Troubleshooting Tip: macOS Tahoe v26.4 permissions change results in failing print jobs with Print Monitoring enabled

Description

This article describes the changes in macOS Tahoe 26.4 and how they impact printing when used with the FortiDLP agent.

Scope

FortiDLP, macOS agents running v26.4 or later and using print monitoring, for all FortiDLP agents up to and including v12.5.0.

Solution

Starting from macOS Tahoe v26.4, permissions changes in an additional FortiDLP process require Full Disk Access to be granted in order for print jobs to complete.

If Full Disk Access is not granted, print jobs will silently fail, and a log message will be recorded showing 'operation not permitted'. For example:

2026-04-23 14:16:49.720071+0100 0xf54   Error    0x0         384  0  agent: [uk.ava.reveal.agent:agent] {"level":"error","time":"2026-04-23T14:16:49.720+0100","caller":"agent/printers/printers_unix.go:1160","msg":"Post \"http://sockconn-0-0/printers/_x_x_x_x\": failed to open file: open /var/folders/reveal-ci/21db030e-941c-4821-8b3f-bbd45096e61d-Example-print-job: operation not permitted","version":"12.5.0","extra":"failed to proxy request"}

To work around this issue, users must manually enable Full Disk Access for the 'agent' process under Settings -> Privacy & Security -> Full Disk Access. The agent option will be visible after the first failed print job.

The v12.5.2 release of the FortiDLP agent has moved the location of temporary storage so that Full Disk Access will no longer be required in the above way.