https://github.com/osquery/osquery logo
Title
a

allister

05/25/2022, 9:54 AM
I'm not sure that isn't a side effect saying it's delivered rather than a canonical-ish source of truth on-disk, though
ah, way back when Mr. Oakley says he examined this and it is loaded, guess I have to trust it https://eclecticlight.co/2018/10/10/watching-mojaves-privacy-protection-at-work/
my current working theory is, as per the above research, if it's in the
MDMOverrides
, those are loaded and I can use the plist table to confirm it