-
Notifications
You must be signed in to change notification settings - Fork 3
fgCommand.sh
fgPaths.sh
Usage: sudo ./fgPaths.sh {add |convert|delete |init|list|setup |show|sync|wipe}
add
Used to add new watch paths. Here's an example:
[sourcecode language="bash"]
sudo ./fgpaths.sh add /mach_kernel
[/sourcecode]
This will add /mach_kernel to the list of watch paths. Might come in handy for people who need to boot with a modified kernel.
convert
Converts /Extra/FileGuard/com.fileguard.config.plist from binary to XML format (and vice versa).
delete
Deletes a watch path from /Library/LaunchDaemon/com.fileguard.watcher.plist and removes the file from the FileGuard storage.
init
Creates an empty copy of /Extra/FileGuard/com.fileguard.config.plist This will also becalled when you add a watch path so it is not required to do this yourself.
list
Shows a list with all watch paths in /Extra/FileGuard/com.fileguard.config.plist And here is the default output:
[code]WatchPaths[0]: /boot
WatchPaths[1]: /usr/standalone/i386/boot
WatchPaths[2]: AppleHDA.kext/Contents/MacOS/AppleHDA
WatchPaths[3]: AppleHDA.kext/Contents/Resources/layout892.xml
WatchPaths[4]: AppleHDA.kext/Contents/Resources/Platforms.xml
WatchPaths[5]: AppleHDA.kext/Contents/PlugIns/AppleHDAHardwareConfigDriver.kext/Contents/Info.plist
WatchPaths[6]: FakeSMC.kext
WatchPaths[7]: AppleIntelCPUPowerManagement.kext/Contents/MacOS/AppleIntelCPUPowerManagement
WatchPaths[8]: AppleIntelSNBGraphicsFB.kext/Contents/MacOS/AppleIntelSNBGraphicsFB
WatchPaths[9]: ATI6000Controller.kext/Contents/MacOS/ATI6000Controller
WatchPaths[10]: IONetworkingFamily.kext/Contents/PlugIns/AppleIntelE1000e.kext
WatchPaths[11]: IONetworkingFamily.kext/Contents/PlugIns/AppleYukon2.kext
[/code]
setup
Setup creates a default list with watch paths. Here is the default file:
[sourcecode language="xml"]
show
Same as list.
sync
Synchronises the watch paths in: /Library/LaunchDaemon/com.fileguard.watcher.plist with the ones in: /Extra/FileGuard/com.fileguard.config.plist
And this isn't done automatically, because that enables you to add or delete watch paths, one by one, and then sync the two files.
wipe
Wipe effectively removes: /Library/LaunchDaemon/com.fileguard.watcher.plist A crude way of disabling FileGuard.