Skip to content

Instantly share code, notes, and snippets.

@rockpapergoat
Created June 21, 2012 15:52
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rockpapergoat/2966617 to your computer and use it in GitHub Desktop.
Save rockpapergoat/2966617 to your computer and use it in GitHub Desktop.
encase pkg parts
#!/bin/sh
. /etc/rc.common
StartService ()
{
ConsoleMessage "Starting EnCase Servlet"
/usr/local/sbin/enosxintel -d -p /usr/local/sbin
}
StopService ()
{
ConsoleMessage "Stopping EnCase Servlet"
pid=`/bin/ps -ax | /usr/bin/grep [e]nosx | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
/bin/kill ${pid}
}
RestartService ()
{
ConsoleMessage "Restarting EnCase Servlet"
pid=`/bin/ps -ax | /usr/bin/grep [e]nosx | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
/bin/kill ${pid}
/usr/local/sbin/enosxintel -d -p /usr/local/sbin
}
RunService "$1"
#
# Copyright 2009 Joe Block <jpb@ApesSeekingKnowledge.net>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
#
include /usr/local/share/luggage/luggage.make
TITLE=encase
PACKAGE_VERSION=6.17.0.75
REVERSE_DOMAIN=com.guidancesoftware
PAYLOAD= \
pack-usr-local-sbin-enosxintel\
pack-encase-startup-EnCase \
pack-encase-startup-StartupParameters.plist \
pack-script-postflight
l_Library_StartupItems_EnCase: l_Library_StartupItems
@sudo mkdir -p ${WORK_D}/Library/StartupItems/EnCase
@sudo chown root:wheel ${WORK_D}/Library/StartupItems/EnCase
@sudo chmod 755 ${WORK_D}/Library/StartupItems/EnCase
pack-encase-startup-%: % l_Library_StartupItems_EnCase
@sudo ${INSTALL} -m 700 -g wheel -o root $< ${WORK_D}/Library/StartupItems/EnCase
#!/bin/bash
if [[ -e /Library/StartupItems/EnCase/EnCase ]]; then
/sbin/SystemStarter start EnCase
fi
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Description</key>
<string>EnCase</string>
<key>OrderPreference</key>
<string>Last</string>
<key>Messages</key>
<dict>
<key>restart</key>
<string>Restarting EnCase agent</string>
<key>start</key>
<string>Starting EnCase agent</string>
<key>stop</key>
<string>Stopping EnCase agent</string>
</dict>
<key>Provides</key>
<array>
<string>EnCase</string>
</array>
</dict>
</plist>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment