https://github.com/osquery/osquery logo
#fleet
Title
# fleet
h

Harrison

10/31/2022, 7:41 PM
Hi team. Any guidance on restricting the
orbit
Login Item from tampering in Ventura? To be more specific, I can control this through MDM but not sure what Identifier Type is best to use. I was going to take a stab at it with it Label Prefix:
com.fleetdm.orbit
s

sharvil

10/31/2022, 7:44 PM
I will need to double check, but I think
com.fleetdm.orbit
is the correct bundle id
would love to know more about Ventura and the loginItems issue that you are facing
m

marnin

10/31/2022, 7:47 PM
Copy code
<dict>
	<key>RuleType</key>			
	<string>LabelPrefix</string>
	<key>RuleValue</key>
	<string>com.fleetdm.orbit</string>
	<key>Comment</key>
	<string>Fleet Orbit</string>
</dict>
This should work ^
h

Harrison

10/31/2022, 8:00 PM
Hi @sharvil — Not an issue, just a change with VenturaOS. Users can see an manipulate launchagents and daemons, etc. You can specify which ones you want to mark as “managed” so they can’t be tampered with.