Begin narrowing down the required permissions

Author: pcolby

.github/workflows/build.yaml

@@ -221,42 +221,23 @@ jobs:
           - { qt: '6.7.3', cc: gcc }
           - { qt: '6.8.0', cc: gcc }
     steps:
-      #- run: sudo plutil -p '/System/Library/PrivateFrameworks/TCC.framework/Resources/en.lproj/Localizable.strings'
-      - run: sqlite3 '/Library/Application Support/com.apple.TCC/TCC.db' '.schema'
-      - if: matrix.os != 'macos-13'
-        run: >
-          sudo sqlite3 '/Library/Application Support/com.apple.TCC/TCC.db' "INSERT or REPLACE INTO access
-            ( service, client, client_type, auth_value, auth_reason, auth_version, flags ) VALUES
-            ( 'kTCCServiceBluetoothAlways',     'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', 'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', 'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothAlways',     '/bin/bash',                                     1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', '/bin/bash',                                     1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', '/bin/bash',                                     1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothAlways',     '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothAlways',     '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 )"
-      - run: sqlite3 '/Library/Application Support/com.apple.TCC/TCC.db' 'select * from access'
       - run: sqlite3 "$HOME/Library/Application Support/com.apple.TCC/TCC.db" '.schema'
       - if: matrix.os != 'macos-13'
         run: >
           sudo sqlite3 "$HOME/Library/Application Support/com.apple.TCC/TCC.db" "INSERT or REPLACE INTO access
             ( service, client, client_type, auth_value, auth_reason, auth_version, flags ) VALUES
-            ( 'kTCCServiceBluetoothAlways',     'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', 'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', 'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
             ( 'kTCCServiceBluetoothAlways',     '/bin/bash',                                     1, 2, 3, 1, 0 ),
             ( 'kTCCServiceBluetoothPeripheral', '/bin/bash',                                     1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', '/bin/bash',                                     1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothAlways',     '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothAlways',     '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothPeripheral', '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 ),
-            ( 'kTCCServiceBluetoothWhileInUse', '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 )"
+            ( 'kTCCServiceBluetoothWhileInUse', '/bin/bash',                                     1, 2, 3, 1, 0 )"
+#            ( 'kTCCServiceBluetoothAlways',     '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothPeripheral', '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothWhileInUse', '/usr/local/opt/runner/runprovisioner.sh',       1, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothAlways',     '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothPeripheral', '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothWhileInUse', '/usr/local/opt/runner/provisioner/provisioner', 1, 2, 3, 1, 0 )"
+#            ( 'kTCCServiceBluetoothAlways',     'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothPeripheral', 'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
+#            ( 'kTCCServiceBluetoothWhileInUse', 'com.apple.Terminal',                            0, 2, 3, 1, 0 ),
       - run: sqlite3 "$HOME/Library/Application Support/com.apple.TCC/TCC.db" 'select * from access'
       - uses: actions/checkout@v4
       - name: Install lcov