⬇ Download holy card: ·
Saint sqlol, Who Hijacked SQLite's Log
Patron of macOS TCC protections, SQLite's debug feature, and privacy permissions quietly bypassed.
Life
Gergely Kalman described sqlol, a TCC privacy bypass on macOS: the SQLITE_SQLLOG_DIR environment variable enabled an SQLite debug feature that wrote database copies to a chosen folder, with predictable names and following symbolic links. Abusing an app with full disk access, one could overwrite the TCC database that holds the privacy permissions, gaining access to contacts, location, microphone and webcam. Apple removed the debug feature in macOS Ventura 13.4.
Prayer
O Saint sqlol, who redirects the logs where they should not land, let our apps not write by following others' links. Amen.
How to celebrate
Celebrated by updating to macOS Ventura 13.4 and remembering that even a debug feature can open a door.
Log everything, and you log where you must not.