[launchd-dev] Phantom Plist

Damien Sorresso dsorresso at apple.com
Mon Oct 20 10:20:40 PDT 2008


On Oct 20, 2008, at 9:33 AM, Charles Darwin wrote:
> Hi all,
>
> I have a launcd running on my system (as root) but I cannot find it.
> It launches a local afp share point using `mount_afp`. I have run
> `launchctl list` for all users, including the root user, and they all
> return blank (except the root user, see below). I have found the
> script that it uses for launching the share point but I cannot find
> the plist file that feeds the launchd.
>
> $ sudo ls /Library/Launch* && ls /Users/*/Library/Launch* && ls /
> System/Library/Launch*

If you know where the script for the job is located, you should grep  
the relevant directories for that path. If no plist is resident on- 
disk pointing to that job, someone is dynamically creating the job.  
This is possible through `launchctl submit` or through the use of  
undocumented APIs.

In any case, without knowing the job's label, it's hard for me to do  
much more beyond speculate as to what's happening.
-- 
Damien Sorresso
BSD Engineering
Apple Inc.

> Password:
> /Library/LaunchAgents:
>
> /Library/LaunchDaemons:
> PACESupport.plist           org.macports.OpenSSH.plist
> org.macports.rsyncd.plist
> /System/Library/LaunchDaemons:
> total 296
> 8 -rw-r--r--   1 root  wheel    1K Mar 20  2005 eppc.plist
> 8 -rw-r--r--   1 root  wheel  848B Aug 16  2007 distccd.plist
> 8 -rw-r--r--   1 root  wheel  828B Sep 29 14:36 ssh.plist
> 8 -rw-r--r--   1 root  wheel  800B Aug 31  2007 smbd.plist
> 8 -rwxr-xr-x   1 root  wheel  794B Oct  6 17:00  
> com.apple.usbmuxd.plist*
> 8 -rw-r--r--   1 root  wheel  729B Mar 20  2005 printer.plist
> 8 -rw-r--r--   1 root  wheel  715B Sep 10 16:59 tftp.plist
> 8 -rw-r--r--   1 root  wheel  713B Oct 12  2007
> com.apple.dnbvolunteer.plist
> 8 -rw-r--r--   1 root  wheel  697B Aug 31  2007 nmbd.plist
> 8 -rw-r--r--   1 root  wheel  692B Mar 24  2005 swat.plist
> 8 -rw-r--r--   1 root  wheel  682B Mar 20  2005 finger.plist
> 8 -rw-r--r--   1 root  wheel  678B Mar 24  2005 bootps.plist
> 8 -rw-r--r--   1 root  wheel  671B Mar 20  2005 ftp.plist
> 8 -rw-r--r--   1 root  wheel  628B Mar 26  2005 comsat.plist
> 8 -rw-r--r--   1 root  wheel  627B Oct 12  2007
> com.apple.dnbobserver.plist
> 8 -rw-r--r--   1 root  wheel  627B Mar 20  2005 ntalk.plist
> 8 -rw-r--r--   1 root  wheel  625B Mar 20  2005 com.apple.periodic-
> weekly.plist
> 8 -rw-r--r--   1 root  wheel  623B Mar 20  2005 com.apple.periodic-
> monthly.plist
> 8 -rw-r--r--   1 root  wheel  615B Mar 20  2005 telnet.plist
> 8 -rw-r--r--   1 root  wheel  594B Mar 20  2005
> com.apple.xgridcontrollerd.plist
> 8 -rw-r--r--   1 root  wheel  581B Mar 20  2005 login.plist
> 8 -rw-r--r--   1 root  wheel  579B Mar 20  2005 com.apple.periodic-
> daily.plist
> 8 -rw-r--r--   1 root  wheel  578B Mar 20  2005 exec.plist
> 8 -rw-r--r--   1 root  wheel  575B Mar 20  2005 shell.plist
> 8 -rw-r--r--   1 root  wheel  574B Mar 20  2005
> com.apple.xgridagentd.plist
> 8 -rw-r--r--   1 root  wheel  566B Mar 20  2005  
> org.xinetd.xinetd.plist
> 8 -rw-r--r--   1 root  wheel  544B Oct  9 00:02  
> com.apple.ODSAgent.plist
> 8 -rw-r--r--   1 root  wheel  531B Mar 20  2005  
> org.postfix.master.plist
> 8 -rw-r--r--   1 root  wheel  524B Mar 26  2005  
> com.apple.portmap.plist
> 8 -rw-r--r--   1 root  wheel  516B Mar 20  2005  
> com.apple.syslogd.plist
> 8 -rw-r--r--   1 root  wheel  516B Mar 20  2005 com.vix.cron.plist
> 8 -rw-r--r--   1 root  wheel  495B Mar 20  2005
> com.apple.KernelEventAgent.plist
> 8 -rw-r--r--   1 root  wheel  458B Aug  9  2007
> com.apple.dashboard.advisory.fetch.plist
> 8 -rw-r--r--   1 root  wheel  447B Jan  8  2007
> com.apple.mDNSResponder.plist
> 8 -rw-r--r--   1 root  wheel  446B Dec 14  2006 org.isc.named.plist
> 8 -rw-r--r--   1 root  wheel  445B Mar 20  2005 com.apple.atrun.plist
> 8 -rw-r--r--   1 root  wheel  437B Mar 20  2005  
> com.apple.nibindd.plist
>
> /System/Library/LaunchAgents:
>
> root# launchctl list
> com.google.keystone.daemon
> com.paceap.pacesupport
> com.apple.dashboard.advisory.fetch
> com.apple.dnbobserverd
> com.apple.KernelEventAgent
> com.apple.mDNSResponder
> com.apple.nibindd
> com.apple.periodic-daily
> com.apple.periodic-monthly
> com.apple.periodic-weekly
> com.apple.portmap
> com.apple.syslogd
> com.apple.usbmuxd
> com.vix.cron
> org.postfix.master
> org.xinetd.xinetd
> com.openssh.sshd
>
>
> Thanks,
> Charles
> _______________________________________________
> launchd-dev mailing list
> launchd-dev at lists.macosforge.org
> http://lists.macosforge.org/mailman/listinfo.cgi/launchd-dev

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2474 bytes
Desc: not available
Url : http://lists.macosforge.org/pipermail/launchd-dev/attachments/20081020/5ba54031/attachment.bin 


More information about the launchd-dev mailing list