Today, I had to package something up for the first time on my new machine. I fired up stalwart Mac Admin software Packages. I created a new project, built out the file structure, dropped in my content and hit Build.

Unable to copy item at path /Users/tom/Desktop/Identifier.plist because you don’t have permission to create it inside the folder ‘Trend Micro’.

Wait, what?

Did /var/tmp end up in the SIP exclusions list, heaven forfend? Did I forget to strip the quarantine bit from the file I’d downloaded?

Nope. I’d just not given Packages access to the entire disk in the Privacy Preferences Policy Control.

The packages_dispatcher process has to have Full Disk Access in order to get to all the files you may want to package up and deliver.