macOS-Security-Updates

KO | EN

gitlite — search

#typescript #ai-agents #deepseek-harness #dsh-plugin #open-source #ai #claude-code #cli #windows #codex #developer-tools #dsh

macOS-Security-Updates

★ 61 Open GitHub ↗

Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![macsu-platform-macos](https://img.shields.io/badge/platform-macOS-lightgrey.svg)
![macsu-code-shell](https://img.shields.io/badge/code-shell-yellow.svg)
[![macsu-license](http://img.shields.io/badge/license-MIT+-blue.svg)](https://github.com/JayBrown/macOS-Security-Updates/blob/master/LICENSE)

# macOS Security Updates (macSU) <img src="https://github.com/JayBrown/macOS-Security-Updates/blob/master/img/jb-img.png" height="20px"/>

**macOS Security Updates (macSU) is a LaunchAgent and shell script for macOS 10.15 (Catalina). It will run a scan every four hours and notify the user if any of the following macOS Security components has been been updated:**
* **Gatekeeper**
* **Gatekeeper E**
* **Incompatible Kernel Extensions (KEXT Exclusions)**
* **Malware Removal Tool (MRT)**
* **TCC**
* **XProtect**

**Plus:**
* **App Exceptions**
* **Compatibility Notification Data**
* **Core LSKD (kdrl)**
* **Core Suggestions**
* **Incompatible Apps**

**Plus:**
* **System**
* **System build**
* **EFI (Boot ROM)**
* **iBridge**
* **rootless.conf**

**macSU now also checks against a remote database (hosted on GitHub) containing the current version numbers of the more important macOS security components. They are the first six in the list above. If any of them is outdated, the user will be notified. macSU will not notify the user when the system itself (which mostly includes EFI and iBridge) is out-of-date, to account for users who do not wish to update to a new system (immediately).**

![screengrab](https://github.com/JayBrown/macOS-Security-Updates/blob/master/img/screengrab.jpg)

## Installation
* clone repo
* `chmod +x macsu.zsh && ln -s macsu.zsh /usr/local/bin/macsu.zsh`
* `cp local.lcars.macOSSecurityUpdates.plist $HOME/Library/LaunchAgents/local.lcars.macOSSecurityUpdates.plist`
* `launchctl load $HOME/Library/LaunchAgents/local.lcars.macOSSecurityUpdates.plist`
* optional: install **[terminal-notifier](https://github.com/julienXX/terminal-notifier)**

### Testing
**Execute `macsu.zsh` at least once**, e.g. by running the LaunchAgent with `launchctl start local.lcars.macOSSecurityUpdates`, or by calling the script directly: `./macsu.zsh`

Then you can test the update notification functionality i.a. by entering the following command sequence:

`plutil -replace CFBundleShortVersionString -integer 2098 "$HOME/.cache/macSU/XP-version.plist" && launchctl start local.lcars.macOSSecurityUpdates`

### Notes
* The agent (and thereby the script) will run every 4 hours.
* **macSU** is only compatible with macOS 10.15 (Catalina).

## Uninstall
* `launchctl unload $HOME/Library/LaunchAgents/local.lcars.macOSSecurityUpdates.plist`
* remove the cloned `macOS-Security-Updates` GitHub repository
* `rm -f /usr/local/bin/macsu.zsh`
* `rm -rf $HOME/.cache/macSU`
* `rm -f $HOME/Library/Logs/local.lcars.macOSSecurityUpdates.log`
* `rm -f /tmp/local.lcars.macOSSecurityUpdates.stdout`
* `rm -f /tmp/local.lcars.macOSSecurityUpdates.stderr`

## Future
* find a way to read the System Integrity Protection (SIP) version number on Catalina

## Thanks
* **Howard Oakley** (@hoakleyelc) of **[EclecticLight](https://eclecticlight.co/)** for providing the [databases](https://github.com/hoakleyelc/updates) of current version numbers

macOS-Security-Updates

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README