new mac update for permission issues.

Overlord-Client/cmd/agent/sysinfo/admin_darwin.go

@@ -0,0 +1,64 @@
+//go:build darwin
+
+package sysinfo
+
+import (
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+)
+
+func IsAdmin() bool {
+	return os.Getuid() == 0
+}
+
+func Elevation() string {
+	if os.Getuid() == 0 {
+		return "admin"
+	}
+	return ""
+}
+
+func DarwinPermissions() map[string]bool {
+	return map[string]bool{
+		"screenRecording": checkScreenRecording(),
+		"accessibility":   checkAccessibility(),
+		"fullDiskAccess":  checkFullDiskAccess(),
+		"root":            os.Getuid() == 0,
+	}
+}
+
+func checkScreenRecording() bool {
+	if os.Getuid() == 0 {
+		return true
+	}
+	exe, err := os.Executable()
+	if err != nil {
+		return false
+	}
+	if real, err := filepath.EvalSymlinks(exe); err == nil {
+		exe = real
+	}
+	home, err := os.UserHomeDir()
+	if err != nil || home == "" {
+		return false
+	}
+	db := filepath.Join(home, "Library", "Application Support", "com.apple.TCC", "TCC.db")
+	safeExe := strings.ReplaceAll(exe, "'", "''")
+	out, _ := exec.Command("sqlite3", db,
+		"SELECT auth_value FROM access WHERE service='kTCCServiceScreenCapture' AND client='"+safeExe+"' LIMIT 1",
+	).CombinedOutput()
+	return strings.TrimSpace(string(out)) == "2"
+}
+
+func checkAccessibility() bool {
+	err := exec.Command("osascript", "-e",
+		`tell application "System Events" to get name of first process`).Run()
+	return err == nil
+}
+
+func checkFullDiskAccess() bool {
+	_, err := os.ReadDir("/Library/Application Support/com.apple.TCC")
+	return err == nil
+}