mardi 17 mars 2015

Mac OSX : How to protect daemon process from stopping by root/admin


I've a security daemon which performs many security related tasks. Daemon plist is part of /Library/LaunchDaemon/com.xyz.securityservice.plist also KeepAlive flag is 1.


The daemon I've currently can be stopped using this command - sudo launchctl unload /Library/LaunchDaemon/com.xyz.securityservice.plist


I wanted to restrict security daemon from unloading by this command.


I do not want anyone to unload/stop this daemon. One can stop security daemon only if he has security password(not system password) or if we send some private notification to daemon to stop itself. Daemon will observe this private notification.


Please suggest any pointer on this.





Aucun commentaire:

Enregistrer un commentaire