Skip to main content

Allowing all protection permissions on macOS

After installing or upgrading Avast One, Avast Security or Avast Premium Security on a Mac that is running macOS version 10.13 (High Sierra) or later, you need to allow all permissions so that your Avast product can fully protect your system. The Avast setup tutorial guides you through this process. For detailed instructions, refer to the steps in this article.

You need to allow permissions if you see any of the following messages in your Avast product:
  • This Mac is not fully protected
  • Allow us to fully protect your Mac
  • Missing kernel extensions
  • Missing system extensions
  • Allow full disk access
  • Add Avast certificates to the Keychain

Allow real-time protection

Granting permission to enable real-time protection allows Avast One to protect your Mac and detect malware in real time.

  1. Click Let's go in the Avast One setup tutorial.
  2. Click Open System Preferences.
  3. If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
  4. Click Allow.
  5. Click Continue in the Avast One setup tutorial.

The necessary real-time protection permission is granted. If you are using macOS 11 (Big Sur) or macOS 12 (Monterey), the Avast One setup tutorial prompts you to add DNS proxy configurations. If you are using macOS 10.15 (Catalina) or lower, the Avast One setup tutorial prompts you to allow full disk access.

Add DNS proxy configurations

Adding a DNS proxy to your Mac enables Avast One to actively monitor websites for threats while you browse the internet.

  1. Click Open confirmation dialog.
  2. Click Allow.
  3. Click Continue in the Avast One setup tutorial.

The necessary DNS proxy configurations are added. If prompted, continue with the steps below to allow full disk access, otherwise, click Got it to close the Avast One setup tutorial.

Allow full disk access

Allowing full disk access enables Avast One to scan your entire Mac for hidden threats.

  1. Click Open system preferences in the Avast One setup tutorial.
  2. If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
  3. Select Avast One using either method below:
    1. Tick the box next to Avast One.
    2. Click the + plus icon, then select Avast One in the Applications folder, and click Open.
  4. Click Quit & Reopen (or Quit Now on macOS 10.15.x (Catalina) and earlier).

Full Disk Access is granted for Avast One. If prompted, continue with the steps below to add Avast certificates.

If you are unable to allow full disk access, we recommend restarting your Mac and trying to follow the steps above again.

Add Avast certificates

Adding Avast certificates allows Avast One to stop browser threats. If you are prompted to add Avast certificates to the Keychain, follow the steps below:

  1. Click Open confirmation dialog in the Avast One setup tutorial.
  2. Enter the password that you use when you start your Mac, then click Update Settings.
  3. Click Continue in the Avast One setup tutorial.
  4. If prompted, click Got it.

All necessary permissions are now enabled.

Allow real-time protection

Granting permission to enable real-time protection allows Avast Security to protect your Mac using the Core Shields that detect malware in real time.

  1. Click Continue in the Avast Security setup tutorial.
  2. Click Open system preferences.
  3. If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
  4. Click Allow.
  5. Click Continue in the Avast Security setup tutorial.

The necessary real-time protection permission is granted. If you are using macOS 11 (Big Sur) or macOS 12 (Monterey), the Avast Security setup tutorial prompts you to add DNS proxy configurations. If you are using macOS 10.15 (Catalina) or lower, the Avast Security setup tutorial prompts you to allow full disk access.

Add DNS proxy configurations

Adding a DNS proxy to your Mac enables Avast Security to actively monitor websites for threats while you browse the internet.

  1. Click Open confirmation dialog.
  2. Click Allow.
  3. Click Continue in the Avast Security setup tutorial.

The necessary DNS proxy configurations are added. If prompted, continue with the steps below to allow full disk access, otherwise, click Got it to close the Avast Security setup tutorial.

Allow full disk access

Allowing full disk access enables Avast Security to scan your entire Mac for hidden threats.

  1. Click Open system preferences in the Avast Security setup tutorial.
  2. If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
  3. Select Avast Security using either method below:
    1. Tick the box next to Avast Security.
    2. Click the + plus icon, then select Avast Security in the Applications folder, and click Open.
  4. If prompted, click Quit & Reopen (or Quit Now on macOS 10.15.x (Catalina) and earlier).

Full Disk Access is now granted for Avast Security. If prompted, continue with the steps below to add Avast certificates.

