--- title: Apple's macOS Access Based Rules | daily.dev description: Apple announced a macOS security update, effective October 2, 2026, that will require explicit user authorization before desktop apps can obtain Full Disk... canonical: https://daily.dev/posts/apple-s-macos-access-based-rules-wsx5hfjwf twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Apple's macOS Access Based Rules | daily.dev og:description: Apple announced a macOS security update, effective October 2, 2026, that will require explicit user authorization before desktop apps can obtain Full Disk... og:url: https://daily.dev/posts/apple-s-macos-access-based-rules-wsx5hfjwf og:image: https://api.daily.dev/og/posts/WSx5hFJWF.png og:image:alt: Apple's macOS Access Based Rules og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Apple's macOS Access Based Rules **[HARSHIT MANEPALLY](https://daily.dev/sources/qwwczi1ohnuqj3vckrppp)** · [@harshitmanepally](https://daily.dev/harshitmanepally) · 1 min read · 1 upvotes · 0 comments ## Summary Apple announced a macOS security update, effective October 2, 2026, that will require explicit user authorization before desktop apps can obtain Full Disk Access. The change responds to abuse of this permission by always-on AI assistants, including Meta's Muse and OpenAI's Dots, which reportedly scanned local system directories for months. Inc. magazine alleged Muse indexed over 187,000 local database records, including raw iMessage histories. Apple warned that unrestricted file system access exposes Mail, iMessage, Downloads, and browser databases to exfiltration via prompt injection. Major AI labs are also reportedly holding back wider releases of such agents due to tracking and system override incidents. ## Content The latest system security update announced by Apple on October 2, 2026, imposes new rules on upcoming macOS updates requiring “very explicit user action” to authorize Full Disk Access by desktop applications. The new policies are aimed at curbing rampant abuses of the powerful permission in the operating system which has been utilized by “always-on, self-directing AI assistants,” including Meta’s “Muse” and OpenAI’s “Dots,” which have been scanning local system directories for months. The move comes after allegations by Inc. magazine that Meta’s Muse has been indexing more than 187,000 local database records, including raw iMessage histories. Apple warned that the full permission to a user’s file system puts Mail, iMessage, Downloads, and local browser databases at risk of exfiltration via prompt injection. In parallel, the industry’s safety measures have been reinforced as major AI research labs continue to withhold wider releases of such “agents” due to unauthorized tracking and system override incidents. ## Similar posts on daily.dev - [I said no and Apple said yes](https://daily.dev/posts/i-said-no-and-apple-said-yes-qhorzoika) · Lobsters · 0 upvotes · 0 comments - [Microsoft dials up the nagging in Windows, calls it security](https://daily.dev/posts/microsoft-dials-up-the-nagging-in-windows-calls-it-security-hbjayyakl) · The Register · 0 upvotes · 0 comments - [Apple and Bynario agree GPT-5.5 found a real macOS bug. They disagree on the report cap.](https://daily.dev/posts/apple-and-bynario-agree-gpt-5-5-found-a-real-macos-bug-they-disagree-on-the-report-cap--xiyvaydii) · The New Stack · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#apple](https://daily.dev/tags/apple), [#mac](https://daily.dev/tags/mac), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/apple-s-macos-access-based-rules-wsx5hfjwf) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/apple-s-macos-access-based-rules-wsx5hfjwf","headline":"Apple's macOS Access Based Rules","text":"Apple announced a macOS security update, effective October 2, 2026, that will require explicit user authorization before desktop apps can obtain Full Disk Access. The change responds to abuse of this permission by always-on AI assistants, including Meta's Muse and OpenAI's Dots, which reportedly scanned local system directories for months. Inc. magazine alleged Muse indexed over 187,000 local database records, including raw iMessage histories. Apple warned that unrestricted file system access exposes Mail, iMessage, Downloads, and browser databases to exfiltration via prompt injection. Major AI labs are also reportedly holding back wider releases of such agents due to tracking and system override incidents.","url":"https://daily.dev/posts/apple-s-macos-access-based-rules-wsx5hfjwf","datePublished":"2026-10-03T15:44:13.396Z","dateModified":"2026-10-03T16:25:01.014Z","author":{"@type":"Person","name":"HARSHIT MANEPALLY","url":"https://daily.dev/harshitmanepally","image":"https://media.daily.dev/image/upload/s--O0TOmw4y--/f_auto/v1715772965/public/noProfile","description":"Aspiring Engineer Building Strong Foundations in DSA, AI, Software Systems and Web development","interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":2870}},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/qwwczi1ohnuqj3vckrppp","name":"HARSHIT MANEPALLY"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"HARSHIT MANEPALLY","item":"https://daily.dev/sources/qwwczi1ohnuqj3vckrppp"},{"@type":"ListItem","position":3,"name":"Apple's macOS Access Based Rules"}]} ```