Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make use of identity tokens in audit(4) records in 10.14 #19

Open
droe opened this issue Jun 17, 2018 · 0 comments
Open

Make use of identity tokens in audit(4) records in 10.14 #19

droe opened this issue Jun 17, 2018 · 0 comments
Labels
pri:low not a priority but contribution welcome type:feature request for additional functionality

Comments

@droe
Copy link
Owner

droe commented Jun 17, 2018

10.14 will add identity tokens to audit records. They seem to carry code signing information of the binary which caused the audit event.

identity,0,com.apple.airport.airportd,complete,,complete,0x9003b5ecb83f531df993b3a68d34cde808b38381

Needs some testing, but probably we can make use of this in xnumon.

@droe droe added status:analysis-needed solution unclear, needs analysis by a developer type:feature request for additional functionality labels Jun 17, 2018
@droe droe added the label Jul 14, 2018
@droe droe modified the milestone: 0.2.0 Jul 14, 2018
@droe droe added pri:low not a priority but contribution welcome and removed status:analysis-needed solution unclear, needs analysis by a developer labels Jul 29, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pri:low not a priority but contribution welcome type:feature request for additional functionality
Projects
None yet
Development

No branches or pull requests

1 participant