runningboardd

executablemacOS135.9 KBx86_64, arm64

System service launcher — manages process lifecycle and file access for bundled services

Launches and manages system processes with restricted file system access to private storage areas. Handles process lifecycle operations including spawning, monitoring, and termination. Exposes an XPC service for inter-process communication with other system components. Contains telemetry reporting capabilities and communicates with multiple network endpoints, suggesting integration with Apple's system services infrastructure.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 135.9 KB
UUID: 9D394FFB-695D-30B7-B768-54713370E660
Analyzed: 2026-04-09T10:02:14Z
CDHash: 0de3fa55e321bf36f594a8d225c3d9d5982fbf54e33bf4ae1205c5db76af6d93

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.Safari [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.driverkitd [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.os_eligibility.readonly [object Object]

StorageException: access additional file paths

com.apple.security.exception.files.absolute-path.read-only

/private/var/db/os_eligibility/eligibility.plist

SystemProcess lifecycle management

/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServices

Frameworks6

Foundation RunningBoard RunningBoardServices libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements41

com.apple.agx.gpuroletrue

com.apple.frontboardservices.display-layout-monitortrue

com.apple.private.MobileContainerManager.otherIdLookuptrue

com.apple.private.coalition-policytrue

com.apple.private.coreservices.canmaplsdatabasetrue

com.apple.private.iokit.assertion-suspendresumetrue

com.apple.private.jetsam.modify-priority <integer>100</integer>

com.apple.private.kernel.jetsamtrue

com.apple.private.kernel.override-cpumontrue

com.apple.private.kernel.setpriority-darwin-roletrue

com.apple.private.memorystatustrue

com.apple.private.osanalytics.write-logs.allowtrue

com.apple.private.pluginkit.managertrue

com.apple.private.process.suspend-resume.anytrue

com.apple.private.runningboard.reconnecttrue

com.apple.private.runningboard.wake-for-process-state-updatetrue

com.apple.private.security.datavault.controllertrue

com.apple.private.security.storage.Safaritrue

com.apple.private.security.storage.driverkitdtrue

com.apple.private.security.storage.os_eligibility.readonlytrue

com.apple.private.set-carplay-modetrue

com.apple.private.set-gpu-roletrue

com.apple.private.spawn-drivertrue

com.apple.private.task_policytrue

com.apple.private.vfs.allow-low-space-writestrue

com.apple.private.write-kr-experiment-factorstrue

com.apple.private.xpc.allowed-launch-types

com.apple.private.xpc.domain-extension.proxytrue

com.apple.private.xpc.launchd.app-servertrue

com.apple.private.xpc.launchd.job-manager com.apple.runningboard

com.apple.private.xpc.persona-managertrue

com.apple.rootless.datavault.metadatatrue

com.apple.runningboard.primitiveattributetrue

com.apple.runningboard.targetidentitiestrue

com.apple.security.enterprise-volume-accesstrue

com.apple.security.exception.files.absolute-path.read-only

/private/var/db/os_eligibility/eligibility.plist

com.apple.spd.anypidmonitoringtrue

com.apple.tailspin.dump-outputtrue

com.apple.usermanagerd.persona.fetchtrue

com.apple.usermanagerd.persona.fetchbundletrue

seatbelt-profiles

Interesting Strings

Bundle IDs(83)

"com.apple.private.coalition-policy "com.apple.private.set-carplay-mode #com.apple.private.pluginkit.manager $com.apple.usermanagerd.persona.fetch %com.apple.private.xpc.persona-manager

File Paths(6)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/RunningBoard.framework/Versions/A/RunningBoard /System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServices 0/private/var/db/os_eligibility/eligibility.plist0#

telemetry(2)

.com.apple.private.osanalytics.write-logs.allow <key>com.apple.private.osanalytics.write-logs.allow</key>

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

HostnameRunningBoard-1008.41.1

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

4

Hardware

0

IPC

0

Analytics

0

Security

0

System

1

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

6

Bundle IDs

83

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code35623802ec46343548e014c8abad6245b94463c5813a71ac56aa39a0e31fa4d6

Importsac6ac224a6ed7f896c63c9b7eae7d402bb3944245d6ac797656cf65d7aa0f6d0

Frameworks3722a6543ac60a93db61835d5d2dd75374c295a6ab07d0abf970e8eaf887805e

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements7bcde2c20bf042e38654ed9dcaee4f88cdc6ff5bdc8a7aee7d5efd3bcaa7c66b

Symbolsac6ac224a6ed7f896c63c9b7eae7d402bb3944245d6ac797656cf65d7aa0f6d0

Static Libraries0 / 1 functions identified

Functions(1)

0x100000828sub_100000828

Imports5 symbols from 3 dylibs

libobjc.A.dylib3 CoreFoundation1 RunningBoard1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

attentionawarenessd

containermanagerd

filecoordinationd