You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Installing the agent on a virgin install that doesn't have SSH enabled, helper.sh is trying to use systemsetup to enable ssh but Apple has nerfed it:
root@users-Mac ~ # systemsetup -setremotelogin on
setremotelogin: Turning Remote Login on or off requires Full Disk Access privileges.
🖕 🍎
Sooooo a couple ways to address that I can think of:
Do it the Apple way and change nothing, hope that there's some manual config to enable SSH and/or MDM has given systemsetup FDA rights. Since this kinda the only way to get ScreenSharing enabled, it wouldn't be unheard but it would be nice to at least get SSH always.
Add a provision to helper.sh around line 129 that if we're running on 10.15, try this instead: /bin/launchctl load -w /System/Library/LaunchDaemons/ssh.plist
Still seems to work.
I'd vote option 2 as something is better than nothing and it's a pretty easy workaround to code. I wanted to take public temperature before take the time to send up a PR if anyone can think of a better route.
The text was updated successfully, but these errors were encountered:
IIRC, the fix #2 I mentioned worked in my limited testing but I had left it to the hive mind to weigh in before investing time on testing on mass and sending up a PR for the fix.
Installing the agent on a virgin install that doesn't have SSH enabled, helper.sh is trying to use
systemsetup
to enable ssh but Apple has nerfed it:🖕 🍎
Sooooo a couple ways to address that I can think of:
Do it the Apple way and change nothing, hope that there's some manual config to enable SSH and/or MDM has given
systemsetup
FDA rights. Since this kinda the only way to get ScreenSharing enabled, it wouldn't be unheard but it would be nice to at least get SSH always.Add a provision to helper.sh around line 129 that if we're running on 10.15, try this instead:
/bin/launchctl load -w /System/Library/LaunchDaemons/ssh.plist
Still seems to work.
I'd vote option 2 as something is better than nothing and it's a pretty easy workaround to code. I wanted to take public temperature before take the time to send up a PR if anyone can think of a better route.
The text was updated successfully, but these errors were encountered: