Jump to content
ITMGR

Mac Business customer with RTProtectionDaemon Full Disk Access on Mojave

Recommended Posts

Mohave 10.14.6 Macbook Pro 2018 Cloud Malwarebytes Customer

steady flow of console logging on a MacBook host of this sort:

error    13:20:28.570043 -0500    kernel    Sandbox: RTProtectionDaem(108) System Policy: deny(1) file-read-data /Users/admin/Library/Messages
error    13:20:28.570237 -0500    kernel    Sandbox: RTProtectionDaem(108) System Policy: deny(1) file-read-data /Users/admin/Library/HomeKit
error    13:20:28.571947 -0500    kernel    Sandbox: RTProtectionDaem(108) System Policy: deny(1) file-read-data /Users/admin/Library/Mail
error    13:20:28.585037 -0500    kernel    Sandbox: RTProtectionDaem(108) System Policy: deny(1) file-read-data /Users/admin/Library/Safari
error    13:20:28.586034 -0500    kernel    Sandbox: RTProtectionDaem(108) System Policy: deny(1) file-read-data /Users/admin/Library/Suggestions

There was a post about this in the home version, however the protection daemon is a different bundle for the business version (at least from what I can find) so the advice there in the Home version didn't help me to locate the "RTProtectionDaem"

Resolution: I dragged...
  "Macintosh HD⁩ ▸ ⁨Library⁩ ▸ ⁨Application Support⁩ ▸ ⁨Malwarebytes⁩ ▸ ⁨NCEP⁩ ▸ ⁨Engine.bundle⁩ ▸ ⁨Contents⁩ ▸ ⁨PlugIns ▸ ⁨⁩Malwarebytes Protection"

...into the System Preferences control panel for Security Privacy tab location Full Disk Access.

I'm wondering if I was on track with this approach. It appears to have stopped the logging, but now Im seeing Safari complaining (maybe unrelated)

error    13:37:22.995343 -0500    Safari    kill() returned unexpected error 1
error    13:37:23.002972 -0500    Safari    kill() returned unexpected error 1
error    13:37:23.011062 -0500    Safari    kill() returned unexpected error 1
 

Share this post


Link to post
Share on other sites
On 1/20/2020 at 1:42 PM, ITMGR said:

error    13:37:22.995343 -0500    Safari    kill() returned unexpected error 1
error    13:37:23.002972 -0500    Safari    kill() returned unexpected error 1
error    13:37:23.011062 -0500    Safari    kill() returned unexpected error 1

These error messages appear to be "normal." I see them on a system here that does not have Endpoint Protection installed, and many others have reported them as well:

https://stackoverflow.com/questions/58321114/why-i-get-the-console-warning-process-kill-returned-unexpected-error-1-when

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.