https://github.com/osquery/osquery logo
#fleet
Title
# fleet
o

oneiroi

10/26/2022, 4:28 PM
Hello everyone, has anyone else experiences that in updating to macOS 13.0 the file:
/Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist
disappears? We've seen this on a handful of systems, and it appears to be a temporary situation, curious to know if anyone else has observed a similar issue with the upgrade to macOS 13 ?
k

Kathy Satterlee

10/27/2022, 12:25 AM
Hey @oneiroi! I hadn’t heard of that happening. Is it causing any issues with scanning?
o

oneiroi

10/27/2022, 2:50 PM
Hi @Kathy Satterlee ! We're temporarily seeing a policy failure (we check to see if the MRT signatures are up to date fleet wide), once the Updates have applied this failure is no longer present , it's an ephemeral issue just asking here incase anyone else has seen similar behaviours with their endpoints (as well as validate I'm not going crazy of course 😅 )
k

Kathy Satterlee

10/27/2022, 2:51 PM
Thanks for sharing!
o

oneiroi

11/10/2022, 11:14 AM
To close this out, please note that this corrects the issue of the missing MRT & Protect Plist files:
Copy code
softwareudpate -ai --include-config-data
Though I will add this does eventually correct itself in the next update check, can be resolved if there is a need to do so.
k

Kathy Satterlee

11/10/2022, 3:32 PM
Thanks so much for the update.