Content to identify Macs affected by 9/24 /var symlink break

On 9/24, it was discovered that the Google update service Keystone broke the /var -> /private/var symlink on non-SIP protected Macs. A Mac in this state will not be able to boot if it is rebooted. More info on this issue here: https://mrmacintosh.com/google-chrome-keystone-is-modifying-var-symlink-on-non-sip-macs-causing-boot-issues/

This fixlet will identify Macs in this state: https://bigfix.me/fixlet/details/26650

3 Likes

Thanks for sharing this. That’s a clever way to detect the issue.