https://github.com/osquery/osquery logo
Title
a

Andrew Zick

03/20/2023, 10:26 PM
A bit of a followup on my question in #general, for Mac, I don’t quite understand where this call to
gethostuuid()
. Is it a MacOS api or something that returns a uuid that the device already generated at some point?
z

zwass

03/21/2023, 1:38 AM
In my experience, the hardware UUIDs generated by macOS are quite stable.
a

Andrew Zick

03/21/2023, 1:39 AM
Ah you’ve predicted my second question, which isn’t so much looking for an answer as saying “hey I’ve run into a situation where two MacOS devices have the same uuid, is this odd?”
z

zwass

03/21/2023, 1:40 AM
Yes, I would say that is very odd.
Less odd if they are VMs though.
a

Andrew Zick

03/21/2023, 1:40 AM
Right, unfortunately I’ll have to dig in more as I don’t think VMs are to blame. Thank you!
b

Brian Bergstrand

03/21/2023, 4:05 PM
The only time the hardware UUID will change on Macs is if the motherboard is replaced.