How to track files through Xcode APP in macOS environment?

Products Endpoint Protector Discussions & Questions
,
1

Is there a way to track or limit file exports to Xcode APPs that are used corely in macOS environments?

Currently, only Device Control for iPhone/iPad is available.

Is there a feature improvement or other way to do this at CAP level?

In a maybe in macOS environment, the export path of the most data will be Xcode.

Thank you!

2

Hi Jeremy,

Thanks for reaching out. What you can do is, select rsync via the CAP policy exitpoints. Xcode actually uses rsync to transfer files from what i have seen in previous support tickets raised for similar questions.

Regards,

Andreas

1 Like
3

Hello, Andeas.

Unfortunately, me and my team didn’t find the relevant rsync log when testing Xcode.

Do you have any other opinions or methods?

4

Hi Jeremy,

Im not sure I understand what logs you mean, as for us there are no “relevant rsync logs” we need.

Sorry if my explanation was not clear enough, or if I am missing something. What I need you to please try is:

  • Navigate to your existing CAP policy, or create a new one from scratch.
  • under policy exit points → “social media/others” search for and select: rsync

Then build you policy as you need it to be, and assign it to the machines you want it to be assigned to. Because, to my knowledge, xcode uses rysnc to transfer files our agent will block the file transfers initiated via xcode.

5

Sorry for the late reply.

I know that some functions in Xcode depend on rsync.

That’s only a “some”

NEP cant’t trace all Xcode file exports.

Many customers, including ours, want is to be able to trace or block to Xcode at the filesystem level, similar to git.

Isn’t this something the Netwrix Team should consider?

Please share your thoughts with Netwrix.

@simona.lazsadi I need your opinion. :slightly_smiling_face:

6

Hi Jeremy,

Thank you for your question.

Can you give us a few examples (screenshots) of Xcode file exports? Xcode contains a very large number of executables (more than 250) most of which can’t transfer files over the network.

We believe that monitoring the file accesses made by the main Xcode executable would slow it down too much so that’s why we want to know what are the use-cases that you want to cover.

Regards,
Simona

7

Hi Simona.

I’ll set up a lab environment and provide you with relevant scenarios and screenshots.

Please wait a few days.

Thank you always!!!

2 Likes