macOS Blocking Approved Application Lists
The following table provides a side-by-side comparison of the Default Approved Application List and the Extended Approved Application List for macOS blocking. These lists define the specific applications for which the Cyberhaven macOS sensor will enforce blocking policies.
- Performance List is the list of approved applications that the macOS Sensor can block (if the app is configured to be blocked in the policies) for all customers.
- Coverage List is a broader set of applications. It includes all apps from the Performance List, plus additional applications that can be enabled for blocking upon customer request. The highlighted applications in green represent the additional applications that are not part of the Performance List.
This is in addition to built-in blocking support for specific apps like Slack, Signal, AirDrop, Messages, Telegram, WhatsApp, Teams, Chrome, Edge, Safari, Firefox, and Chromium. These applications are also included in the Performance and Coverage lists to enable expanded blocking coverage.
| Performance List | Coverage List | Path |
|---|---|---|
| adb | adb | :HOME:/homebrew/Caskroom/android-platform-tools/35.0.1/platform-tools/adb |
| agent | /opt/datadog-agent/bin/agent/agent | |
| AirDrop | AirDrop | /System/Library/PrivateFrameworks/FinderKit.framework/Versions/A/PlugIns/AirDrop.appex/Contents/MacOS/AirDrop |
| AnyDesk | AnyDesk | /Applications/AnyDesk |
| anydesk | anydesk | /usr/bin/anydesk |
| Arc | /Applications/Arc.app/Contents/MacOS/Arc | |
| Archive Utility | Archive Utility | /System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility |
| ArchiveService | ArchiveService | /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService |
| Asana | Asana | /Applications/Asana.app/Contents/MacOS/Asana |
| bash | /bin/bash | |
| BBEdit | /Applications/BBEdit.app/Contents/MacOS/BBEdit | |
| Bluetooth File Exchange | Bluetooth File Exchange | /System/Applications/Utilities/Bluetooth File Exchange.app/Contents/MacOS/Bluetooth File Exchange |
| cat | /bin/cat /usr/bin/cat | |
| cloudphotod | /System/Library/PrivateFrameworks/CloudPhotoLibrary.framework/Versions/A/Support/cloudphotod | |
| CocosCreator | /Applications/Cocos/ | |
| com.docker.cli | /Applications/Docker.app/Contents/Resources/bin/com.docker.cli | |
| Commander One | Commander One | /Applications/Commander One.app/Contents/MacOS/Commander One |
| CopilotForXcode ExtensionService | /Applications/Copilot for Xcode.app/Contents/Applications/CopilotForXcodeExtensionService.app/Contents/MacOS/CopilotForXcodeExtensionService | |
| CotEditor | CotEditor | /Applications/CotEditor.app/Contents/MacOS/CotEditor |
| curl | /usr/bin/curl | |
| Cursor | /Applications/Cursor.app/ | |
| Discord | Discord | /Applications/Discord.app/Contents/MacOS/Discord |
| DiscoveryAgent | /Library/Application Support/Absolute/CTES/Components/DLP/EndpointApp.app/Contents/MacOS/DiscoveryAgent | |
| Dropbox | Dropbox | /Applications/Dropbox.app/Contents/MacOS/Dropbox :HOME:/Library/Application Support/Dropbox/Dropbox.app/Contents/MacOS/Dropbox |
| DuckDuckGo | DuckDuckGo | /Applications/DuckDuckGo.app/Contents/MacOS/DuckDuckGo |
| filezilla | filezilla | /Applications/FileZilla.app/Contents/MacOS/filezilla |
| gedit | /usr/bin/gedit | |
| ghostty | /Applications/Ghostty.app/Contents/MacOS/ghostty | |
| git | /Library/Developer/CommandLineTools/usr/bin/git | |
| GitHub Desktop | /Applications/GitHub Desktop.app/ | |
| gnome-text-editor | /usr/bin/gnome-text-editor | |
| Google Drive | Google Drive | /Applications/Google Drive.app/Contents/MacOS/Google Drive |
| iMovie | iMovie | /Applications/iMovie.app/Contents/MacOS/iMovie |
| iPhone Mirroring | iPhone Mirroring | /System/Applications/iPhone Mirroring.app/Contents/MacOS/iPhone Mirroring |
| KakaoTalk | KakaoTalk | /Applications/KakaoTalk.app/Contents/MacOS/KakaoTalk |
| Keynote | Keynote | /Applications/Keynote.app/Contents/MacOS/Keynote |
| LINE | LINE | /Applications/LINE.app/Contents/MacOS/LINE |
