From 1b3fb865823d1f7b5f73b24d271fece43dc6aefc Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:26:44 +0100 Subject: [PATCH 01/12] Rename section Files that start with ._ are resource forks: https://en.wikipedia.org/wiki/Resource_fork#Macintosh_file_systems --- Global/macOS.gitignore | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 56bb5284..cd9afb76 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -4,10 +4,10 @@ .LSOverride Icon[ ] -# Thumbnails +# Resource forks ._* -# Files that might appear in the root of a volume +# Files and directories that might appear in the root of a volume .DocumentRevisions-V100 .fseventsd .Spotlight-V100 From 7b33adcda31c70853fcb452d7a28ea117c7a09ba Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:29:39 +0100 Subject: [PATCH 02/12] Add Mac OS 6 to 9 specific files Metas databases (https://web.archive.org/web/20230328234043/https://support.apple.com/kb/TA46427?locale=en_US), Sherlock settings, Find By Content indexer folders (https://netatalk.io/docs/Special-Files-and-Folders, https://www.kb.cert.org/vuls/id/177243/) --- Global/macOS.gitignore | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index cd9afb76..480352a4 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -22,3 +22,12 @@ Icon[ ] Network Trash Folder Temporary Items .apdisk + +# Mac OS 6 to 9 +Desktop DB +Desktop DF +TheFindByContentFolder +TheVolumeSettingsFolder +.FBCIndex +.FBCSemaphoreFile +.FBCLockFolder From b27567d5bed40d9e526798bf574c3718b8962db0 Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:30:16 +0100 Subject: [PATCH 03/12] Add flag file created by Spotlight Flag file indicate that the drive can be used by Time Machine as a backup target --- Global/macOS.gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 480352a4..4fa64aa7 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -15,6 +15,7 @@ Icon[ ] .Trashes .VolumeIcon.icns .com.apple.timemachine.donotpresent +.com.apple.timemachine.supported # Directories potentially created on remote AFP share .AppleDB From 647cae16e73c3068239eb1ae2d19c2d9735dcb86 Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:30:32 +0100 Subject: [PATCH 04/12] Add folders used for software updates and app sandboxing --- Global/macOS.gitignore | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 4fa64aa7..c5647f9a 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -16,6 +16,8 @@ Icon[ ] .VolumeIcon.icns .com.apple.timemachine.donotpresent .com.apple.timemachine.supported +.PKInstallSandboxManager +.PKInstallSandboxManager-SystemSoftware # Directories potentially created on remote AFP share .AppleDB From 9e92df704ebcfc85df67cf66fab4aa94414db649 Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:31:09 +0100 Subject: [PATCH 05/12] Add file used by HFS+ to handle the metadata zone https://developer.apple.com/library/archive/technotes/tn/tn1150.html#HotFile --- Global/macOS.gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index c5647f9a..0910bc16 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -18,6 +18,7 @@ Icon[ ] .com.apple.timemachine.supported .PKInstallSandboxManager .PKInstallSandboxManager-SystemSoftware +.hotfiles.btree # Directories potentially created on remote AFP share .AppleDB From 51d9679541e080bda946ef5df25c49961c0ace4e Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:31:57 +0100 Subject: [PATCH 06/12] Add quota system files http://novosial.org/osx/quota/index.html https://web.archive.org/web/20150906150310/http://hints.macworld.com/article.php?story=20030808130810285 https://www.cnet.com/news/how-to-limit-user-disk-space-with-partitions-and-quotas-in-os-x/ --- Global/macOS.gitignore | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 0910bc16..6789c06c 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -35,3 +35,9 @@ TheVolumeSettingsFolder .FBCIndex .FBCSemaphoreFile .FBCLockFolder + +# Quota system +.quota.group +.quota.user +.quota.ops.group +.quota.ops.user From 08a73006679b04d20594ae8ffa1e1dd87a89ecf5 Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:32:29 +0100 Subject: [PATCH 07/12] Add system file reference dirs /.vol/234881034/105486 is file #105486 on volume #234881034 https://developer.apple.com/library/archive/qa/qa2001/qa1113.html /.file/id=6571367.17424234/ is file #17424234 on device #6571367 https://developer.apple.com/library/archive/documentation/FileManagement/Conceptual/FileSystemProgrammingGuide/AccessingFilesandDirectories/AccessingFilesandDirectories.html#//apple_ref/doc/uid/TP40010672-CH3-SW6 https://apple.stackexchange.com/questions/231447/is-it-normal-to-have-a-hidden-file-named-file-in/ --- Global/macOS.gitignore | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 6789c06c..07bb745d 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -19,6 +19,8 @@ Icon[ ] .PKInstallSandboxManager .PKInstallSandboxManager-SystemSoftware .hotfiles.btree +.vol +.file # Directories potentially created on remote AFP share .AppleDB From 1141dbc87f820fd0d326e07bbfb1be63afaf774e Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:32:57 +0100 Subject: [PATCH 08/12] Add TimeMachine dirs https://web.archive.org/web/20190101000001/https://www.baligu.com/pondini/TM/Works2.html https://web.archive.org/web/20201210025437/https://www.baligu.com/pondini/TM/30.html /System/Library/CoreServices/backupd.bundle/Contents/Resources/StdExclusions.plist --- Global/macOS.gitignore | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 07bb745d..b7c2538b 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -43,3 +43,9 @@ TheVolumeSettingsFolder .quota.user .quota.ops.group .quota.ops.user + +# TimeMachine +Backups.backupdb +.MobileBackups +.MobileBackups.trash +MobileBackups.trash From 52c2f9a7c5040b31b98764119fbdfac4da6f00c2 Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:33:19 +0100 Subject: [PATCH 09/12] Add disk label https://refit.sourceforge.net/info/vollabel.html grub-render-label(1) https://web.archive.org/web/20201023104810/https://opensource.apple.com/source/kext_tools/kext_tools-623.120.1/bootcaches.plist.auto.html --- Global/macOS.gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index b7c2538b..bbf585b0 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -21,6 +21,7 @@ Icon[ ] .hotfiles.btree .vol .file +.disk_label* # Directories potentially created on remote AFP share .AppleDB From edd04dce9026e259bbc7dfcb0efb012299bcb633 Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:34:16 +0100 Subject: [PATCH 10/12] Add TimeMachine recovery boot loader --- Global/macOS.gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index bbf585b0..983a9ffb 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -50,3 +50,4 @@ Backups.backupdb .MobileBackups .MobileBackups.trash MobileBackups.trash +tmbootpicker.efi From a45008d6460f856dfce183c7ec16c62078d54d9b Mon Sep 17 00:00:00 2001 From: Memmie Lenglet Date: Sun, 2 Dec 2018 15:37:20 +0100 Subject: [PATCH 11/12] Add orphaned file dir https://www.howtogeek.com/282374/what-is-the-lostfound-folder-on-linux-and-macos/ --- Global/macOS.gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index 983a9ffb..accb9657 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -22,6 +22,7 @@ Icon[ ] .vol .file .disk_label* +lost+found # Directories potentially created on remote AFP share .AppleDB From c3b96313ed0a20d6aa5accfbd49591d19e86f40c Mon Sep 17 00:00:00 2001 From: Jeffery To Date: Wed, 30 Jul 2025 07:14:07 +0800 Subject: [PATCH 12/12] Add HFS+ directory for hard links to directories https://wiki.sleuthkit.org/index.php?title=HFS#HFS.2B_Hard_Links --- Global/macOS.gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/Global/macOS.gitignore b/Global/macOS.gitignore index accb9657..a5ee704a 100644 --- a/Global/macOS.gitignore +++ b/Global/macOS.gitignore @@ -23,6 +23,7 @@ Icon[ ] .file .disk_label* lost+found +.HFS+ Private Directory Data[ ] # Directories potentially created on remote AFP share .AppleDB