i’ve learn someplace macos is rootless. which means we will put some restrictions thus far that even root cannot entry to some system folders.
I want to apply this restriction to my Desktop folder.
I need to be certain root will not entry to this folder. And that i need to be certain root will not be capable of write into consumer TCC database too.
I would love that the one method for root to entry my Desktop folder is to reboot the mac in restoration mode, disable SIP and add guidelines into TCC database.
Do you assume mac os is designed to do one thing like that ?
Thanks
