What is authtrampoline?

[excelsior.ink]

Should I be worried by this?
I think, but I'm not sure, this belongs to Objective-see, as I played with some utilities but I completely uninstalled them.
Now, what is this and how do I remove it? There is no minus sign.

 

[buckrock]

Should I be worried by this?
I think, but I'm not sure, this belongs to Objective-see, as I played with some utilities but I completely uninstalled them.
Now, what is this and how do I remove it? There is no minus sign.
View attachment 1814995

authtrampoline is a UNIX executable file in the path: /System/Library/Frameworks/Security.framework/

You may want to read about it as a security problem here. Mine shows that it last was run today; my security settings do not list authtrampoline under 'Automation.' I'd recommend unchecking the 'System Events.app box. Restart and see how things run. No harm checking.

 

[excelsior.ink]

Thanks for replying! I was able to remove it from the command line using:
tccutil reset AppleEvents

 

[333JB]

Thanks for replying! I was able to remove it from the command line using:
tccutil reset AppleEvents

I also found that authtrampline, in the automation.
I used the code you suggested and it worked, however, it keeps coming back.
Then I found this code on my Terminal after I tried to remove it several time:

Last login: Thu Mar 2 16:38:07 on ttys000


/System/Library/Frameworks/Security.framework/authtrampoline ; exit;

jenniferbried@Topaz ~ % /System/Library/Frameworks/Security.framework/authtrampoline ; exit;

zsh: killed /System/Library/Frameworks/Security.framework/authtrampoline

Saving session...

...copying shared history...

...saving history...truncating history files...

...completed.

[Process completed]

Why and how could someone else put code into my Terminal?
Does anyone know what this code means?
What should I do?
The file authtrampoline still returns to its same location: file in the path: /System/Library/Frameworks/Security.framework/.
However, it does not show up anymore under automation.

 

[333JB]

authtrampoline is a UNIX executable file in the path: /System/Library/Frameworks/Security.framework/

You may want to read about it as a security problem here. Mine shows that it last was run today; my security settings do not list authtrampoline under 'Automation.' I'd recommend unchecking the 'System Events.app box. Restart and see how things run. No harm checking.

I also found that authtrampline, in the automation.
I used the code you suggested and it worked, however, it keeps coming back.
Then I found this code on my Terminal after I tried to remove it several time:

Last login: Thu Mar 2 16:38:07 on ttys000


/System/Library/Frameworks/Security.framework/authtrampoline ; exit;

jenniferbried@Topaz ~ % /System/Library/Frameworks/Security.framework/authtrampoline ; exit;

zsh: killed /System/Library/Frameworks/Security.framework/authtrampoline

Saving session...

...copying shared history...

...saving history...truncating history files...

...completed.

[Process completed]

Why and how could someone else put code into my Terminal?
Does anyone know what this code means?
What should I do?
The file authtrampoline still returns to its same location: file in the path: /System/Library/Frameworks/Security.framework/.
However, it does not show up anymore under automation.