简体   繁体   中英

Is there a way to keep internal drive segments unmounted while booting from external device

For forensic imaging of drives and/or segments with a native Mac application, I'm booting from external device (usb, hdd, etc.) into BaseSystem. I want to keep the internal drives and/or segments unmounted during the boot process (there is no way of knowing drive/segment volume names and/or UUID before booting). Later will disable disk arbitration, mount these drives/segments and image them.

I've created a deamon (System/Library/LaunchDeamons) for mount blocking (on external boot device), but it only blocks newly attached devices, not internal ones.

Note 1: I've created boot image from BaseSystem.dmg of Sierra (10.12.1), and modified the contents.

Note 2: Since there is no way of knowing drive/segment volume names and/or UUID before booting, it is not possible to use fstab.

I need a direction to follow, any comment may help. Thanks.

Nobody, even commented. I found the solution from a clue keyword from a friend: autodiskmount

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM