Mac agent tools not working

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

I need to understand what is required for the mac agent tools to function. 

 

Environment

Release : 15.8

Cause

Error:

Endpoint Agent % ./vontu_sqlite3

dyld[60053]: Library not loaded: @rpath/libPGPce.dylib

  Referenced from: <438AF612-DFD5-3395-85D9-3B81FA61701E> /Library/Manufacturer/Endpoint Agent/vontu_sqlite3

  Reason: tried: '/Library/Manufacturer/Endpoint Agent/libPGPce.dylib' (open() failed with errno=13), '/Library/Manufacturer/Endpoint Agent/libPGPce.dylib' (open() failed with errno=13), '/usr/lib/libPGPce.dylib' (no such file, not in dyld cache)

zsh: abort      ./vontu_sqlite3

Resolution

In order for the mac agent tools to function, their binaries must be allowed full disk access. 
Manually grant Full Disk Access: choose Apple menu  > System Preferences, click Security & Privacy, then select the Privacy tab. Scroll down and click Full Disk Access, then add the associated process(e.g. vontu_sqlite3)
For logdump, since the expectation is that you output the contents to a new file, you will also need to grant 'terminal' full disk access.