I've noticed an issue on both 10.5.8 and 10.6.2 systems.
I have a policy that:
- Forces a machine to check for Apple updates and install any if needed
- If any of the updates require a reboot, users get a message notifying them of the update, and to reboot now, or after clicking OK, will have auto reboot in 10 hours
We've noticed these two versions of Mac OS X have some users with reboots happening in less than 30 minutes. This issues seems to have started with the last Safari update (4.0.5) as this was the only update their machines needed. Going through the JAMF logs, they all report the same info:
Tue Mar 16 11:40:51 ssubramanian jamf[55832]: Checking for policies triggered by "every15"...
Tue Mar 16 11:40:51 ssubramanian jamf[55832]: Executing Policy Install Apple SU JSS 1-300 Tuesday...
Tue Mar 16 11:40:51 ssubramanian jamf[55832]: Installing all available Software Updates...
Tue Mar 16 11:43:21 ssubramanian jamf[55832]: A reboot was required with one or more of the installed updates.
Tue Mar 16 11:43:40 ssubramanian jamf[55832]: Blessing i386 OS X System on /...
Tue Mar 16 11:43:40 ssubramanian jamf[57324]: Reboot. 10.4+. Background.
Tue Mar 16 11:43:40 ssubramanian jamf[57324]: Adding launchd task to reboot...
Tue Mar 16 11:43:40 ssubramanian jamf[57349]: Reboot. Not background.
Tue Mar 16 11:43:40 ssubramanian jamf[57349]: Reboot. Created /private/tmp/com.jamfsoftware.displayMessage.tmp
Tue Mar 16 12:04:02 ssubramanian jamf[58020]: Checking for policies triggered by "every15"...
Tue Mar 16 12:13:27 ssubramanian jamf[58452]: Checking for policies triggered by "every15"...
Tue Mar 16 12:22:42 ssubramanian jamf[57349]: Rebooting computer...
Tue Mar 16 12:24:32 ssubramanian (2) jamf[131]: Checking for policies triggered by "startup"...
Tue Mar 16 12:24:32 ssubramanian (2) jamf[131]: Executing Policy Enforce Management Framework...
Tue Mar 16 12:24:48 ssubramanian (2) jamf[230]: Enforcing Management Framework...
Tue Mar 16 12:24:49 ssubramanian (2) jamf[230]: Creating Usage Monitoring Task...
Tue Mar 16 12:25:09 ssubramanian (2) jamf[321]: Checking for policies triggered by "login" for user "subbu"...
Tue Mar 16 13:09:10 ssubramanian (2) jamf[2780]: Checking for policies triggered by "every15"...
Tue Mar 16 13:22:39 ssubramanian (2) jamf[4144]: Checking for policies triggered by "every15"...
You can clearly see when the reboot was triggered, but then you see the startup time stamp.
Anyone else seeing this?
Is there any way to see the reboot trigger value in the JSS? Maybe in the DB?
