PasswordBreachAgent and SafariLaunchAgent.

[jamiea88374]

Hi all,

Have an issue whereby updated Macs have started to complain about being unable to access bits of software, with pop ups which are constant, rendering the devices more of a pain than a delight to use sadly.

Updated from Monterry and am now on Ventura 13.3.1. Was working fine under Monterry.

Devices are used in an educational environment, and we've had to whitelist allowed applications only (such as Chrome, Logic Pro etc) to control kids meddling.

Pop ups keep appearing for the following:

You don't have permission to use the application "PasswordBreachAgent".

You don't have permission to use the application "SafariLaunchAgent".

Have tried various paths to whitelist, but with no joy.

Any help gratefully received.

Many thanks,

James.

 

[bogdanw]

What do you use to block apps? What gives that “You don't have permission to use the application” message?

In Monterey, the paths for the two processes are:
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/PasswordBreachAgent
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

But in Ventura they seem to be:
/System/Volumes/Preboot/Cryptexes/App/usr/libexec/PasswordBreachAgent
/System/Volumes/Preboot/Cryptexes/App/usr/libexec/SafariLaunchAgent

 

[jamiea88374]

Thank you, will investigate.

The message is a standard Apple finder notification.

They are blocked by Parental Control: Application Access, via an mobileconfig file.

 

[bogdanw]

Unfortunately, “Detect compromised passwords” can’t be disabled with a mobileconfig profile at the moment. And even when it’s manually disabled, the PasswordBreachAgent still starts when Safari is started.

 

[galad]

Those are parts of macOS, things will break if you block them.

 

[bogdanw]

Those are parts of macOS, things will break if you block them.

You’ve missed the point. They have not been intentionally blocked, Ventura seems to think they should be blocked when a configuration profile with ParentalControlsApplicationRestrictions is installed.

https://developer.apple.com/documentation/devicemanagement/parentalcontrolsapplicationrestrictions
https://support.apple.com/guide/mac-help/configuration-profiles-standardize-settings-mh35561/mac

 

[jamiea88374]

What do you use to block apps? What gives that “You don't have permission to use the application” message?

In Monterey, the paths for the two processes are:
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/PasswordBreachAgent
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

But in Ventura they seem to be:
/System/Volumes/Preboot/Cryptexes/App/usr/libexec/PasswordBreachAgent
/System/Volumes/Preboot/Cryptexes/App/usr/libexec/SafariLaunchAgent

Thanks for this, think I'm getting somewhere. Out of interest how is the best way to find the paths for such things? Can see myself coming up against a few more!

Many thanks again!

 

[bogdanw]

Out of interest how is the best way to find the paths for such things?

Open Activity Monitor, search for the agent, double-click it or press ⌘I, look into the Open Files section