Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 13005 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

v8.0.6C constantly writing to LaunchDaemons folder

Duke

One A/V technique is to employ an Applescript that monitors the /Library/LaunchDaemons & /Library/LaunchAgents folders, and posts an alert whenever a program tries to add something there. Since v8.0.6C was released, Sophos A/V for the Mac is constantly writing a new com.sophos.autoupdate.plist, com.sophos.intercheck.plist & com.sophos.notification.plist to the LaunchDaemons folder, triggering an alert.  This appears to be happening as part of the auto-update process.

Please STOP this behavior on the part of Sophos A/V for the Mac.

Thank you!

:1009684


This thread was automatically locked due to age.
Parents
  • 0

    Someone suggested an even more elegant solution to me, and one that you could use in other parts of the system too: checksum the file contents and keep that cached so that if there's a contents changed event, if the actual information hasn't changed, you can ignore it.  The plists shouldn't be changing contents... they just get overwritten (which has the benefit of removing corrupted plist files, among other things).

    :1009768
Reply
  • 0

    Someone suggested an even more elegant solution to me, and one that you could use in other parts of the system too: checksum the file contents and keep that cached so that if there's a contents changed event, if the actual information hasn't changed, you can ignore it.  The plists shouldn't be changing contents... they just get overwritten (which has the benefit of removing corrupted plist files, among other things).

    :1009768
Children
No Data