Skip to main content
Question

Java and xprotect

  • January 14, 2013
  • 1 reply
  • 6 views

ImAMacGuy
Forum|alt.badge.img+23

Is there a way to have an ea setup to check if its received the xprotect data for the java exploits?

1 reply

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • January 14, 2013

The following reads back the last modification date from the Xprotect plist:

defaults read /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta LastModification

But I think the better thing to look at is if the blocked plug in field for Oracle is correct. Perhaps like this?

defaults read /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta PlugInBlacklist | awk -F"= " '/com.oracle.java/{ getline; print $2 }' | sed -e 's/"//g;s/;//g'