search

objective-see / BlockBlock

BlockBlock provides continual protection by monitoring persistence locations.
GNU General Public License v3.0
619 stars 38 forks source link

Update regex paths to only match home folder library #39

Closed kylehickinson closed 2 years ago

kylehickinson commented 2 years ago

This changes the regex so that only 1 folder can be detected between /Users and /Library which should be the users home folder. This fixes a bug where BlockBlock would falsely alert the user that a launch agent or daemon was installed when in reality it existed in a deeper folder structure such as /Users/test/Downloads/Library/LaunchAgents/com.test.plist

This should fix https://github.com/objective-see/BlockBlock/issues/38

If the described behaviour is not the goal of BlockBlock please feel free to close this PR. Thanks!

objective-see commented 2 years ago

Thanks @kylehickinson for debugging the issue, and providing a fix! 🙏🏽