macOS keeps some folders private: Mail, Messages, Safari data, Time Machine folders, the Trash and cloud folders an app has not been allowed to read. Without access dux skips them, counts them as unknown (never as zero) and tells you how many it skipped.
Everything else works. Full Disk Access is optional, and dux itself never asks with a popup. The Welcome screen explains it, and so does the Overview, where it says N folders couldn’t be read. macOS itself may ask once when dux first reads Documents, Downloads or a removable volume.
Turn it on
- Open System Settings > Privacy & Security > Full Disk Access.
- Turn on dux. If it is not in the list, click the + button and choose dux in Applications.
- Rescan in dux.
Choose Not Now on the card to hide it. You can turn access on later in Settings, Scanning, which has a button that opens System Settings.
The command line tool
The dux command needs the same permission for the terminal that runs it (Terminal or iTerm in the same list). Without it, ~/.Trash and a few other folders are reported as unreadable.
Mac App Store build
The App Store build is sandboxed and works with folders you choose through the open panel instead of Full Disk Access. Pick the folder to scan and dux remembers it.
External drives
Scanning external drives and network shares inside a scan is a Pro feature. A drive you scan directly as a folder works on every plan.