[SCAP-On-Apple-Dev] [SCAP-On-Apple] Mac OS X proposed pkginfo OVAL Test.

[Jacobsen, Jasen W.]

What about non application things like libraries, printer drivers or browser plug-ins?

And can you elaborate a little on "use a metadata query and launch services to locate the apps"? Perhaps there are other OS X capabilities that OVAL should make available to system auditors.

- Jasen.

From: Josh Wisenbaker <dubs at apple.com<mailto:dubs at apple.com>>
Date: Friday, July 12, 2013 11:44 AM
To: Shane Shaffer <shane.shaffer at g2-inc.com<mailto:shane.shaffer at g2-inc.com>>
Cc: MITRE Employee <jasenj1 at mitre.org<mailto:jasenj1 at mitre.org>>, oval-developer-list OVAL Developer List/Closed Public Discussion <oval-developer-list at lists.mitre.org<mailto:oval-developer-list at lists.mitre.org>>, "scap-on-apple at lists.macosforge.org<mailto:scap-on-apple at lists.macosforge.org>" <scap-on-apple at lists.macosforge.org<mailto:scap-on-apple at lists.macosforge.org>>, "scap-on-apple-dev at lists.macosforge.org<mailto:scap-on-apple-dev at lists.macosforge.org>" <scap-on-apple-dev at lists.macosforge.org<mailto:scap-on-apple-dev at lists.macosforge.org>>
Subject: Re: [SCAP-On-Apple-Dev] [SCAP-On-Apple] Mac OS X proposed pkginfo OVAL Test.


As for finding installed applications I’ve always found the best option is to use a metadata query and launch services to locate the apps, and then simply read the Info.plist from the bundle to get the version. You could then compare this to the installer DB to find any missing software that was claiming to be installed.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/scap-on-apple-dev/attachments/20130712/da5d0831/attachment.html>