| /System/Applications/Mail.app/Contents/MacOS/Mail | ||
| Messages | Messages | /System/Applications/Messages.app/Contents/MacOS/Messages |
| Messenger | Messenger | /Applications/Messenger |
| Microsoft Excel | Microsoft Excel | /Applications/Microsoft Excel.app/Contents/MacOS/Microsoft Excel |
| Microsoft Outlook | Microsoft Outlook | /Applications/Microsoft Outlook.app/Contents/MacOS/Microsoft Outlook |
| Microsoft PowerPoint | Microsoft PowerPoint | /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint |
| Microsoft Teams WebView | Microsoft Teams WebView | /Applications/Microsoft Teams.app/Contents/Helpers/Microsoft Teams WebView.app/Contents/MacOS/Microsoft Teams WebView |
| Microsoft Word | Microsoft Word | /Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word |
| nautilus | /usr/bin/nautilus | |
| ncftp | /opt/homebrew/Cellar/ncftp/ | |
| netcat | netcat | /opt/homebrew/Cellar/netcat/ |
| Numbers | /Applications/Numbers.app/Contents/MacOS/Numbers | |
| nvim | /opt/homebrew/Cellar/neovim/ | |
| Obsidian | Obsidian | /Applications/Obsidian.app/Contents/MacOS/Obsidian |
| Obsidian Helper (Renderer) | Obsidian Helper (Renderer) | /Applications/Obsidian.app/Contents/Frameworks/Obsidian Helper (Renderer).app/Contents/MacOS/Obsidian Helper (Renderer) |
| OneDrive | OneDrive | /Applications/OneDrive.app/Contents/MacOS/OneDrive |
| Pages | Pages | /Applications/Pages.app/Contents/MacOS/Pages |
| podman | /opt/podman/bin/podman | |
| Podman Desktop | /Applications/Podman Desktop.app/Contents/MacOS/Podman Desktop | |
| Preview | Preview | /System/Applications/Preview.app/Contents/MacOS/Preview |
| python | /opt/salt/bin/python | |
| /Applications/QQ.app/Contents/MacOS/QQ | ||
| QuickTime Player | QuickTime Player | /System/Applications/QuickTime Player.app/Contents/MacOS/QuickTime Player |
| Resolve | Resolve | /Applications/DaVinci Resolve/DaVinci Resolve.app/Contents/MacOS/Resolve |
| scp | scp | /usr/bin/scp /opt/homebrew/Cellar/openssh/9.8p1/bin/scp |
| screencapture | screencapture | /usr/sbin/screencapture |
| screencaptureui | screencaptureui | /System/Library/CoreServices/screencaptureui.app/Contents/MacOS/screencaptureui |
| Script Editor | Script Editor | /System/Applications/Utilities/Script Editor.app/Contents/MacOS/Script Editor |
| sftp-server | sftp-server | /usr/lib/openssh/sftp-server |
| sharedfilelistd | sharedfilelistd | /System/Library/CoreServices/sharedfilelistd |
| sharingd | sharingd | /usr/libexec/sharingd |
| Signal | Signal | /Applications/Signal.app/Contents/MacOS/Signal |
| Skype | Skype | /Applications/Skype.app/Contents/MacOS/Skype |
| Slack | Slack | /Applications/Slack /snap/slack/ |
| SmartSwitch | SmartSwitch | /Applications/Smart Switch/SmartSwitch.app/Contents/MacOS/SmartSwitch |
| Spotify | Spotify | /Applications/Spotify.app/Contents/MacOS/Spotify |
| ssh | ssh | /usr/bin/ssh |
| sublime_text | sublime_text | /Applications/Sublime Text.app/Contents/MacOS/sublime_text |
| TeamViewer | TeamViewer | /Applications/TeamViewer.app/Contents/MacOS/TeamViewer /opt/teamviewer/tv_bin/TeamViewer |
| TeamViewer_Desktop | TeamViewer_Desktop | /opt/teamviewer/tv_bin/TeamViewer_Desktop |
| Telegram | Telegram | /Applications/Telegram.app/Contents/MacOS/Telegram |
| TextEdit | TextEdit | /System/Applications/TextEdit.app/Contents/MacOS/TextEdit |
| The Unarchiver | The Unarchiver | /Applications/The Unarchiver.app/Contents/MacOS/The Unarchiver |
| Transmit | Transmit | :HOME:/Desktop/Transmit.app/Contents/MacOS/Transmit |
| unzip | unzip | /usr/bin/unzip |
| Viber | Viber | /Applications/Viber |
| vmtoolsd | /usr/bin/vmtoolsd | |
| vpndownloader | /opt/cisco/secureclient/bin/vpndownloader.app/Contents/MacOS/vpndownloader | |
| VSCode | /Applications/Visual Studio Code | |
| /Applications/WeChat | ||
| Whale | Whale | /Applications/Whale.app/Contents/MacOS/Whale |
| /Applications/WhatsApp | ||
| xdg-desktop-portal-gnome | /usr/libexec/xdg-desktop-portal-gnome | |
| zip | zip | /usr/bin/zip |
| zoom.us | zoom.us | /Applications/zoom.us.app/Contents/MacOS/zoom.us |