You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

crsud process with security update 2013-001

I just installed the new security update, 2013-001, and Little Snitch detected a new process at startup, crsud, which wants to connect to Apple.


I would like to know what this does. My guess is that it checks for updates, perhaps to some security software. Anyone know?


It seems to me that when such a process is added, it is appropriate for Apple to explain itself in the update description, but I am old-fashioned about such things.


Greg

MBP 17" 2.33GHz, Mac OS X (10.5.1)

Posted on Mar 15, 2013 2:08 PM

Reply
168 replies

Sep 6, 2013 11:31 PM in response to Apple a day

Apple a day wrote:


I am on Lion and Xprotect will not update since the last Apple security update, might be the crud process


And I can't get APPLE-SA-2013-08-29-1 OS X: Java Web plug-in blocked (My XProtect is still dated May 16th)

It's been so long I don't recall that we ever decided what the recommended way to force an update with Lion, but see if this will help About file quarantine in OS X and click on "Advanced users only" near the bottom and see if you have that available.


If you can't use the above reference, see if your Security preference Pane looks like thisUser uploaded file

and check the box next to the red arrow.


There is a Terminal command which has been known to work, but a few users suffered KeyChain corruption in the process so I don't recommend you do that yet.

Sep 7, 2013 12:48 PM in response to MadMacs0

Strange it started to work again (both now have a date modifeid of Fri, 06 Sep 2013 22:43:58 GMT)


I applied Security Update 2013-003 again

Uploaded the 2 XProtect files to the Apple bug report I filed on it (by copying the two to the desktop then upload those)




From the console

9/7/13 11:57:12.896 AM defaults:

The domain/default pair of (/private/var/db/launchd.db/com.apple.launchd/overrides, com.apple.xprotectupdater) does not exist

9/7/13 11:59:43.000 AM kernel: ***** sAddTrustProcessName 'XProtectUpdater'

Sep 7, 2013 1:59 PM in response to Apple a day

Apple a day wrote:


I don't have a Automaticlly update safe download list

Then you must have this one

User uploaded file

with the Software Update pane. Toggling the "Install system data files and security updates" should take care of it.

crsud I don't see that in the activity monitor, might it be disabled? How might I check

As I recall we decided that crsud runs for only a few seconds, maximum once a day. It would probably be disabled if you don't have the update box checked.

Sep 7, 2013 2:24 PM in response to Apple a day

Apple a day wrote:


Strange it started to work again (both now have a date modifeid of Fri, 06 Sep 2013 22:43:58 GMT)

That matches the Snow Leopard date that I updated yesterday (I normally run ML which was updated on Aug 29). I've found that the modification date changes occassionally even though the version does not if you happen to update later). What did you mean by "both"?

From the console

9/7/13 11:57:12.896 AM defaults:

The domain/default pair of (/private/var/db/launchd.db/com.apple.launchd/overrides, com.apple.xprotectupdater) does not exist

9/7/13 11:59:43.000 AM kernel: ***** sAddTrustProcessName 'XProtectUpdater'

Interesting. I'm guessing the first entry was simply to clear out any previous XProtect override that exists. Can't say for sure if it should have been there or not.


I think I'll stop commenting and wait for a Lion user to compare results.

crsud process with security update 2013-001

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.