Use Endpoint Security framework in a daemon service

Question

keefo OP

Created Jun ’21

Replies 1

Boosts 0

Participants 2

To use the Endpoint Security framework, Apple provides a demo to build a system extension registered as an es client.

During my testing, I noticed that creating es client in a daemon service is also works.

Besides the protection that we get from the system extension subsystem, are there any other reasons that we should void using es in a daemon service?

Answered by DTS Engineer in 679745022

are there any other reasons that we should [a]void using es in a daemon service?

I wouldn’t say “avoid” but rather I’d pitch this as “Are there other advantages to using a sysex?” And the answer to that is “Yes!” WWDC 2020 Session 10159 Build an Endpoint Security app goes into this in some depth.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Boost

Answer 1

DTS Engineer OP

Apple

Jun ’21

Accepted Answer

are there any other reasons that we should [a]void using es in a daemon service?

I wouldn’t say “avoid” but rather I’d pitch this as “Are there other advantages to using a sysex?” And the answer to that is “Yes!” WWDC 2020 Session 10159 Build an Endpoint Security app goes into this in some depth.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0