ES_EVENT_TYPE_NOTIFY_CLOSE event is not being received for File copy via Finder on Monterey 12.3 Beta 2

App & System Services Core OS
rupesh OP
Created Feb ’22
Replies 2
Boosts 0
Views 875
Participants 2

Scenario: Copy file operation via Finder to an external device like USB

Expected behavior: Endpoint Security Client should receive ES_EVENT_TYPE_NOTIFY_CLOSE event

Current behavior: ES_EVENT_TYPE_NOTIFY_CLOSE is not been for the file being copied with Monterey 12.3 Beta.

If you copy same file via cp command, ES_EVENT_TYPE_NOTIFY_CLOSE is seen

Is this a bug?

Replies  2
Boosts  0
Views  875
Participants  2
DTS Engineer OP
Apple
Feb ’22

There’s definitely someting weird going on with close events in 12.3 beta (r. 89062478). I encourage you to file your own bug about this.

Please post your bug number, just for the record.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0
rupesh OP
Feb ’22

The ticket id is: FB9907354

0
ES_EVENT_TYPE_NOTIFY_CLOSE event is not being received for File copy via Finder on Monterey 12.3 Beta 2
First post date Last post date
 
 
Q