{"id":2561,"date":"2019-07-17T17:28:37","date_gmt":"2019-07-17T08:28:37","guid":{"rendered":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/?page_id=2561"},"modified":"2019-07-17T17:28:37","modified_gmt":"2019-07-17T08:28:37","slug":"tmsm-process-exclude","status":"publish","type":"page","link":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/tmsm-process-exclude\/","title":{"rendered":"About process exclusion method in Trend Micro Security for Mac (TMSM)"},"content":{"rendered":"

\nThis is a method to exclude a specific process from the inspection of TMSM in the TMSM client.
\nThis page shows how to exclude Google Drive File Stream (GDFS) processes from inspection as an example.
\nWith regard to the exclusion of GDFS, it has been confirmed that the following settings under Mac OS 10.14.5 have no effect(currently asking for measures)<\/u><\/b>\n<\/p>\n

All the methods described here are not supported.
Please do it at your own risk.<\/h2>\n

\n————————————————————
\n\u25bc Advance preparation
\n————————————————————
\nDownload a shell script to unload the TMSM agent.
\n\u3010Download URL\u3011
\nTMSM_load.zip<\/a>
\n\u3010File name\u3011
\nTMSM_load.zip
\n\u3010File after decompression\u3011
\nload.sh
\nunload.sh\n<\/p>\n

\n————————————————————
\n\u25bc Process exclusion
\n————————————————————
\nThen exclude the process from the operation of the TMSM agent.
\nSince process exclusion can not be performed from the server, you need to execute it on the TMSM agent.<\/p>\n

Exclude the following processes:<\/p>\n

\r\n1: \/Applications\/Google Drive File Stream.app\/Contents\/MacOS\/Google Drive File Stream\r\n2: \/Applications\/Google Drive File Stream.app\/Contents\/Frameworks\/Google Drive File Stream Helper.app\/Contents\/MacOS\/Google Drive File Stream Helper\r\n3:\r\n<\/pre>\n
    \n
  1. Unload the TMSM agent.\n
      \n
    1. Start the terminal.\n<\/li>\n
    2. Execute the su command and enter the password.\n
      \r\n<mymac %> sudo su\r\n<mymac %>\r\n<\/pre>\n<\/li>\n
    3. Enter the path for “unload.sh” and execute it.
      \u203bIt is convenient to drag “unload.sh” to the terminal console and execute it.\n<\/li>\n<\/ol>\n<\/li>\n
    4. Execute the following command to add the Google Drive File Stream process to the exclusion list.\n
      \r\n<mymac %> sudo \/usr\/libexec\/PlistBuddy -c "Add :RealtimeScan:exception_processes: string \/Applications\/Google Drive File Stream.app\/Contents\/MacOS\/Google Drive File Stream" \/Library\/Application\\ Support\/TrendMicro\/common\/conf\/TmAntiMalware.conf.plist\r\n<mymac %> sudo \/usr\/libexec\/PlistBuddy -c "Add :RealtimeScan:exception_processes: string \/Applications\/Google Drive File Stream.app\/Contents\/Frameworks\/Google Drive File Stream Helper.app\/Contents\/MacOS\/Google Drive File Stream Helper"  \/Library\/Application\\ Support\/TrendMicro\/common\/conf\/TmAntiMalware.conf.plist\r\n<mymac %> \r\n<\/pre>\n<\/li>\n
    5. Open the following file.\n
      \r\n \/Library\/Application\\ Support\/TrendMicro\/common\/conf\/TmAntiMalware.conf.plist\r\n<\/pre>\n<\/li>\n
    6. Check that the following is registered in the exception_processes section of RealtimeScan.\n
      \r\n1: \/Applications\/Google Drive File Stream.app\/Contents\/MacOS\/Google Drive File Stream\r\n2: \/Applications\/Google Drive File Stream.app\/Contents\/Frameworks\/Google Drive File Stream Helper.app\/Contents\/MacOS\/Google Drive File Stream Helper\r\n3:\r\n<\/pre>\n<\/li>\n<\/ol>\n
      \n
      The work is complete. 
      Restart the computer or execute load.sh in step 1 to start TMSM Agent.<\/p>\n","protected":false},"excerpt":{"rendered":"
      This is a method to exclude a specific process from the inspection of TMSM in the TMSM client. This page shows how to exclude Google Drive File Stream (GDFS) processes from inspection as an example. With regard to the exclusion … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":24,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2561","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"publishpress_future_action":{"enabled":false,"date":"2026-05-01 05:02:45","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/pages\/2561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/comments?post=2561"}],"version-history":[{"count":23,"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/pages\/2561\/revisions"}],"predecessor-version":[{"id":2584,"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/pages\/2561\/revisions\/2584"}],"wp:attachment":[{"href":"https:\/\/www.cc.tsukuba.ac.jp\/wp_e\/wp-json\/wp\/v2\/media?parent=2561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}