If you’re deploying a script or other file (text, image, etc) that is code signed, you will need to make sure the code sign requirements are kept (see here as…
carl ashley Posts
Now that macOS Mojave has been released into the wild, a quick recap of changes relating to Transparency, Consent, and Control (TCC). What changes? In certain circumstances, the first time…
One of the issues with creating a Privacy Preferences Policy Control Payload (PPPCP) profiles is working out whether you will whitelist an entire shell or interpreter (for example, /bin/bash or /usr/bin/python)…
With the release of macOS Mojave imminent, and a new Privacy Preferences Policy Control Payload, it is important to properly launch scripts from LaunchAgents or LaunchDaemons to ensure the correct process…
https://github.com/carlashley/tccprofile Quickly builds Accessibility profiles for macOS applications based on new Profile payloads for Privacy Preferences Policy Control Payload as outlined in Apple’s Configuration Profile Reference documentation. The utility can…
The xcode_tools script I wrote a while back has been updated to better handle newer releases of Xcode. The new version can process most recent macOS releases (only tested 10.9+)…
A little while ago I covered a technique that could be used to obfuscate sensitive text in scripts used to manage macOS; a recent issue with this particular technique left…