stado host privacy
Invocation
stado host privacy [OPTIONS] <TARGET>Purpose
What macOS lets TARGET's Stado process read: Documents, Desktop and Downloads, each `granted`, `denied`, `absent` or `unreadable`, beside the grants `targets[].privacy_grants` declares for TARGET. Read from TARGET's latest beacon, which the host process measures itself. Exits non-zero when a declared grant is denied, naming the program, the folder, the declared reason and the System Settings pane that allows it; a folder no grant declares is reported and fails nothing.
Required inputs and options
| Input or option | Contract |
|---|---|
<TARGET> | Positional input; required or optional as shown in the invocation. |
--json | Emit the measurement as JSON |
--open | Open System Settings → Privacy & Security → Files and Folders; only for the machine running this command |
Output and state effect
It performs the operation described above and emits its operator result on standard output or standard error. Any state change is limited to the resources and records named by the purpose and options on this page.
Refusals
- Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.