From 5c53a3be3b7eb9ce8c462d7f50b9993e8eea3639 Mon Sep 17 00:00:00 2001 From: galex505 <173912747+galex505@users.noreply.github.com> Date: Thu, 26 Feb 2026 11:31:30 +0100 Subject: [PATCH 1/2] chore: macos 26 full disk access issues fixed with macOS Tahoe 26.3 --- administration/agent.rst | 73 ++-------------------------------------- 1 file changed, 3 insertions(+), 70 deletions(-) diff --git a/administration/agent.rst b/administration/agent.rst index 6bf7690..045ef23 100644 --- a/administration/agent.rst +++ b/administration/agent.rst @@ -131,9 +131,6 @@ following tasks. If you need to grant Full Disk Access via MDM, please have a look at the chapter :ref:`appendix/mdm-fulldiskaccess:Full Disk Access for macOS asgard2-agent-service via MDM`. -Prior to macos Tahoe 26 -""""""""""""""""""""""" - To do this, navigate on your Mac to ``System Settings`` > ``Privacy & Security`` > ``Full Disk Access``: @@ -147,70 +144,6 @@ You need to enable the ``asgard2-agent-service`` slider: :scale: 40 :alt: macOS 13 Full Disk Access -Starting with macOS Tahoe 26 -"""""""""""""""""""""""""""" -Starting with version 26, we noticed that macOS no longer displays the entry ``asgard2-agent-service`` in the Full Disk Access UI. - -.. figure:: ../images/macos_missing_asgard2-agent_service.png - :scale: 50 - :alt: Missing asgard2-agent.service - -If you have updated from macOS 15 Sequoia you should check in ASGARD the THOR scan protocol for a warning about Full Disk Access or query your operating system's ``TCC.db`` database. - -To query the database, open the Terminal App and perform the following SQL command: - -.. code-block:: console - :emphasize-lines: 2 - - MacBook-Pro:~ nextron$ sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db 'select * from access' | grep asgard - kTCCServiceSystemPolicyAllFiles|/private/var/lib/asgard2-agent/asgard2-agent-service|1|2|4|1|??||0|UNUSED|0|176962327|||UNUSED|0 - MacBook-Pro:~ nextron$ - -This value section must match: - -.. code-block:: console - :emphasize-lines: 1 - - |1|2|4|1| - -If the values do NOT match at this point, or if you originally installed our agent on macOS 26, please proceed with the following instructions. - -Temporarily adjust the permissions for the directory /private/var/lib/asgard2-agent via Terminal: - -.. code-block:: console - - MacBook-Pro:~ nextron$ sudo chmod 777 -R /private/var/lib/asgard2-agent/ - MacBook-Pro:~ nextron$ - -Open the Full Disk Access UI (``System Settings`` > ``Privacy & -Security`` > ``Full Disk Access``) and click on the ``+ Symbol`` bottom left. Enter the admin credentials. - -Open the search window by clicking on ``Command + SHIFT + G`` and enter the path to the service binary, ``/private/var/lib/asgard2-agent``. - -.. figure:: ../images/macos_path_asgard2-agent_service.png - :scale: 45 - :alt: Path to asgard2-agent-service - -Choose the ``asgard2-agent-service`` and click ``Open``. - -.. figure:: ../images/macos_choose_asgard2-agent_service.png - :scale: 45 - :alt: Path to asgard2-agent-service - -Check that the permissions have now been granted correctly by reopening the Terminal App and executing the following SQL command: - -.. code-block:: console - :emphasize-lines: 2 - - MacBook-Pro:~ nextron$ sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db 'select * from access' | grep asgard - kTCCServiceSystemPolicyAllFiles|/private/var/lib/asgard2-agent/asgard2-agent-service|1|2|4|1|??||0|UNUSED|0|176962327|||UNUSED|0 - MacBook-Pro:~ nextron$ - -Please note that ``asgard2-agent-service`` is still not displayed in the UI. - -Finally adjust the permissions again: - -.. code-block:: console - - MacBook-Pro:~ nextron$ sudo chmod 700 -R /private/var/lib/asgard2-agent/ - MacBook-Pro:~ nextron$ +.. note:: + Starting with version Tahoe 26, we noticed that macOS no longer displays the entry ``asgard2-agent-service`` in the Full Disk Access UI. + This has been fixed with version Tahoe 26.3. From a4de6aa9f9edb2e6194924320f8b021c73306ee4 Mon Sep 17 00:00:00 2001 From: galex505 <173912747+galex505@users.noreply.github.com> Date: Fri, 13 Mar 2026 10:50:29 +0100 Subject: [PATCH 2/2] chore: Notes on the Import label --- administration/assets.rst | 3 +++ 1 file changed, 3 insertions(+) diff --git a/administration/assets.rst b/administration/assets.rst index fa72bcf..3dc6e06 100644 --- a/administration/assets.rst +++ b/administration/assets.rst @@ -88,6 +88,9 @@ Import Labels The import function allows you to add or remove labels on assets based on columns in the previously generated CSV formatted file. +.. note:: + This function is not available in the Master ASGARD. + The import function processes the values in the columns ``Add Labels ...`` and ``Remove Labels ...`` only. In order to change labels, use the already exported list, add values in these columns and re-import it by using the ``Apply Labels from CSV`` button.