xnumon icon indicating copy to clipboard operation
xnumon copied to clipboard

Make use of identity tokens in audit(4) records in 10.14

Open droe opened this issue 7 years ago • 0 comments

10.14 will add identity tokens to audit records. They seem to carry code signing information of the binary which caused the audit event.

identity,0,com.apple.airport.airportd,complete,,complete,0x9003b5ecb83f531df993b3a68d34cde808b38381

Needs some testing, but probably we can make use of this in xnumon.

droe avatar Jun 17 '18 21:06 droe