In the ESF framework, if I set up a process through audit token mute. Will the creation and corresponding child processes of this process also be mute mute.
Will [the] child processes of this process also be mute
No.
If you’d like to see such support added in the future, I encourage you to file an enhancement request describing your requirements. Please post your bug number, just for the record.
In the meantime, one option is to mute all events except for the fork event and then apply the mute to the newly forked process.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
