DLP Agent fresh installations fail on macOS 13 endpoints with Apple Silicon hardware

Data Loss Prevention

2 more products

21101

06 December 2022

06 December 2022

Dear Broadcom Customer:

The purpose of this advisory is to inform you of a potential problem that affects Symantec Data Loss Prevention.  Please read the information provided below and follow the instructions in order to avoid being impacted by this problem.   

PRODUCT(S) AFFECTED: Symantec Data Loss Prevention

RELEASE: 15.8 and 16.0

PROBLEM DESCRIPTION:  As a result of sandboxing changes that were introduced in macOS 13, fresh installations of the DLP Agent fail in specific scenarios on macOS 13 endpoints that run on Apple Silicon hardware. The issue occurs when the agent installer is launched from a location other than the /tmp directory and the installer is unable to read the agent .plist file due to sandboxing.

WORKAROUND: Use one of the following workarounds to complete a successful fresh installation:

      • Launch the agent installer from the /tmp directory.
      • If the agent installer is located in a directory other than /tmp, do one of the following actions:
        • Grant full-disk access to the Terminal application.
        • Grant the Terminal application access to the directory where the agent installer is located.

MORE INFORMATION: The following table summarizes various fresh installation scenarios and indicates failures that are caused by the sandboxing changes.

DLP Agent version macOS version Processor Fresh installation result
15.8 macOS 13 Apple Silicon Fail
15.8 macOS 13 Intel Pass
15.8 macOS 12.6 Apple Silicon Pass
15.8 macOS 12.6 Intel Pass
16 macOS 13 Apple Silicon Fail
16 macOS 13 Intel Pass
16 macOS 12.6 Apple Silicon Pass
16 macOS 12.6 Intel Pass