Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Powered by
Title
a
allister
05/25/2022, 9:54 AM
I'm not sure that isn't a side effect saying it's delivered rather than a canonical-ish source of truth on-disk, though
ah, way back when Mr. Oakley says he examined this and it is loaded, guess I have to trust it
https://eclecticlight.co/2018/10/10/watching-mojaves-privacy-protection-at-work/
my current working theory is, as per the above research, if it's in the
MDMOverrides
, those are loaded and I can use the plist table to confirm it
2 Views
#macos
Join Slack