ESET Insiders gisuck 11 Posted 23 hours ago ESET Insiders Share Posted 23 hours ago (edited) My computer just did an in place product update to Cybersecurity 8, and the wizard now states that I need to enable ESET Full Disk Access even though it already has it. Edited 23 hours ago by gisuck Screenshot wasn't added AlterMann and AnthonyQ 2 Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 17 hours ago Share Posted 17 hours ago with macOS Sequoia.0.1 too. sorry, Japanese. Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 17 hours ago Author ESET Insiders Share Posted 17 hours ago Tried a complete reinstall. It installed 7, upgraded to 8 and then encountered the same issue. I tried clicking on the + and adding the ESET application, but that also didn't work. Filed a ticket with support. AlterMann 1 Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 16 hours ago Share Posted 16 hours ago (edited) I try clear install. 1. uninstall ver.8 "ESET Real-time File System Protection"(OFF) Remains on System Preference>Privacy & Security>Full Disk Access 2. "ESET Real-time File System Protection" delete on System Preference>Privacy & Security>Full Disk Access. use "-". 3. install ver.8. Onboarding.app ended without any problems. From this, I imagine that macOS will not be able to recognize that "ESET Real-time File System Protection" has become new, macOS will not be able to grant permissions, and Onboarding.app will not progress. The uninstaller also has a bug that cannot uninstall "ESET Real-time File System Protection". Edited 16 hours ago by AlterMann Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 14 hours ago Share Posted 14 hours ago Over time, full disk access rights are lost. Is it a bug on the macOS Sequoia side? Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 5,338 Posted 13 hours ago Administrators Share Posted 13 hours ago According to your description of the issue, it sounds like the same bug in macOS that was in macOS Sonoma: https://support.eset.com/en/kb8709. Those who are experiencing the issue, are you able to fix it by following the instructions in the above KB? Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 7 hours ago Author ESET Insiders Share Posted 7 hours ago I've tried adding the application, it didn't work. The KB does not list where the extension is installed so I can try reinstalling that. Still not able to detect full disk access. Quote Link to comment Share on other sites More sharing options...
AnthonyQ 56 Posted 7 hours ago Share Posted 7 hours ago I installed ESET V8 from scratch and I also encountered this problem... AlterMann 1 Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 5,338 Posted 7 hours ago Administrators Share Posted 7 hours ago There have been several FDA-related bugs reported in the past, e.g. https://www.threatdown.com/blog/macos-ventura-bug-disables-security-software/. Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 6 hours ago Author ESET Insiders Share Posted 6 hours ago Note that this would be a version bug introduced with version 8. When I did a reinstall, using version cyber security 7, it was operational and did not have issues with full disk access. Then an inplace product update happened, and the new version cannot detect full disk access. Otherwise, I don't think this is an OS issue since I'm on Monterey. Cyber Security 7 works fine, it's 8 that has issues. AlterMann 1 Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 5 hours ago Share Posted 5 hours ago 1 hour ago, gisuck said: Note that this would be a version bug introduced with version 8. When I did a reinstall, using version cyber security 7, it was operational and did not have issues with full disk access. Then an inplace product update happened, and the new version cannot detect full disk access. Otherwise, I don't think this is an OS issue since I'm on Monterey. Cyber Security 7 works fine, it's 8 that has issues. On macOS Sequoia.0.1 too. Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 4 hours ago Share Posted 4 hours ago This is not for the purpose of showing how to solve it or hacking ESET's copyright, but I write it thinking that it would be good if it could be some kind of clue. ESET did not clearly indicate the entity I wanted to grant Full Disk Access authority, so I looked it up. Where do ESET need Full Disk Access. Enviroment : ESET CyberSecurity 7.5.74.0 On macOS Sequoia.0.1 1. open System Preference.app 2. select Privacy and Security > Full Disk Access 3. select “ESET Real-time File System Protection" 4. open contexial menu “ESET Real-time File System Protection" 5. select “open folder” “ESET Real-time File System Protection" is /Library/SystemExtensions/(UUID?)/com.eset.endpoint.systemextension 6. open /Library/SystemExtensions/ 7. open to use text editor at db.plist 8. search “Real” /Applications/ESET Cyber Security.app/Contents/Helpers/ESET Real-time File System Protection.app/Contents/Library/SystemExtensions/com.eset.endpoint.systemextension (REAL FILE) Perhaps installer regist on db.plist. This is a delusion, 4. Off at “ESET Real-time File System Protection" 5. tap “-“ 6. tap “+” 7. select (REAL FILE) Does macOS recognize it correctly? And one more thing. 3. select ESET CyberSecurity 4. open contexial menu “ESET CyberSecurity" 5. select “open folder” /Applicatoon/ESET CyberSecurity.app P.S. I’m not native language at English. Sorry if it's linguistically funny. Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 4 hours ago Share Posted 4 hours ago (edited) Please note that this issue only occurs in ver.8 due to gisuck, AnthonyQ, and me. Therefore, is processing part where the installer registers "com.eset.endpoint.systemextension" the same or different in ver.7 and ver.8? No way, ESET don't tell end users to read installer script yourself and get diff ? (If I have mental energy, I can try it.) Edited 4 hours ago by AlterMann Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 4 hours ago ESET Staff Share Posted 4 hours ago Hello, this seems like problem in macOS TCC database. May be it is somehow corrupted. We tested this on all supported macOS version and it works correctly in our environments. But sometimes TCC database is corrupted by macOS and sometimes macOS has bug that does not allow product to handle FDA manipulation correctly. Before user will do such steps written in above post I would advise to try to recover TCC db by macOS itself using standard approach. If you have product installed do this: turn off real time file protection disable FDA for all ESET items you could see in macOS full disk access uninstall the product restart macOS check system extension in the macOS systemextensionsctl list output should be 0 for ESET extensions install ECS 8.2.800.0 macOS should ask FDA for application bundle and for real-time file protection during onboarding allow FDA for all ESET items in system preferences, actually should be 2 If this won't work try to clean TCC database in recovery mode of macOS. How to do this could be found on internet, it is only for skilled user. In recovery mode, remove all ESET items from TCC database. Then after macOS restart product should ask for allowing required FDA. If nothing help, please, contact ESET support we will need more info and details. Logs will be required. Quote Link to comment Share on other sites More sharing options...
AlterMann 0 Posted 3 hours ago Share Posted 3 hours ago But in the case of AnthonyQ, this procedure is not good, right? With the installer script, check presence or absence of "ESET Real-time File System Protection" before installing, and if so, "systemextensionsctl uninstall <teamId> <bundleId>" and then install it? Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 3 hours ago Author ESET Insiders Share Posted 3 hours ago @Robertos, please note that at the time of writing, version 8 of the cyber security wasn't available for download on my eset. I had to go through an inplace product update to get version 8. I believe this is where the fault might lie. I just noticed that version 8 was on my eset website today. I'm going to test a full reinstall now. [time passes] Okay, so I followed the steps above where i removed full disk access and perform the uninstall of eset and rebooted. After reboot, I ran systemextensionsctl list and confirmed that there was 0 entries. Ran the new installer and that seemed to fix the issue. So the problem is definitely with the in product upgrade process. Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 2 hours ago ESET Staff Share Posted 2 hours ago What version of Mac/Linux configuration module do you have in the product? It should be 1053 (20240924) for correct working of FDA detection. Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 2 hours ago Author ESET Insiders Share Posted 2 hours ago Interesting... I just forced a module update after getting everything installed and I'm back to having errors with the FDA. Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 2 hours ago ESET Staff Share Posted 2 hours ago gisuck: I'm happy that issue is fixed, at least for you. It's hard to say if problem is in product update or in macOS in this case. You've successfully cleaned TCC db so new installation works correctly but I assume that previous scenario of product update will work too after cleaning of TCC db. Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 2 hours ago ESET Staff Share Posted 2 hours ago Anthony provided too less information to determine if it helps. He should try it. At least, my advised steps won't do it worse, it only could help. Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 2 hours ago Author ESET Insiders Share Posted 2 hours ago Found the problem. Issues with the pre-release module update. Changed the profile to regular and the error message went away. Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 2 hours ago ESET Staff Share Posted 2 hours ago gisuck: How did you make 'forced' update of modules? What does it mean that problem is back? Do you have to allow FDA in macOS once again or you are not able to allow it? Quote Link to comment Share on other sites More sharing options...
ESET Insiders gisuck 11 Posted 2 hours ago Author ESET Insiders Share Posted 2 hours ago Just now, Robertos said: gisuck: How did you make 'forced' update of modules? What does it mean that problem is back? Do you have to allow FDA in macOS once again or you are not able to allow it? change the module updates to pre-release then force an update on "Check for update" button on Update page. Wait for update. Eventually the FDA error occurs. Changed the module update to regular and then updated again, FDA error goes away. Needs testing to confirm but this is what I observed. Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 2 hours ago ESET Staff Share Posted 2 hours ago If anybody has problem with allowing FDA for application bundle and are you using pre-release mode of module update, try at first to change product module update mode to regular. Quote Link to comment Share on other sites More sharing options...
ESET Staff Robertos 24 Posted 59 minutes ago ESET Staff Share Posted 59 minutes ago We fixed issue with pre-release server so if you are receiving Mac configuration module of version 1053 from pre-release server, than fix was delivered to your product instance too and change to normal update mode is not required. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.