privileges-monitor/com.sap.privileges.config.mobileconfig at main · GordonBeeming/privileges-monitor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>PayloadContent</key>
		<array>
			<dict>
				<key>PayloadContent</key>
				<dict>
					<key>corp.sap.privileges</key>
					<dict>
						<key>Forced</key>
						<array>
							<dict>
								<key>mcx_preference_settings</key>
								<dict>
									<!-- Call custom script on privilege change -->
									<key>PostChangeExecutablePath</key>
									<string>/usr/local/bin/privileges-monitor/privileges_post_change.sh</string>

									<!-- Pass the reason to the script -->
									<key>PassReasonToExecutable</key>
									<true />

									<!-- Require authentication (Touch ID/Password) -->
									<key>RequireAuthentication</key>
									<true />

									<!-- Allow CLI biometric authentication -->
									<key>AllowCLIBiometricAuthentication</key>
									<true />

									<!-- Require a reason -->
									<key>ReasonRequired</key>
									<true />
									<key>ReasonMinLength</key>
									<integer>10</integer>
									<key>ReasonMaxLength</key>
									<integer>250</integer>

									<!-- Expiration: max 60 min, default 20 min -->
									<key>ExpirationIntervalMax</key>
									<integer>60</integer>
									<key>MaxIntervalInitial</key>
									<integer>20</integer>

									<key>RevokePrivilegesAtLogin</key>
									<true />
									<key>EnableSystemExtension</key>
									<true />
								</dict>
							</dict>
						</array>
					</dict>
				</dict>
				<key>PayloadDescription</key>
				<string>Configures SAP Privileges with authentication, reason requirement, and notifications</string>
				<key>PayloadDisplayName</key>
				<string>SAP Privileges Configuration</string>
				<key>PayloadEnabled</key>
				<true />
				<key>PayloadIdentifier</key>
				<string>com.gordonbeeming.privileges.config.36132147</string>
				<key>PayloadOrganization</key>
				<string>Gordon Beeming</string>
				<key>PayloadType</key>
				<string>com.apple.ManagedClient.preferences</string>
				<key>PayloadUUID</key>
				<string>36132147-235E-4663-ADA8-2664C67C4DD2</string>
				<key>PayloadVersion</key>
				<integer>1</integer>
			</dict>
		</array>
		<key>PayloadDescription</key>
		<string>Configures SAP Privileges with authentication, reason requirement, and notifications</string>
		<key>PayloadDisplayName</key>
		<string>SAP Privileges Configuration</string>
		<key>PayloadEnabled</key>
		<true />
		<key>PayloadIdentifier</key>
		<string>com.gordonbeeming.privileges.config</string>
		<key>PayloadOrganization</key>
		<string>Gordon Beeming</string>
		<key>PayloadRemovalDisallowed</key>
		<false />
		<key>PayloadScope</key>
		<string>System</string>
		<key>PayloadType</key>
		<string>Configuration</string>
		<key>PayloadUUID</key>
		<string>50870D16-7AAD-478B-BFFE-BED09499F7E0</string>
		<key>PayloadVersion</key>
		<integer>1</integer>
	</dict>
</plist>