Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Duplicate rules for TeamsUpdaterDaemon #48

Open
jguerin opened this issue Jul 24, 2022 · 4 comments
Open

Duplicate rules for TeamsUpdaterDaemon #48

jguerin opened this issue Jul 24, 2022 · 4 comments

Comments

@jguerin
Copy link

jguerin commented Jul 24, 2022

This issue might be unique to me, as I'm dogfooding Teams, but I'm getting tons of duplicate rules for the same TeamsUpdaterDaemon in BlockBlock:
image

This might be due to the plist constantly being modified - is this causing BlockBlock to see it as a new item? Given that it's the same plist, shouldn't it just go through the existing allow rule?

@apfrod
Copy link

apfrod commented Sep 16, 2022

I am seeing the same issue but for bash (com.apple.bash) file: /Library/LaunchAgents/com.kaseya.update.plist

@objective-see
Copy link
Owner

@jguerin / @apfrod can you post a copy of the plists?

The issue is BlockBlock isn't able (for some reason) to pull out the item that is being persisted (from the plist) ...hence shows "item: not specified" ...hence creates multiple rules.

Seeing the plists would help track down why this is this case! Thanks!

@jguerin
Copy link
Author

jguerin commented Nov 13, 2022

Here's what's in the TeamsUpdater plist:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Label</key>
	<string>com.microsoft.teams.TeamsUpdaterDaemon</string>
	<key>MachServices</key>
	<dict>
		<key>com.microsoft.teams.TeamsUpdaterDaemon</key>
		<true/>
	</dict>
	<key>Program</key>
	<string>/Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon</string>
</dict>
</plist>

Let me know if you need an actual copy of it.

@apfrod
Copy link

apfrod commented Nov 15, 2022

Sorry, my plist seems to no longer be there. But here is /Library/LaunchAgents/com.kaseya.kusrtsk.plist from the same vendor:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Label</key>
	<string>com.kaseya.KUsrTsk</string>
	<key>ProgramArguments</key>
	<array>
		<string>/Applications/KUsrTsk.app/Contents/MacOS/KUsrTsk</string>
	</array>
	<key>RunAtLoad</key>
	<true/>
	<key>LimitLoadToSessionType</key>
	<string>Aqua</string>
</dict>
</plist>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants