How to Grant Full Disk Access for the CrowdStrike Falcon Sensor
Summary: Full disk access may be granted for the CrowdStrike Falcon Sensor by following these instructions.
Symptoms
Full Disk Access is required to protect all data on macOS Mojave (10.14.5) and later. This article describes how to enable Full Disk Access for the CrowdStrike Falcon Sensor.
Affected Products:
CrowdStrike Falcon Sensor
Affected Operating Systems:
macOS Mojave (10.14.5) and Later
Cause
Not applicable
Resolution
On September 24, 2018, Apple released macOS Mojave (10.14). This operating system update includes a new security feature that is called Full Disk Access. Full Disk Access blocks third-party applications from accessing certain file paths and may prevent the CrowdStrike Falcon Sensor from fully protecting a device.
To grant Full Disk Access:
- On the desktop menu bar, click the Apple icon and then select System Preferences.
- In the System Preferences menu, double-click Security & Privacy.
- On the Privacy tab, select Full Disk Access.
- If needed, click the padlock icon and provide credentials for a local administrator account (not an Apple ID) to allow changes.
- Click the + button to the right of the highlighted Full Disk Access.
- Press CMD + SHIFT + G, type
/Library/CS/falcond, and then click Go. - Select
falcondand then click Open.
- Exit Security & Privacy.
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.