macOS wildcard exclusion examples for Memory Protection Skip Navigation

macOS wildcard exclusion examples for Memory Protection

The examples below are based on the following path: /Application/TestApp/MyApp/program.dmg
Type
Description
Correct use of exclusions
Excludes program.dmg as long as program.dmg is located under the "MyApp" child directory:
/Application/**/MyApp/program.dmg
Excludes any .dmg extension file as long as the executable is located under the "MyApp" child directory:
/Application/**/MyApp/*.dmg
Excludes any executable as long as the executable is located under the "MyApp" child directory
/Application/**/MyApp/*
Excludes program.dmg as long as program.exe is located under any child directory that belongs to "TestApp" parent directory:
/Application/TestApp/**/program.dmg
Incorrect use of exclusions
Avoid using a double asterisk (**) for the following:
  • Executable names: A single asterisk (*) should be used.
    • Incorrect:
      /Application/TestA**.dmg
    • Correct:
       /Application/TestA*.dmg
  • End of an exclusion. The double asterisk (**) can’t be the end of the exclusion.
    • Incorrect:
      /Application/**
    • Correct:
      /Application/**/*
With agent 1560 and 1564, do not end an exclusion with \**; this can result in a Windows restart loop. Read this Agent 1560 knowledge base article for more information.
Exclusions that are not recommended
Avoid using a double asterisk (**) after a drive letter. Although this exclusion is technically correct, it would exclude anything in any directory (including child directories)
/**/*