“SSH-Keygen-Wrapper” under system preferences > Privacy > Full disc access after updating to Big Sur 11.1

[Benz63amg]

after the update to Big Sur 11.1 I noticed an item under the system privacy settings > Full disc access called “SSH-Keygen-Wrapper” which was not there before the update, Can someone please check if they have this item there as well? I’ve not seen this prior to upgrading to 11.1 and have no idea what it is

 

[adrianlondon]

I have it, but it's not ticked. I don't know how long it's been there, but as I have used remote access and generated SSH keys in the past, it's probably been there a while. I can only assume it popped up and requested full disk access and I clicked "no" Don't remember!

So if yours is ticked, you can probably untick it without issue.

 

[Benz63amg]

I have it, but it's not ticked. I don't know how long it's been there, but as I have used remote access and generated SSH keys in the past, it's probably been there a while. I can only assume it popped up and requested full disk access and I clicked "no" Don't remember!

So if yours is ticked, you can probably untick it without issue.

It is unticked for me as well but I never used any sort of remote access of any kind from another computer etc, is this something to be worried about? I only noticed that setting show up under Full Disc Access after updating to Big Sur 11.1

 

[MacBird]

Interesting, it was checked on my MBP. I changed the setting, but have no idea what it actually does.

 

[adrianlondon]

If it's unticked, it means it won't ask again and will automatically be refused access.

if you delete it (click -) then the next time it runs, if ever, and it thinks it needs full disk access it'll pop up and ask you, in which case you can click no (or yes).

I'd not worry about it. It's a part of MacOS and not some third party thing so even if you tick it and give it full disk access I imagine it'd be fine, but leave it unticked. Or remove it and see, out of curiosity, if it pops back.

It might have been something new in 11.1 to do with the O/S needing secure access itself back to the disk and it automatically refused itself full disk access. No idea.

 

[Benz63amg]

If it's unticked, it means it won't ask again and will automatically be refused access.

if you delete it (click -) then the next time it runs, if ever, and it thinks it needs full disk access it'll pop up and ask you, in which case you can click no (or yes).

I'd not worry about it. It's a part of MacOS and not some third party thing so even if you tick it and give it full disk access I imagine it'd be fine, but leave it unticked. Or remove it and see, out of curiosity, if it pops back.

It might have been something new in 11.1 to do with the O/S needing secure access itself back to the disk and it automatically refused itself full disk access. No idea.

Well I was never asked for such access in the first place to have the option to allow/deny which is why I am concerned now.. Can someone else please chime in on whether they also noticed this new thing in the Full Disc Access panel under privacy settings after upgrading to Big Sur 11.1?

argh should I reinstall MacOS?

 

[stvs]

Hi, after reading the following two links, I think it is best to leave 'sshd-keygen-wrapper' unchecked but do NOT delete it from System Preferences > Security & Privacy > Full Disk Access. Just my two cents. It too appeared after updating to 11.1 for me.

Who put that in my Full Disk Access list? ssh and Mojave’s privacy protection

How ssh is by default given full access to private data, and how removing it from the Privacy pane only enables that access.

eclecticlight.co

Apple SSH privacy bug "exploited at large" remains unpatched after 2 years - Security Report

A privacy bug lurking around in Apple Mac OS X since at least 2018 continues to remain unpatched and exploited at large.

securityreport.com

 

[Benz63amg]

Hi, after reading the following two links, I think it is best to leave 'sshd-keygen-wrapper' unchecked but do NOT delete it from System Preferences > Security & Privacy > Full Disk Access. Just my two cents. It too appeared after updating to 11.1 for me.

Who put that in my Full Disk Access list? ssh and Mojave’s privacy protection

How ssh is by default given full access to private data, and how removing it from the Privacy pane only enables that access.

eclecticlight.co

Apple SSH privacy bug "exploited at large" remains unpatched after 2 years - Security Report

A privacy bug lurking around in Apple Mac OS X since at least 2018 continues to remain unpatched and exploited at large.

securityreport.com

Thank you, Will do. That was my takeaway after reading the article as well. It basically says if you remove that from the full access menu then it leaves the Mac open to the mentioned exploit

 

[flux182]

I've just noticed this listed under 'Full Disk Access' as well - wondering if anyone other than the OP also has this listed but unticked AND have never used remote access?

 

[Benz63amg]

I've just noticed this listed under 'Full Disk Access' as well - wondering if anyone other than the OP also has this listed but unticked AND have never used remote access?

i have received little to no response regarding this so i had to resort to performing a test by myself to ensure whether this was normal or whether my Mac was compromised with malware or something of that nature, I installed a brand new copy of catalina on my brother's Macbook, Updated to BigSur 11.1 and that SSH-Keygen-Wrapper thing indeed was there under "Full Disk Access" on a fresh installation of BigSur 11.1. Apple must have added that in 11.1 and based on additional research i made it seems that the LACK of "SSH-Keygen-Wrapper" under the Full Disc Access menu is an extremely high security risk which is why Apple added it in place. It's extremely important that it is left UNCHECKED.

 

[flux182]

Awesome! Thanks for replying - you've put my mind at ease, and saved me from a fresh install myself.