cancel
Showing results for 
Search instead for 
Did you mean: 

Host Checker Policy - OS Detection (Windows, Max OS X, Linux)

ADG_
Occasional Contributor

Host Checker Policy - OS Detection (Windows, Max OS X, Linux)

Anyone succesfully implemented Host Checker Policy OS detection before loging in users in web portal?

I noticed that you can discriminate between Windows versions, but Mac OS X and Linux seem to have no predefined rules.

Has anyone come up with a clever solution that would achieve OS detection?

Thanks,

Alessandro

3 REPLIES 3
murmur_
Not applicable

Re: Host Checker Policy - OS Detection (Windows, Max OS X, Linux)

Sorry for bumping an old thread but has anyone found a solution for this? I need to check for OS X versions 10.4 and later and deny everything else.
Message Edited by murmur on 02-02-2009 06:07 AM
muttbarker_
Valued Contributor

Re: Host Checker Policy - OS Detection (Windows, Max OS X, Linux)

Well, as you know the host checking is really limited. Do you have any access to the MAC clients? Can you push a script out and so do some file parsing?

The files /system/library/coreservices/systemversion.plist is updated with each new major/minor OS release. In this file there is a value called string that contains the version number.

You could parse this file and pull out the version from it and then create a corresponding "version" file which you could then check for.

You can also get the same data from terminal - issue the command "system_profiler SPSoftwareDataType" and pipe the results to a file - then parse it and rename appropriately.

Hope that helps -

David_Bailey_
Not applicable

Re: Host Checker Policy - OS Detection (Windows, Max OS X, Linux)

Without writing and distributing scripts that execute at system startup to create files based on the version of Mac OS X, and then checking for the existence of those files with Host Checker, one way to ensure certain versions of the OS is simply to calculate MD5 hashes of the /mach_kernel file.

Of course, you'll have to update these hashes each time a new release comes out, but you can then create a single rule requiring the existence of /mach_kernel and a list of allowable MD5 hashes which works pretty well as a version checker.

And BTW- does anyone else think it might be a good idea for Host Checker to be able to execute a command and test the results?

Message Edited by David_Bailey on 09-21-2009 10:14 AM