Privileged helper tool?

[Peter Franks]

An update of the new Bombich CCC won't run a back-up without asking me to install this privileged helper tool. What's that all about? I didn't have it in the last version.

 

[organicCPU]

As far as I understand, the Privileged Helper Tool prevents from entering your admin credential all the time over and over again. Every solid backup tool would probably need access everywhere on your drive. Additionally Carbon Copy Cloner, that can do a clone of a running system, might need privileges to load and unload parts of your system while running. If I were you, I wouldn't worry too much. As macOS is adding more and more security features, I think CCC is trying its best, following security guidelines while not coming in your way too much.

More info:
https://bombich.com/kb/ccc5/carbon-copy-cloners-privileged-helper-tool

You could modify its behaviour:
https://bombich.com/kb/ccc5/modifying-cccs-security-configuration

macOS Mojave even raises privacy and might need a little extra config:
https://bombich.com/kb/ccc5/granting-full-disk-access-ccc-and-its-helper-tool

 

[Peter Franks]

Thank you for that. It was for backing up ‘Sierra’. I wasn’t asked for this permission before. So I wondered if it was a new feature with CCC which I’ve not used for a couple of months.

 

[organicCPU]

I guess the Privileged Helper Tool was introduced in CCC 4.0. From its release notes https://bombich.com/kb/ccc4/release-notes

Authentication is no longer required every time you want to run a task. CCC will require authentication once for an administrative user, and then that user will have one-click access to starting, stopping, and configuring tasks. Non-administrative users will be required to authenticate with administrator credentials to start, stop, or modify CCC backup tasks.

 

[Peter Franks]

Surprised nobody mentioned it on here. I did a search prior to asking. Not only on here, but there is absolutely no mention of Carbon Copy Cloner's Privileged Helper Tool anywhere on a Google search, other than on their own website? Amazed it's not been checked out on any Apple forums.

I would’ve thought the password entry when setting it up would’ve done them.
Wondered if anyone here questioned it and if it’s intrusive. Thanks