Vallum files structure
Vallum is very friendly and does not modify any existing system file.
Vallum firewall is made of 4 main files:
- a filtering and logging network kernel extension loaded at boot time stored in /Library/Extensions/vallumnke.kext
- a privileged daemon running in background loaded at boot time stored in /usr/local/bin/vallumafd
- a helper stored in /Library/Application Support/Vallum/Helper/Vallum-Helper.app, loaded at login time, runs as a menulet icon in macOS bar near the clock.
- an agent to handle user interaction stored in /Library/Application Support/Vallum/Agent/Vallum.app, loaded at login time, runs as a menulet icon in macOS bar near the clock.
Vallum stores its configuration file in /etc/vallum.conf and custom presets in /Users/Shared/Vallum/. To activate Vallum at boot and login there are two launchd items in /Library/LaunchDaemons/it.murus.vallumafd.plist and /Library/LaunchAgents/it.murus.Vallum-Helper.plist, and a shell script in /etc/vallum.sh.