Skip to content

Instantly share code, notes, and snippets.

@TG-Techie

TG-Techie/macOS-ref-info.md

Created May 26, 2022 19:20
Show Gist options
  • Save TG-Techie/f703bd768e351e3f914b1177fae7df0e to your computer and use it in GitHub Desktop.
Save TG-Techie/f703bd768e351e3f914b1177fae7df0e to your computer and use it in GitHub Desktop.
Download ZIP
macOS Reference Info
Raw
macOS-ref-info.md

macOS Reference Info

Extended Attributes

Keywords: xattr

Extended attributes are metadata associated with a file in a os managed key-value store. These can be accessed/editeid with the xattr command. (may need installation?)

Quarantine XAttr

com.apple.quarantine xattr values

Apple has a com.apple.quarantine extended attribute used by gatekeeper to indicate the file should be run in a sandbox or, commonly, is downloaded over a network.

To view the related info

$ xattr -p com.apple.quarantine /file/to/inspect.txt
<value in hex>;<hex timestamp>;<source program>;<uuid>

Values:

  • 0081 = airdrop
  • 0083 = internet download

source: https://eclecticlight.co/2019/10/24/airdrop-and-quarantine-flags/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment