From 725d97a5d9388c37c1ebfd65b1aaa53640bc9658 Mon Sep 17 00:00:00 2001
From: kimg45 <138676274+kimg45@users.noreply.github.com>
Date: Thu, 29 Aug 2024 12:22:04 -0500
Subject: [PATCH] added mention of not giving terminal full disk access

---
 content/posts/macos/macOS Security Overview.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/posts/macos/macOS Security Overview.md b/content/posts/macos/macOS Security Overview.md
index d14d62a..aa8c5a1 100644
--- a/content/posts/macos/macOS Security Overview.md	
+++ b/content/posts/macos/macOS Security Overview.md	
@@ -109,10 +109,12 @@ Mac computers have an [IOMMU](https://support.apple.com/guide/security/direct-me
 
 macOS is a Unix-like, so certain security practices carry over from other systems. Consider setting a [stricter umask](https://support.apple.com/en-us/101914).
 
-## Terminal Secure Keyboard Entry
+## Terminal Security
 
 To prevent other apps from detecting what you type in Terminal, enable [Secure Keyboard Entry](https://support.apple.com/guide/terminal/use-secure-keyboard-entry-trml109/mac).
 
+Avoid giving the Terminal full disk access so that unsandboxed apps can't abuse it to gain unauthorized access.
+
 ## Standard User Account
 
 When you first set up your Mac, you will create an Administrator account that has powerful access to the OS. [Apple recommends](https://support.apple.com/guide/mac-help/set-up-your-mac-to-be-secure-flvlt003/mac) limiting the number of Administrator accounts on your machine and using a Standard user account when Aministrator privileges aren't needed.