Access official resources from Carbon Black experts
IssueBit9 Agent will prevent the Finder from writing to the .DS_Store if a File Integrity rule is enabled for that directory.
SymptomsThe Bit9 Agent will show a block notifier on screen with the process as 'Finder'
CauseThis is intended behavior for a File Integrity rule (preventing writes).
SolutionYou can create a custom rule to silence the notifier.
**Important** - Please test out the rule in a OS X testing policy before placing into production.
Name: OS X File Integrity .DS_Store Silence
Description: Ignore Finder to modify the .DS_Store for Directory XYZ
Rule Type: Advanced
Write Action: Silence
Path or File: Specific Path...
Process: Specific Process...
User or Group: Any User
Rule Applies to: All Policies
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.