It looks like the logic for skipping plists with n...
# macos
z
It looks like the logic for skipping plists with non-matching paths (https://github.com/facebook/osquery/blob/master/osquery/tables/system/darwin/launchd.cpp#L119-L122) uses the
matches
function (https://github.com/facebook/osquery/blob/master/osquery/core/tables.cpp#L307). This does not do any check for
LIKE
, and so all the plists are enumerated with the above query. @theopolis would it be possible to implement
literal_matches
for
LIKE
?