Enabling screen sharing on macOS 14

modify_screensharing.sh

#!/bin/bash

# A cleaner alternative to this approach, but which requires a restart, is to populate TCC's SiteOverrides.plist inside
# the TCC app support directory with the following:
# <?xml version="1.0" encoding="UTF-8"?>
# <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
# <plist version="1.0">
# <dict>
# 	<key>Services</key>
# 		<dict>
# 		<key>PostEvent</key>
# 		<array>
# 			<dict>
# 				<key>Allowed</key>
# 				<true/>
# 				<key>CodeRequirement</key>
# 				<string>identifier "com.apple.screensharing.agent" and anchor apple</string>
# 				<key>Identifier</key>
# 				<string>com.apple.screensharing.agent</string>
# 				<key>IdentifierType</key>
# 				<string>bundleID</string>
# 			</dict>
# 		</array>
# 		<key>ScreenCapture</key>
# 		<array>
# 			<dict>
# 				<key>Allowed</key>
# 				<true/>
# 				<key>CodeRequirement</key>
# 				<string>identifier "com.apple.screensharing.agent" and anchor apple</string>
# 				<key>Identifier</key>
# 				<string>com.apple.screensharing.agent</string>
# 				<key>IdentifierType</key>
# 				<string>bundleID</string>
# 			</dict>
# 		</array>
# 	</dict>
# </dict>
# </plist>

set -eux -o pipefail

db_path="/Library/Application Support/com.apple.TCC/TCC.db"

sanity_checks() {
  os_ver_major="$(sw_vers -productVersion | awk -F'.' '{print $1}')"
  if [[ "${os_ver_major}" -ne 14 ]]; then
    echo "This script is only tested valid on macOS 14, and we detected this system runs version ${os_ver_major}. Exiting."
    exit 1
  fi

  if [[ "$(id -u)" -ne 0 ]]; then
    echo "Need to run this script as root... exiting"
    exit 1
  fi

  # TODO: we should bail if we determine we don't have write access to the TCC db (we want to get specific SIP disable status
  #       for whatever is the protection for TCC)
}

disable_screensharing() {
  launchctl unload -w /System/Library/LaunchDaemons/com.apple.screensharing.plist
  sqlite3 "${db_path}" \
    "BEGIN TRANSACTION; \
     DELETE FROM access WHERE client = 'com.apple.screensharing.agent'; \
     COMMIT;"
}

enable_screensharing() {
  launchctl load -w /System/Library/LaunchDaemons/com.apple.screensharing.plist

  epoch="$(date +%s)"
  sqlite3 "${db_path}" \
    "BEGIN TRANSACTION; \
     DELETE FROM access WHERE client = 'com.apple.screensharing.agent'; \
     COMMIT; \
     BEGIN TRANSACTION; \
     INSERT INTO access(service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier_type,flags,last_modified,last_reminded) VALUES('kTCCServicePostEvent','com.apple.screensharing.agent',0,2,4,1,0,0,${epoch},${epoch}); \
     INSERT INTO access(service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier_type,flags,last_modified,last_reminded) VALUES('kTCCServiceScreenCapture','com.apple.screensharing.agent',0,2,4,1,0,0,${epoch},${epoch}); \
     COMMIT;"
}


dump_screensharing_entries() {
sqlite3 "${db_path}" \
  "SELECT * FROM access WHERE client = 'com.apple.screensharing.agent';"
}

# uncomment to show existing entries for debugging
# dump_screensharing_entries

sanity_checks

enable_screensharing
# uncomment to disable instead of enable
# disable_screensharing

Definitely snagging this update!

If you ever randomly run into anything about adjusting the quality settings in the built in VNC client…