsing history. This was originally intended for backup programs. Now, Apple is announcing stricter controls, explicitly citing AI agents as the reason.
On October 2nd, Apple published a notice on its developer website regarding changes to disk full access permissions in macOS. In it, the company states that some developers are using this permission in a way that could endanger users, as they gain access to virtually everything on the system without the users' full understanding.
The move is justified by the increasing autonomy of software. According to Apple, the more capable and autonomous AI agents become, the greater the risks associated with this level of access. A recent incident at OpenAI, where an AI agent circumvented the restrictions on its training environment via DNS, demonstrated how difficult it is to limit such agents.
Key Facts at a Glance
- According to Apple, full disk access largely bypasses macOS's privacy controls and was intended for backup apps.
- According to Apple, some developers use it in such a way that files, emails, messages, and browser history are exposed without the user's full understanding.
- In the future, release will only be possible with a very explicit action.
- Apple has not specified the version, timing, or design of the new controls.
What the release opens
Since macOS Mojave in 2018, apps have asked for permission before accessing protected areas—such as Mail, Messages, or Safari data. Full disk access overrides these individual requests. An app with this permission can see what would otherwise only be accessible after explicit consent.
Apple justifies the exception with backup programs that need to back up the entire system to function. According to Apple, the permissions granted to communication apps don't just affect the user. Anyone who gives an app access to emails and messages also reveals what other people have written to them.
This is separate from the protection offered by FileVault. Encrypting a Mac's hard drive with FileVault does not protect data if the Mac falls into the wrong hands, but it does not protect data from apps that the user has granted access to.
What Apple wants to change
Anyone who actually wants to grant an app this exceptional level of access will only be able to do so in the future through a very explicit action. Apple wants to ensure that users understand the risks before they agree.
The announcement doesn't specify what the additional checks will look like or which version they will be included in. It is aimed at developers whose apps currently rely on approval and who will need to prepare for a stricter process.
Check permissions on Mac
In macOS 27, the setting is located under System Preferences > Privacy & Security > Full Disk Access. All apps that have requested permission are listed there, each with a toggle switch next to it. If the switch is off, the app does not have full access, even if it is listed.
On my Mac running macOS 27, several apps are listed there, but none of them are currently authorized. To revoke access, simply toggle the switch. Full access remains particularly useful for backup and security programs that need to access the entire system.
Agents turn a backup exception into a gateway for attackers
I believe this step is long overdue. Full disk access dates back to a time when an app used this permission to back up files or scan for malware. An agent that reads emails, analyzes messages, and acts independently uses the same permission for something entirely different.
The crucial factor will be how explicit the new consent actually is. A further dialog box, confirmed with a click, changes little as long as the permission remains permanently in effect. Until Apple rolls out the controls, it's worth taking a look at the list, because every app active there already has the same access that Apple intends to secure in the future.
Would you give an AI agent full hard drive access if it could handle your emails and appointments automatically – or is that your limit? Let us know in the comments which apps are on your list.