If you are unable to allow full disk access, we recommend restarting your Mac and trying to follow the steps above again.

Add Avast certificates

Adding Avast certificates allows Avast Security to stop browser threats. If you are prompted to add Avast certificates to the Keychain, follow the steps below:

  1. Click Open confirmation dialog in the Avast Security setup tutorial.
  2. Enter the password that you use when you start your Mac, then click Update Settings.
  3. Click Continue in the Avast Security setup tutorial.
  4. If prompted, click Got it.

All necessary permissions are now enabled.

Troubleshooting

In some cases, a problem with macOS prevents enabling the necessary permissions. This mainly affects macOS 10.13 High Sierra and macOS 10.14 Mojave. If you are unable to allow the permissions as described in this article, try one of the troubleshooting options below:

Update macOS

Updating to macOS 10.15 Catalina, macOS 11 Big Sur, or macOS 12 Monterey should resolve the issue. For instructions, refer to the following Apple Support article:

Reinstall macOS

For instructions to reinstall your macOS, refer to the following Apple Support article:

Fix manually (advanced users)

If updating or reinstalling macOS is not possible, you can try to fix the issue manually by following the instructions below. These steps were reported on the White Hat Mac website, where you can read more about the issue and proposed solution:

Based on the White Hat Mac article, we recommend first identifying which directory is affected by the issue, before fixing the access rights.

Identify the affected directory

  1. Click Go ▸ Utilities in the Apple menu bar.
  2. Double-click Terminal in the Utilities window.
  3. In the Terminal window, type:

    ls -alO /Library/StagedExtensions

    Ensure you have correctly entered the command, then press Enter.
  4. In the output, check for the following code:

    drwxr-xr-x@ 4 root wheel restricted

    If you see only drwxr-xr-x@ 4 root wheel without the restricted text, then the Staged Extensions directory is affected and you can try to fix the access rights for this directory.

    If you see no such file or directory, continue with the steps below to check the Kernel Extension Management directory.
  5. In the Terminal window, type:

    ls -alO /private/var/db/KernelExtensionManagement/

    Ensure you have correctly entered the command, then press Enter.
  6. In the output, check for the following code:

    drwxr-xr-x@ 4 root wheel restricted

    If you see only drwxr-xr-x@ 4 root wheel without the restricted text, then your Kernel Extension Management directory is affected and you can try to fix the access rights for this directory.

Fix access rights

The instructions below require executing a command in recovery mode and are intended only for advanced users. Customizations of your system settings, missing a step, or performing a step incorrectly can change a system setup that could prevent your Mac from starting properly and you could suffer a potential loss of data. Use these instructions at your own risk!
  1. Click the Apple icon in the menu bar, then select Restart.
  2. Immediately hold down the ⌘ Command key and R key simultaneously until you see the Apple logo.
  3. When the macOS Utilities window appears, click Utilities in the menu bar, then select Terminal.
  4. In the Terminal window, type the relevant code below according to which directory was missing the restricted tag:
    • Staged Extensions:

      chflags restricted /V*/*/private/var/db/StagedExtensions
    • Kernel Extension Management:

      chflags restricted /V*/*/private/var/db/KernelExtensionManagement
    Ensure you have correctly entered the command, then press Enter.
  5. Click the Apple icon in the menu bar, then select Restart.

You should now be able to allow all permissions by following the instructions in this article. If you continue to experience problems, contact Avast Support.

Further recommendations

For more information about your Avast product, refer to the relevant article below:

For more information about Avast One, refer to the following article:

  • Avast One 21.x for Mac and later
  • Avast Premium Security 14.6 for Mac and later
  • Avast Security 14.6 for Mac and later
  • Apple macOS 12.x (Monterey)
  • Apple macOS 11.x (Big Sur)
  • Apple macOS 10.15.x (Catalina)
  • Apple macOS 10.14.x (Mojave)
  • Apple macOS 10.13.x (High Sierra)

Was this article helpful?

Need additional help?

Contact us
Indonesia (English)
For home
For business
For partners
Company
1988-2022 Copyright Avast Software s.r.o.
Privacy policy Legal Report vulnerability Contact security Modern Slavery Statement Do not sell my info Subscription details