Skip to content

Instantly share code, notes, and snippets.

@watbulb
Created November 12, 2019 22:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save watbulb/b3a731bd1b325046c40351d62c94c68c to your computer and use it in GitHub Desktop.
Save watbulb/b3a731bd1b325046c40351d62c94c68c to your computer and use it in GitHub Desktop.
Catalina (10.15.1) apple root sandboxed processes during idle
[+] Sandboxed Root Processes:
80:/usr/sbin/systemstats
82:endpointsecurityd
89:/usr/libexec/logd
98:/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
104:/usr/libexec/coreduetd
107:/usr/libexec/opendirectoryd
108:/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
114:/usr/sbin/securityd
127:/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
132:/usr/sbin/bluetoothd
135:/usr/libexec/sandboxd
136:/usr/libexec/corebrightnessd
137:/usr/libexec/AirPlayXPCHelper
145:/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
146:/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer
147:/System/Library/CoreServices/coreservicesd
149:/usr/libexec/trustd
212:/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/contextstored
215:/usr/libexec/nehelper
238:/usr/libexec/airportd
239:/usr/libexec/usbd
243:/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
247:/usr/libexec/mobileassetd
271:/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
276:/usr/libexec/secinitd
288:/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
289:/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
290:/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
292:/usr/libexec/colorsyncd
298:/usr/libexec/bootinstalld
303:/usr/sbin/distnoted
323:/usr/libexec/securityd_service
375:/usr/sbin/systemsoundserverd
408:/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
477:/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd
481:/usr/libexec/rtcreportingd
498:/usr/libexec/wifivelocityd
541:/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
542:/usr/sbin/systemstats
648:/usr/libexec/mobileactivationd
704:/usr/libexec/dprivacyd
1895:/System/Library/Frameworks/SystemExtensions.framework/Versions/A/Helpers/sysextd
Sandboxed root processes: 42
Non-Sandboxed root processes: 64
@watbulb
Copy link
Author

watbulb commented Nov 12, 2019

Non-Sandboxed processes not shown

@vivacenontroppo
Copy link

Why are you keep it here and what they mean?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment