From 4fab9ec89b37cbb1b9a2ec4e151217591c25fd70 Mon Sep 17 00:00:00 2001 From: Test Date: Thu, 17 Sep 2026 15:39:45 -0500 Subject: [PATCH 1/2] Apple Management import --- ...oftware Update Analysis 10.8 (2994639).bes | 26 ++ ...oftware Update Analysis 10.9 (2994640).bes | 25 ++ .../Analyses/Apple Time Machine (44).bes | 27 ++ .../Analyses/Apple Time Machine (45).bes | 27 ++ .../Analyses/Apple Update - Mac (2998548).bes | 24 ++ .../Analyses/AppleEFINVRAM (2994552).bes | 30 ++ ...ewall (AFL) Audit - Mac OS X (2994738).bes | 37 +++ .../Configuration Profile Audit (2998505).bes | 27 ++ ...Configuration Profiles - Mac (2998534).bes | 30 ++ .../FileVault 2 - Audit - Mac (2998304).bes | 28 ++ ... 2 - Recovery Password - Mac (2998121).bes | 25 ++ ...yption Status all partitions (2998453).bes | 24 ++ ...rewall - Configuration - Mac (2998305).bes | 27 ++ .../Launch Daemons - Mac (2998254).bes | 25 ++ ...cal Admin_User Audit - Apple (2994546).bes | 27 ++ .../Analyses/Location - Mac (2998255).bes | 21 ++ .../Analyses/Login Window - Mac (2998514).bes | 21 ++ ...ac Global Preferences Report (2994696).bes | 31 +++ ...twork Services (DHCP) Checks (2998169).bes | 26 ++ .../Mac sudoers file Report (2994662).bes | 32 +++ .../Operating System - Mac (2998515).bes | 30 ++ .../PF Firewall Audit - Mac (2994651).bes | 37 +++ .../Analyses/Printers - Mac (2998265).bes | 25 ++ .../Pulse Secure Info - MacOS (2998612).bes | 27 ++ ...ion and Licensing - Mac OS X (2994756).bes | 37 +++ ...NetBoot) Analysis - Mac OS X (2998201).bes | 32 +++ .../Analyses/Stability - Mac (2998354).bes | 26 ++ ... Stability Report - Mac OS X (2994700).bes | 32 +++ .../Analyses/TSM Backup Audit - Mac (63).bes | 36 +++ ...min Privliges Report - macOS (2998600).bes | 25 ++ .../Analyses/Time Machine - Mac (2998275).bes | 24 ++ .../Fixlets/Analyses/VPN - Mac (2998280).bes | 23 ++ ...acOS Intel-Only Applications (2998705).bes | 26 ++ ...encrypted computer (APFS only) (24878).bes | 107 ++++++++ ... encrypted computer (HFS only) (24879).bes | 105 +++++++ ... Acrobat Pro DC 15.x - Mac OS X (7613).bes | 85 ++++++ ...robat Reader DC 15.x - Mac OS X (7612).bes | 85 ++++++ ...te Desktop Client - 3.5.4 - Mac (3638).bes | 68 +++++ ...mote Desktop Client - 3.7 - Mac (3639).bes | 67 +++++ ...hernet Driver Repair - Mac OS X (9269).bes | 34 +++ ...one to lpadmin group (printers) (2614).bes | 35 +++ ...cal user account password - Mac (3671).bes | 78 ++++++ ...0.7_10.8 without PGP installed. (2569).bes | 218 +++++++++++++++ ...Window - Clear LoginHook - Mac (23552).bes | 35 +++ ...indow - Clear LogoutHook - Mac (23553).bes | 35 +++ ...Policy - Set to Balanced - Mac (24028).bes | 43 +++ ... Set to High Performance - Mac (24029).bes | 43 +++ ...icy - Set to Power Saver - Mac (24030).bes | 43 +++ ...Set to Presentation Mode - Mac (24031).bes | 43 +++ ... - Wake on Lan - Disable - Mac (23798).bes | 37 +++ ...g - Wake on Lan - Enable - Mac (23799).bes | 37 +++ ...reless Adapter - Disable - Mac (24026).bes | 35 +++ .../Fixlets/Delete user (macOS) (27359).bes | 84 ++++++ ...Escrow Bootstrap Token (macOS) (27380).bes | 122 +++++++++ .../Firmware Password for Mac OS X (5033).bes | 224 +++++++++++++++ .../Grant Secure Token (Mac) (27341).bes | 151 ++++++++++ ...macOS Catalina_ update - MacOS (26653).bes | 43 +++ ...atchman Shutdown Now - Win_Mac (23775).bes | 42 +++ ...Watchman Standby Now - Win_Mac (23776).bes | 42 +++ ... Software Update Install - Mac (24108).bes | 40 +++ ...le Software Update Query - Mac (24109).bes | 35 +++ ... Scan and Quarantine - Windows (20572).bes | 49 ++++ ... Scan and Quarantine - Windows (20573).bes | 62 +++++ ... Scan and Quarantine - Windows (20574).bes | 44 +++ ...- Update Definitions - Windows (20575).bes | 39 +++ ...iguration Profiles Probe - Mac (23809).bes | 40 +++ ...lt 2 Configuration Probe - Mac (23583).bes | 61 +++++ ... Directory Services Sync - Mac (20607).bes | 50 ++++ ... 2 Encrypt System Volume - Mac (20608).bes | 86 ++++++ ... Encryption Status Probe - Mac (20577).bes | 259 ++++++++++++++++++ ...sword on macOS (10.13 and up) (26652).bes | 82 ++++++ .../Run softwareupdate (Mac) (27345).bes | 121 ++++++++ ...in to Local Admin Group (MAC) (23265).bes | 39 +++ ...- Allow Password Changes (MAC) (23263).bes | 37 +++ .../Fixlets/Safari 6.1 - Update (3636).bes | 68 +++++ ...pdate 2015-002 (10.10.2 Client) (3986).bes | 82 ++++++ ...15-002 (10.10.2 Client) - Audit (3985).bes | 50 ++++ ...15-003 (10.10.2 Client) - Audit (4002).bes | 50 ++++ ...t, Early 2015 Mac) (Superseded) (4018).bes | 87 ++++++ ...n High Sierra - Apple Mac OS X (24858).bes | 54 ++++ ...REFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes | 53 ++++ ...ation Level Firewall - Mac OS X (3877).bes | 44 +++ ...ation Level Firewall - Mac OS X (3878).bes | 43 +++ ...ation Level Firewall - Mac OS X (3879).bes | 44 +++ ...ation Level Firewall - Mac OS X (3880).bes | 43 +++ ...ation Level Firewall - Mac OS X (3881).bes | 41 +++ ...ation Level Firewall - Mac OS X (3882).bes | 41 +++ ...ation Level Firewall - Mac OS X (3883).bes | 41 +++ ...ation Level Firewall - Mac OS X (3884).bes | 41 +++ ...ation Level Firewall - Mac OS X (3885).bes | 41 +++ ...ation Level Firewall - Mac OS X (3886).bes | 41 +++ ...ation Level Firewall - Mac OS X (3887).bes | 41 +++ ...ation Level Firewall - Mac OS X (3888).bes | 41 +++ ...ation Level Firewall - Mac OS X (3889).bes | 43 +++ ...ation Level Firewall - Mac OS X (3890).bes | 42 +++ ...ation Level Firewall - Mac OS X (3891).bes | 41 +++ ...ation Level Firewall - Mac OS X (3892).bes | 41 +++ ...ation Level Firewall - Mac OS X (3893).bes | 41 +++ ...led Version of Xcode - Mac OS X (3770).bes | 40 +++ ...code Developer Group - Mac OS X (3771).bes | 40 +++ ... or Delete Printers - Mac OS X (20448).bes | 41 +++ ...d or Delete Printers - Mac OS X (3772).bes | 39 +++ ...ration_ Always Show Scroll Bars (3816).bes | 41 +++ ...ation_ Disable BlueTooth Radio (21296).bes | 43 +++ ...figuration_ Disable PF Firewall (4017).bes | 43 +++ ...ble Printer Sharing - Mac OS X (20449).bes | 40 +++ ...ble Wireless (Airport) Adapter (21298).bes | 40 +++ ...n_ Enable AirDrop over Ethernet (3821).bes | 40 +++ ...cess for Admin Users - Mac OS X (3923).bes | 40 +++ ... for All Local Users - Mac OS X (3921).bes | 39 +++ ...estart on Power Loss - Mac OS X (3773).bes | 40 +++ ...ration_ Enable BlueTooth Radio (21297).bes | 43 +++ ...nfiguration_ Enable PF Firewall (4016).bes | 44 +++ ...gin (SSH) for Admins - Mac OS X (3980).bes | 46 ++++ ...able USB SuperDrive on All Macs (3822).bes | 40 +++ ...ble Wireless (Airport) Adapter (21299).bes | 40 +++ ...tion_ Expand Print Dialog Boxes (3819).bes | 42 +++ ...ation_ Expand Save Dialog Boxes (3818).bes | 42 +++ ...Temporary Admin Rights - macOS (26654).bes | 178 ++++++++++++ ...ion_ Quit Printer When Finished (3820).bes | 41 +++ ...Temporary Admin Rights - macOS (26655).bes | 249 +++++++++++++++++ ...to America_New_York - Mac OS X (10606).bes | 38 +++ ...ATE_ Mac OS X 10.10.2 Available (3958).bes | 72 +++++ ... OS X 10.10.2 Available (Combo) (3972).bes | 85 ++++++ ....10.2 Available (Combo) - Audit (3970).bes | 45 +++ ... OS X 10.10.2 Available - Audit (3955).bes | 40 +++ ... root login bug CVE-2017-13872 (24859).bes | 55 ++++ ...nually defined hosts - Win_Mac (20536).bes | 27 ++ ...al - CVE-2021-44228 mitigation (26900).bes | 68 +++++ ...ite System Profiler info - Mac (20446).bes | 53 ++++ Sites/Apple Management/Fixlets/digest.xml | 8 + Sites/Apple Management/site.xml | 13 + Sites/Apple Management/siteConfig.xml | 6 + ...DB Performance Logging (4.0.1) (27397).bes | 2 +- ...Different Drive - Version _= 6.0 (612).bes | 179 ------------ ...Free Disk Space - Version _= 6.0 (585).bes | 95 ------- 136 files changed, 6861 insertions(+), 275 deletions(-) create mode 100644 Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes create mode 100644 Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes create mode 100644 Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes create mode 100644 Sites/Apple Management/Fixlets/digest.xml create mode 100644 Sites/Apple Management/site.xml create mode 100644 Sites/Apple Management/siteConfig.xml delete mode 100644 Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes delete mode 100644 Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes new file mode 100644 index 000000000..c7fcc1c16 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes @@ -0,0 +1,26 @@ + + + + + Apple Software Update Analysis 10.8 + Check status of Apple Software Update on OS X 10.8.x. Return "Software Update Enabled" if Apple Software Updates is Enabled. Return "Software Update Disabled" if Software Updates is Disabled. + mac of operating system + = "10.8" AND system version < "10.9"]]> + + x-fixlet-modification-time + Fri, 14 Feb 2014 19:27:04 +0000 + + BESC + if (not exists dictionary "com.apple.softwareupdatecheck.periodic" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Enabled" else if (boolean of value of entry whose (key of it is "Disabled") of dictionary "com.apple.softwareupdatecheck.periodic" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Disabled" else "Software Update Enabled" + if (not exists dictionary "com.apple.softwareupdatecheck.initial" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Enabled" else if (boolean of value of entry whose (key of it is "Disabled") of dictionary "com.apple.softwareupdatecheck.initial" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Disabled" else "Software Update Enabled" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes new file mode 100644 index 000000000..a80e7a615 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes @@ -0,0 +1,25 @@ + + + + + Apple Software Update Analysis 10.9 + Check status of Apple Software Update on OS X 10.9.x. Return "Software Update Enabled" if Apple Software Updates is Enabled. Return "Software Update Disabled" if Software Updates is Disabled. + mac of operating system + = "10.9"]]> + + x-fixlet-modification-time + Fri, 14 Feb 2014 19:26:12 +0000 + + BESC + if (not exists boolean "AutomaticCheckEnabled" of dictionaries of file "/Library/Preferences/com.apple.SoftwareUpdate.plist") then "Software Update Enabled" else if (boolean "AutomaticCheckEnabled" of dictionaries of file "/Library/Preferences/com.apple.SoftwareUpdate.plist") then "Software Update Enabled" else "Software Update Disabled" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes new file mode 100644 index 000000000..dccccd84d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes @@ -0,0 +1,27 @@ + + + + + Apple Time Machine + + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + = "10.5"]]> + + x-fixlet-modification-time + Mon, 26 Nov 2012 21:36:13 +0000 + + BESC + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else (((dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else (modification time of file "/private/var/db/.TimeMachine.Results.plist" as string) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes new file mode 100644 index 000000000..4bdd1a4ac --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes @@ -0,0 +1,27 @@ + + + + + Apple Time Machine + + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + = "10.5"]]> + + x-fixlet-modification-time + Mon, 26 Nov 2012 21:36:13 +0000 + + BESC + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else (((dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else (modification time of file "/private/var/db/.TimeMachine.Results.plist" as string) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes new file mode 100644 index 000000000..9ee141c9b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes @@ -0,0 +1,24 @@ + + + + + Apple Update - Mac + Provides information about Apple Software Update on Mac OS.

+

The missing updates relies on the last time Apple Update performed a check -- the data is as old as the last check.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + date "LastSuccessfulDate" of dictionary of file "com.apple.SoftwareUpdate.plist" of folder "/Library/Preferences" + (string "Display Name" of it & " " & string "Display Version" of it) of dictionaries of values of array "RecommendedUpdates" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" + string "AppleCatalogURL" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" | "Apple Production" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes b/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes new file mode 100644 index 000000000..83a778b70 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes @@ -0,0 +1,30 @@ + + + + + AppleEFINVRAM + Analyze NVRAM Variables with iokit + +https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/ioreg.8.html + +https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/nvram.8.html + + mac of operating system + + x-fixlet-modification-time + Fri, 26 Jul 2013 20:12:57 +0000 + + BESC + concatenation "; " of (keys of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry as string) + if (exists key whose ( it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry) then string of value of it whose ( key of it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry else "<No boot-args>" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes b/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes new file mode 100644 index 000000000..de0bc6b86 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes @@ -0,0 +1,37 @@ + + + + + Application Firewall (AFL) Audit - Mac OS X + Audit for OS X's Application Firewall (ALF).

+

References:
http://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/

]]> + = "10.6"]]> + mac of operating system + exists file "/Library/Preferences/com.apple.alf.plist" + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:44:25 +0000 + + BESC + string "version" of dictionary of file "/Library/Preferences/com.apple.alf.plist" + if (integer "globalstate" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if (integer "allowsignedenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if (integer "loggingenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if version of operating system >= "10.9" then (if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 0) then "throttled" else if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "brief" else if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 2) then "detailed" else ERROR "unknown value") else ERROR "OS not Supported" + if (integer "stealthenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + if (number of strings "path" of dictionaries of values of array "exceptions" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "path" of dictionaries of values of array "exceptions" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + if (number of strings "id" of dictionaries of values of array "explicitauths" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "id" of dictionaries of values of array "explicitauths" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + (strings "proc" of it, "State: " & integer "state" of it as string) of dictionaries of values of entries of dictionary "firewall" of dictionary of file "/Library/Preferences/com.apple.alf.plist" + if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then (strings "bundleid" of it, "State: " & (if (integer "state" of it = 2) then "Blocked" else if (integer "state" of it = 0) then "Allowed" else "unkown") ) of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes b/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes new file mode 100644 index 000000000..32460efba --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes @@ -0,0 +1,27 @@ + + + + + Configuration Profile Audit + "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles" ]]> + mac of operating system + exists file "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles" + + x-fixlet-modification-time + Thu, 22 Dec 2016 20:35:26 +0000 + + BESC + ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") + ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries whose (string "_name" of it = "spconfigprofile_section_deviceconfigprofiles") of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") + ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries whose (string "_name" of it = "spconfigprofile_section_userconfigprofiles") of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes b/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes new file mode 100644 index 000000000..d2fc5cd80 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes @@ -0,0 +1,30 @@ + + + + + Configuration Profiles - Mac + This analysis provides information on the current state of the currently configured Mac Profiles.

+

This analysis relies on Fixlet: Invoke - Configuration Profiles Probe - Mac in the C3-Inventory site.

+

The data in this analysis only ever be as new as the last run of the probe.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists files "/Library/Profiles/Effective.plist" + BESC + (string "ProfileDisplayName" of it, string "PayloadUUID" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + strings "ProfileDisplayName" of dictionaries whose (string "ProfileVerificationState" of it = "verified") of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + strings "ProfileDisplayName" of dictionaries whose (string "ProfileVerificationState" of it != "verified") of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + (string "ProfileDisplayName" of it, strings "PayloadType" of dictionaries of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + (string "ProfileDisplayName" of it, strings "URL" of dictionaries of values of arrays "AutoLaunchedApplicationDictionary-managed" of dictionaries "PayloadContent" of dictionaries whose (string "PayloadType" of it = "com.apple.loginitems.managed") of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + (string "ProfileDisplayName" of it, strings "ServerURL" of dictionaries "PayloadContent" of dictionaries whose (string "PayloadType" of it = "com.apple.mdm") of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + modification time of files "/Library/Profiles/Effective.plist" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes new file mode 100644 index 000000000..f2f1bac0c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes @@ -0,0 +1,28 @@ + + + + + FileVault 2 - Audit - Mac + Provides audit information about FileVault on the system.

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + mac of operating system + exists folder "FileVault" of folder "__Global" of data folder of client + BESC + (following text of first ": " of it as boolean) of (lines containing "Personal Key Exists:" of it) of file "RecoverySettings.txt" of folder "FileVault" of folder "__Global" of data folder of client + (following text of first ": " of it as boolean) of (lines containing "Institutional Key Exists:" of it) of file "RecoverySettings.txt" of folder "FileVault" of folder "__Global" of data folder of client + line 1 of file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client + (if (exists lines containing "Progress" of it) then (lines containing "Progress" of it) else nothing) of (file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client) + lines of file "Users.txt" of folder "FileVault" of folder "__Global" of data folder of client + (if (exists lines containing "Deferred enablement" of it) then (lines containing "Deferred enablement" of it) else nothing) of (file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes new file mode 100644 index 000000000..10ef1276a --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes @@ -0,0 +1,25 @@ + + + + + FileVault 2 - Recovery Password - Mac + Provides the FileVault 2 recovery password if FileVault was enabled using Fixlet: Invoke - FileVault 2 Encrypt System Volume - Mac

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + "10.7" as version]]> + exists files whose (name of it as lowercase starts with "Recovery" as lowercase and name of it as lowercase ends with ".plist" as lowercase) of folder "FileVault" of folder "__Global" of data folder of client + BESC + string "RecoveryKey" of dictionary of file "Recovery.plist" of folder "FileVault" of folder "__Global" of data folder of client + if (not exists (booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry)) then "Drive is not Encrypted" else "Drive appears Encrypted" + (string "RecoveryKey" of dictionary of it, modification time of it) of files whose (name of it as lowercase contains "Recovery-" as lowercase and name of it as lowercase ends with ".plist") of folder "FileVault" of folder "__Global" of data folder of client + + diff --git a/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes b/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes new file mode 100644 index 000000000..1af255cfa --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes @@ -0,0 +1,24 @@ + + + + + FileVault2 Encryption Status all partitions + Returns the names and FileVault2 encryption status of the volume partitions. + mac of operating system + + x-fixlet-modification-time + Wed, 05 Oct 2016 17:54:00 +0000 + + BESC + (names of it, (if (not exists (booleans whose (it) of values of entries whose ("CoreStorage Encrypted" = key of it) of dictionaries of nodes of nodes of nodes "CoreStoragePhysical" of it)) then "Not Encrypted" else "Encrypted")) of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes b/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes new file mode 100644 index 000000000..09fac2d7a --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes @@ -0,0 +1,27 @@ + + + + + Firewall - Configuration - Mac + Provides information regarding the configuration of the Application Firewall in Mac OS X.

+

This majority of this analysis is sourced from rustymyers here: https://bigfix.me/analysis/details/2994738

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + exists file "/Library/Preferences/com.apple.alf.plist" + = "10.6"]]> + BESC + if (integer "globalstate" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ + if (integer "allowsignedenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ + if (integer "stealthenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ + (strings "proc" of it, "State: " & integer "state" of it as string) of dictionaries of values of entries of dictionary "firewall" of dictionary of file "/Library/Preferences/com.apple.alf.plist" /* From https://bigfix.me/analysis/details/2994738 */ + if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else "none" /* From https://bigfix.me/analysis/details/2994738 */ + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes b/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes new file mode 100644 index 000000000..f934f345c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes @@ -0,0 +1,25 @@ + + + + + Launch Daemons - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/System/Library/LaunchDaemons") + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/Library/LaunchDaemons") + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/System/Library/LaunchAgents") + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/Library/LaunchAgents") + (preceding text of first "/Library" of following text of first "Users/" of pathname of it, name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folders whose (name of it is "LaunchAgents") of folders whose (name of it is "Library") of folders of folder "/Users") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes b/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes new file mode 100644 index 000000000..a14aa0636 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes @@ -0,0 +1,27 @@ + + + + + Local Admin/User Audit - Apple + This analysis will audit the number of local admins on the system.

+

From here: http://bigfix.me/cdb/analysis/70

]]> + (exists file "/var/db/dslocal/nodes/Default/groups/admin.plist") + mac of operating system + + x-fixlet-modification-time + Wed, 10 Jul 2013 17:53:24 +0000 + + BESC + (number of values of array of value of entry whose(key of it = "users") of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist") + (concatenation "; " of strings of values of array of value of entry whose(key of it = "users") of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes b/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes new file mode 100644 index 000000000..112d1bd02 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes @@ -0,0 +1,21 @@ + + + + + Location - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BESC + ((tuple string item 0 of it & ", " & tuple string item 1 of it) as time, tuple string item 2 of it, tuple string item 3 of it) of unique values of ((column "Timestamp" of it as string as floating point as integer * second + "01 Jan 2001 00:00:00" as universal time) as string & ", " & column "Latitude" of it as string & ", " & column "Longitude" of it as string) of rows whose (column "Latitude" of it as string != "0.0") of statement "select * from WifiLocation limit 100" of sqlite database of file "/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/cache_encryptedA.db" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes b/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes new file mode 100644 index 000000000..35f28704e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes @@ -0,0 +1,21 @@ + + + + + Login Window - Mac + + mac of operating system + BESC + strings "LoginHook" of dictionaries of files "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + strings "LogoutHook" of dictionaries of files "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes b/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes new file mode 100644 index 000000000..04602cf9d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes @@ -0,0 +1,31 @@ + + + + + Mac Global Preferences Report + Report of Global Preferences for OS X Clients + mac of operating system + + x-fixlet-modification-time + Wed, 30 Jul 2014 19:54:33 +0000 + + BESC + string "AppleShowScrollBars" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "NSNavPanelExpandedStateForSaveMode" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "NSNavPanelExpandedStateForSaveMode2" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "PMPrintingExpandedStateForPrint" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "PMPrintingExpandedStateForPrint2" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "NSDocumentSaveNewDocumentsToCloud" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "Quit When Finished" of dictionary of file "/Library/Preferences/com.apple.print.PrintingPrefs.plist" | error "No Pref" + boolean "AppleShowAllExtensions" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes b/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes new file mode 100644 index 000000000..219b8f5b1 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes @@ -0,0 +1,26 @@ + + + + + Mac Network Services (DHCP) Checks + This analysis is designed to check systems for DHCP services. Requires running the task "Mac DHCP Checks" first. + mac of operating system + exists file "/Library/Preferences/com.example.dhcptest.plist" + + x-fixlet-modification-time + Thu, 16 Jun 2016 18:23:38 +0000 + + BESC + string "ipaddress" of dictionary of file "/Library/Preferences/com.example.dhcptest.plist" | "unkown error" + string "dhcpserverip" of dictionary of file "/Library/Preferences/com.example.dhcptest.plist" | "unkown error" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes b/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes new file mode 100644 index 000000000..719cd8f29 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes @@ -0,0 +1,32 @@ + + + + + Mac sudoers file Report + This analysis reports data from the /etc/sudoers file, which is used to allow users to run commands as root without admin rights. + mac of operating system + exists file "/etc/sudoers" + + x-fixlet-modification-time + Tue, 17 Jun 2014 15:06:32 +0000 + + BESC + lines of file "/etc/sudoers" + lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/sudoers" + lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=") of file "/etc/sudoers" + number of lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/sudoers" + number of lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=") of file "/etc/sudoers" + (it as trimmed string) of preceding texts of lasts "ALL=(ALL)" of lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=(ALL) ALL") of file "/etc/sudoers" + (it as trimmed string) of following texts of lasts "Defaults" of lines whose (it as trimmed string starts with "Defaults") of file "/etc/sudoers" + number of lines whose (it as trimmed string starts with "Defaults") of file "/etc/sudoers" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes b/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes new file mode 100644 index 000000000..ea2a2395d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes @@ -0,0 +1,30 @@ + + + + + Operating System - Mac + + + + +

This analysis contains information about the Apple Mac OS X operating system running on BES Client computers. 

+

Since this information does not change often, these properties are only evaluated once per day to avoid excess CPU or other computer resource usage.

+

After activating this analysis, you will see the following properties:

+
    +
  • OS Build
+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + NOT in proxy agent context + BESC + build number of operating system + + diff --git a/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes b/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes new file mode 100644 index 000000000..22cf944af --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes @@ -0,0 +1,37 @@ + + + + + PF Firewall Audit - Mac + Audit of pf firewall for Mac OS X + +References: +http://www.openbsd.org/faq/pf/? +http://support.apple.com/kb/HT200259?viewlocale=en_US? + mac of operating system + exists file "/etc/pf.conf" + + x-fixlet-modification-time + Fri, 13 Jun 2014 16:07:19 +0000 + + BESC + lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/pf.conf" + lines whose (it does not start with "#" AND it as lowercase contains "load anchor") of file "/etc/pf.conf" + following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf" + number of lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/pf.conf" + number of lines whose (it does not start with "#" AND it as lowercase contains "load anchor") of file "/etc/pf.conf" + strings of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist" + exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist" + lines whose (it does not start with "#" AND it as trimmed string != "") of files (following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf") + (name of it, concatenation "%0A" of lines whose (it does not start with "#" AND it as trimmed string != "") of it) of files (following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes b/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes new file mode 100644 index 000000000..b970e0a99 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes @@ -0,0 +1,25 @@ + + + + + Printers - Mac + Analysis of locally installed printers for Mac OS systems.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "ipp://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "dnssd://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it), following text of first "AuthInfoRequired " of match (regex "AuthInfoRequired [^;]*") of it & " authentication") of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "smb://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (name of it, modification time of it) of files of folder "/Library/Printers/PPDs/Contents/Resources" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes b/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes new file mode 100644 index 000000000..8976fa1c4 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes @@ -0,0 +1,27 @@ + + + + + Pulse Secure Info - MacOS + Returns VPN connections configured on MacOS clients with Pulse Secure. +Returns installed version of Pulse Secure. + mac of operating system + exists application "Pulse Secure.app" + + x-fixlet-modification-time + Tue, 20 Oct 2020 16:53:24 +0000 + + BESC + substrings before "%22" of (substrings after "uri: %22" of (lines whose (it contains "uri:") of file "/Library/Application Support/Pulse Secure/Pulse/connstore.dat")) + unique values of (substrings after "=" of (lines whose (it starts with "DisplayVersion") of file "/Applications/Pulse Secure.app/Contents/Resources/PulseSecureVersion.ini")) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes b/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes new file mode 100644 index 000000000..60f208ba1 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes @@ -0,0 +1,37 @@ + + + + + SPSS Installation and Licensing - Mac OS X + + mac of operating system + exists folders "/Applications/IBM/SPSS/Statistics" + + x-fixlet-modification-time + Wed, 17 Dec 2014 19:15:10 +0000 + + BESC + unique values of versions of folders "SPSSStatistics.app" of folders of folder "/Applications/IBM/SPSS/Statistics" + unique values of pathnames of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of pathnames of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of lines whose(it as trimmed string != "") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of ( ( ( (if (it < current date) then "Expired on " else "Expires on ") & following text of first ", " of (it as string) ) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of it) of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" ) + unique values of pathnames of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of lines whose (it as trimmed string != "") of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of (it as trimmed string) whose (it != "") of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of it) ) of it, name of it ) of folders of folders "/Applications/IBM/SPSS/Statistics" ) + conjunction of ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of it) ) of folders "SPSSStatistics.app/Contents/bin" of it ) of folders whose(name of it as trimmed string as integer >= 20) of folders "/Applications/IBM/SPSS/Statistics" ) + ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of it) ) of it, name of it ) of folders whose(name of it as trimmed string as integer = unique value of maxima of (it as trimmed string as integer) of names of folders of folders "/Applications/IBM/SPSS/Statistics") of folders "/Applications/IBM/SPSS/Statistics" ) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes b/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes new file mode 100644 index 000000000..76631275f --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes @@ -0,0 +1,32 @@ + + + + + Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X + This analysis reports the clients received DHCP and BSDP (NetBoot) information from the task "Install/Upgrade: Service Discovery Tool". Information is stored "/Library/Preferences/edu.psu.sdt.plist" + mac of operating system + exists file "/Library/Preferences/edu.psu.sdt.plist" + + x-fixlet-modification-time + Fri, 15 Jul 2016 15:46:51 +0000 + + BESC + string "checkDate" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "no date" + string "ipaddress" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "unkown error" + string "dhcpserverip" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "unkown error" + strings "ConfigMethod" of dictionaries "IPv4" of dictionaries of values of entries whose( ( (name of primary internet connection) = unique value of strings "DeviceName" of dictionaries "Interface" of dictionaries of values of it) AND key of it is contained by set of ( keys of dictionaries "Service" of dictionaries "Network" of dictionaries of values of entries whose((unique value of (following texts of firsts "/Sets/" of it) of strings "CurrentSet" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist")= key of it) of dictionaries "Sets" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist" ) ) of dictionaries "NetworkServices" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist" + if (exists string "ipaddress" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist") then true else false + (string "ipaddress" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist") contains (concatenation ", " of (address of it as string) of ip interfaces whose (not loopback of it AND exists address of it) of network) + concatenations " " of ("Server:"; concatenations " nbis=(" of ( strings "ip" of it; ( concatenations "; " of (concatenation ", " of (strings "name" of it; strings "id" of it; booleans "default" of it as string) ) of dictionaries of values of arrays "nbis" of it ) );")" ) of dictionaries of values of array "bsdp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" + exists values of array "bsdp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes b/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes new file mode 100644 index 000000000..727e62056 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes @@ -0,0 +1,26 @@ + + + + + Stability - Mac + Kudos, compliments, and credit for the majority of this analysis to: rustymyers

+

The original analysis this is based off of is available here: https://bigfix.me/analysis/details/2994700

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BESC + number of lines whose ( it as lowercase contains "error") of file "/var/log/system.log" + if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes b/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes new file mode 100644 index 000000000..ab32eaae5 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes @@ -0,0 +1,32 @@ + + + + + System Stability Report - Mac OS X + This analysis analizes the Mac logs for general and specfic errors + mac of operating system + + x-fixlet-modification-time + Wed, 06 Aug 2014 14:40:54 +0000 + + BESC + number of lines whose ( it as lowercase contains "error") of file "/var/log/system.log" + number of lines whose ( it as lowercase contains "com.apple.opendirectoryd") of file "/var/log/system.log" + number of lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" + if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then concatenation ", " of unique values of preceding texts of firsts ": I/O error." of following texts of firsts "kernel[0]: " of lines whose (it contains "kernel[0]:" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then number of lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then number of lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes b/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes new file mode 100644 index 000000000..ab809b323 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes @@ -0,0 +1,36 @@ + + + + + TSM Backup Audit - Mac + + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + (exists folder "/Applications/Tivoli Storage Manager") OR (exists folder "/Library/Application Support/tivoli/tsm") OR (exists application "Tivoli Storage Manager.app") OR (exists folder "/Library/Logs/tivoli/tsm") OR (exists folder "/Library/Preferences/Tivoli Storage Manager") + + x-fixlet-modification-time + Mon, 10 Dec 2012 13:28:08 +0000 + + BESC + exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys" + exists file "/Library/Preferences/Tivoli Storage Manager/dsm.opt" + exists folder "/Library/Logs/tivoli/tsm" + exists folder "/Applications/Tivoli Storage Manager" + exists folder "/Library/Preferences/Tivoli Storage Manager" + if(not exists file "/Library/Logs/tivoli/tsm/dsmsched.log") then "<dsmsched missing>" else (modification time of file "/Library/Logs/tivoli/tsm/dsmsched.log" as string) + if(exists application "Tivoli Storage Manager.app") then (version of application "Tivoli Storage Manager.app" as string) else "<TSM not installed>" + if(not exists file "/Library/Application Support/tivoli/tsm/client/ba/bin/tsmstats.ini") then "<tsmstats missing>" else (modification time of file "/Library/Application Support/tivoli/tsm/client/ba/bin/tsmstats.ini" as string) + if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") then "<no dsm.opt file>" else if(not exists line whose(it as uppercase contains "SERVERNAME ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") then "<SERVERNAME missing>" else (following text of first "SERVERNAME " of (it as uppercase) of line whose(it as uppercase contains "SERVERNAME ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") + if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<no dsm.sys file>" else if(not exists line whose(it as lowercase contains "tcpserveraddress ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<tcpserveraddress missing>" else (concatenation " " of substrings separated by " " whose (it != "") of following text of first "tcpserveraddress " of (it as lowercase) of (line whose(it as lowercase contains "tcpserveraddress ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys")) + if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<no dsm.sys file>" else if(not exists line whose(it as lowercase contains "nodename ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<nodename missing>" else (concatenation " " of substrings separated by " " whose (it != "") of following text of first "nodename " of (it as lowercase) of (line whose(it as lowercase contains "nodename ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys")) + exists processes whose (name of it = "dsmcad") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes b/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes new file mode 100644 index 000000000..a0568c12c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes @@ -0,0 +1,25 @@ + + + + + Temporary Admin Privliges Report - macOS + This analysis determines the status of the Temporary Admin Privliges task.

+

To utilize this analysis you must first run the "System Configuration: Grant Temporary Admin Rights - macOS" task.

]]> + mac of operating system + + x-fixlet-modification-time + Mon, 08 Oct 2018 19:55:16 +0000 + + BESC + if (exists file "/Library/PSU/MakeMeAdmin.Status.plist") then if (string "Status" of dictionary of file "/Library/PSU/MakeMeAdmin.Status.plist" = "Compliant") then "Compliant" else (it as string) of (string "Status" of it, string "newAdmins" of it, string "orgAdmin" of it) of dictionary of file "/Library/PSU/MakeMeAdmin.Status.plist" else "Compliant" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes b/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes new file mode 100644 index 000000000..3c7814435 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes @@ -0,0 +1,24 @@ + + + + + Time Machine - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + if (exists file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") then ((string of it) of values of (if (exists array "ExcludeByPath" of it) then (array "ExcludeByPath" of it) else (none); (if (exists array "SkipPaths" of it) then (array "SkipPaths" of it) else (none))) of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") else "None" + (boolean "SkipSystemFiles" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False + (boolean "RequiresACPower" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False + (boolean "AutoBackup" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False + + diff --git a/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes b/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes new file mode 100644 index 000000000..323fb3061 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes @@ -0,0 +1,23 @@ + + + + + VPN - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + (string "UserDefinedName" of it, string "SubType" of dictionary "Interface" of it, string "CommRemoteAddress" of dictionary "PPP" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "SubType" of dictionary "Interface" of it = "PPTP") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" + (string "UserDefinedName" of it, string "Type" of dictionary "Interface" of it, string "RemoteAddress" of dictionary "IPSec" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "Type" of dictionary "Interface" of it = "IPSec") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" + (string "UserDefinedName" of it, string "SubType" of dictionary "Interface" of it, string "CommRemoteAddress" of dictionary "PPP" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "SubType" of dictionary "Interface" of it = "L2TP") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes b/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes new file mode 100644 index 000000000..1bfb5504b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes @@ -0,0 +1,26 @@ + + + + + macOS Intel-Only Applications + These files and applications require Rosetta 2, which will no longer be supported after macOS 27. + mac of operating system + + x-fixlet-modification-time + Fri, 10 Apr 2026 19:35:18 +0000 + + BESC + (name of folder it, it) of unique values of (item 1 of it as string) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,9)) of it as hexadecimal), pathname of parent folder of parent folder of parent folder of it as string) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files of folders "Contents/MacOS" of folders (pathnames of regapps) + (item 1 of it, item 2 of it) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,15)) of it as hexadecimal), name of parent folder of parent folder of parent folder of it, pathname of it) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files of folders "Contents/MacOS" of folders (pathnames of regapps) + (item 1 of it, item 2 of it) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,15)) of it as hexadecimal), name of it, pathname of it) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files (pathnames of image files of processes) + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes new file mode 100644 index 000000000..38f9afc14 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes @@ -0,0 +1,107 @@ + + + + + Add additional FileVault user to encrypted computer (APFS only) +

+
+

+

+
+


+

+

Important Notes

+
    +
  • +
    You must enter a password in order to take an action
    +
  • +
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> + mac of operating system + = "10.13.0"]]> + ((it as string as lowercase contains "true")) of booleans of values of entries whose (("CoreStorage Encrypted" = key of it) OR ("Encrypted" = key of it)) of dictionaries whose (exists substring "False" of (booleans of values of entries whose ("Removable" = key of it) of it as string)) of (it; nodes of it; nodes of nodes of it; nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of nodes of it) of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of service plane of iokit registry + exists substring "Solid" of (strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes of nodes of it; strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of it) of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it starts with "RP")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry + 2018-01-04 + + bigfixme-added-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-modification-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-keywords + user, net.exe, secure parameter, password + + + x-fixlet-modification-time + Thu, 04 Jan 2018 14:54:29 +0000 + + BESC + + + + Add + &nbsp;FileVault 2 user + + + + + + Username + {parameter "username"} + Password + {parameter "secret" of action} +AdditionalUsers + + + Username + {parameter "username2"} + Password + {parameter "secret2" of action} + + + + +EOF + +move __createfile /tmp/fdesetup.plist + +wait /bin/sh -c "fdesetup add -inputplist < /tmp/fdesetup.plist" + +wait /bin/sh -c "fdesetup list > "/.filevault/users.txt"" + +delete /tmp/fdesetup.plist]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes new file mode 100644 index 000000000..2d97a5cf9 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes @@ -0,0 +1,105 @@ + + + + + Add additional FileVault user to encrypted computer (HFS only) +

+
+
+

+

Important Notes

+
    +
  • +
    You must enter a password in order to take an action
    +
  • +
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> + mac of operating system + ((it as string as lowercase contains "true")) of booleans of values of entries whose (("CoreStorage Encrypted" = key of it) OR ("Encrypted" = key of it)) of dictionaries whose (exists substring "False" of (booleans of values of entries whose ("Removable" = key of it) of it as string)) of (it; nodes of it; nodes of nodes of it; nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of nodes of it) of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of service plane of iokit registry + + 2018-01-04 + + bigfixme-added-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-modification-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-keywords + user, net.exe, secure parameter, password + + + x-fixlet-modification-time + Thu, 04 Jan 2018 15:03:04 +0000 + + BESC + + + + Add + &nbsp;user to the list of FileVault users + + + + + + Username + + Password + {parameter "FVKey"} +AdditionalUsers + + + Username + {parameter "username"} + Password + {parameter "secret" of action} + + + + +EOF + +move __createfile /tmp/fdesetup.plist + +wait /bin/sh -c "fdesetup add -inputplist < /tmp/fdesetup.plist" + +wait /bin/sh -c "fdesetup list > "/.filevault/users.txt"" + +delete /tmp/fdesetup.plist]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes new file mode 100644 index 000000000..2e4c64110 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes @@ -0,0 +1,85 @@ + + + + + Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X + Use this action to update Adobe Acrobat Pro DC to version 15.010.20056. This action is relevant on Macs running Mavericks or newer with a previous version of Adobe Acrobat Pro DC installed.

+

Adobe Acrobat Pro DC Update 15.010.20056 Planned Update (Continuous Track), January 12, 2016

+

https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html

+

Action 1: Use this when Acrobat Pro DC is not running otherwise the update will fail. Acrobat Pro DC needs to be closed in order for the update to succesfully install. If you would like to forcibly close Acrobat Pro DC, then use Action 2.

+

Action 2: Use this to forcibly close Acrobat Pro DC by killing the process, and then proceed with installing the update.

]]> + mac of operating system + = "10.9.0"]]> + = "15.0")]]> + Internal + 2016-01-17 + + x-fixlet-modification-time + Mon, 18 Jan 2016 02:10:02 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process. + + prefetch AcrobatDCUpd1501020056.pkg sha1:981d1367eb9e1926bba62549764ef9b90700d6a9 size:249165728 http://ardownload.adobe.com/pub/adobe/acrobat/mac/AcrobatDC/1501020056/AcrobatDCUpd1501020056.pkg sha256:240341d7407b4f29cf1b527e841ecc61657da092a17fa2dd109a0b92ab3a789b + +// Delete the Acrobat DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Kill all Acrobat processes to forcibly close Acrobat DC +// Uncomment the next line to forcibly close Acrobat DC by killing the process +// wait /bin/sh -c "/usr/bin/killall 'AdobeAcrobat' " + +// Move the downloaded Acrobat DC Update PKG to the temp directory +move "{posix path of file "AcrobatDCUpd1501020056.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcrobatDCUpd1501020056.pkg" + +// Install the Acrobat DC update +wait installer -pkg "/private/tmp/AcrobatDCUpd1501020056.pkg" -target / + +// Delete the Acrobat DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + + Click + here + &nbsp;to upgrade to Adobe Acrobat Pro DC&nbsp;regardless of whether Acrobat&nbsp;Pro DC is running. + + prefetch AcrobatDCUpd1501020056.pkg sha1:981d1367eb9e1926bba62549764ef9b90700d6a9 size:249165728 http://ardownload.adobe.com/pub/adobe/acrobat/mac/AcrobatDC/1501020056/AcrobatDCUpd1501020056.pkg sha256:240341d7407b4f29cf1b527e841ecc61657da092a17fa2dd109a0b92ab3a789b + +// Delete the Acrobat DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Kill all Acrobat processes to forcibly close Acrobat DC +// Uncomment the next line to forcibly close Acrobat DC by killing the process +wait /bin/sh -c "/usr/bin/killall 'AdobeAcrobat' " + +// Move the downloaded Acrobat DC Update PKG to the temp directory +move "{posix path of file "AcrobatDCUpd1501020056.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcrobatDCUpd1501020056.pkg" + +// Install the Acrobat DC update +wait installer -pkg "/private/tmp/AcrobatDCUpd1501020056.pkg" -target / + +// Delete the Acrobat DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes new file mode 100644 index 000000000..5efdc0f49 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes @@ -0,0 +1,85 @@ + + + + + Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X + Use this action to update Adobe Acrobat Reader DC to version 15.010.20056. This action is relevant on Macs running Mavericks or newer with a previous version of Adobe Acrobat Pro DC installed.

+

Adobe Acrobat Reader DC Update 15.010.20056 Planned Update (Continuous Track), October 29, 2015

+

https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html

+

Action 1: Use this when Acrobat Reader DC is not running otherwise the update will fail. Acrobat Reader DC needs to be closed in order for the update to succesfully install. If you would like to forcibly close Acrobat Reader DC, then use Action 2.

+

Action 2: Use this to forcibly close Acrobat Reader DC by killing the process, and then proceed with installing the update.

]]> + mac of operating system + = "10.9.0"]]> + = "15.0")]]> + Internal + 2016-01-17 + + x-fixlet-modification-time + Mon, 18 Jan 2016 02:09:50 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process. + + prefetch AcroRdrDCUpd1501020056_MUI.pkg sha1:ee6717bd7d1abcabcc87a685453e6cb2bf8acce0 size:86105619 http://ardownload.adobe.com/pub/adobe/reader/mac/AcrobatDC/1501020056/AcroRdrDCUpd1501020056_MUI.pkg sha256:5d801caeaeaee283845eb186379d72b43083cce83c761b119fa3495d232527dc + +// Delete the Acrobat Reader DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Kill all Acrobat Reader processes to forcibly close Acrobat Reader DC +// Uncomment the next line to forcibly close Acrobat Reader DC by killing the process +// wait /bin/sh -c "/usr/bin/killall 'AdobeReader' " + +// Move the downloaded Acrobat Reader DC Update PKG to the temp directory +move "{posix path of file "AcroRdrDCUpd1501020056_MUI.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" + +// Install the Acrobat Reader DC update +wait installer -pkg "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" -target / + +// Delete the Acrobat Reader DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + + Click + here + &nbsp;to upgrade to Adobe Acrobat Reader DC&nbsp;regardless of whether Acrobat Reader DC is running. + + prefetch AcroRdrDCUpd1501020056_MUI.pkg sha1:ee6717bd7d1abcabcc87a685453e6cb2bf8acce0 size:86105619 http://ardownload.adobe.com/pub/adobe/reader/mac/AcrobatDC/1501020056/AcroRdrDCUpd1501020056_MUI.pkg sha256:5d801caeaeaee283845eb186379d72b43083cce83c761b119fa3495d232527dc + +// Delete the Acrobat Reader DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Kill all Acrobat Reader processes to forcibly close Acrobat Reader DC +// Uncomment the next line to forcibly close Acrobat Reader DC by killing the process +wait /bin/sh -c "/usr/bin/killall 'AdobeReader' " + +// Move the downloaded Acrobat Reader DC Update PKG to the temp directory +move "{posix path of file "AcroRdrDCUpd1501020056_MUI.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" + +// Install the Acrobat Reader DC update +wait installer -pkg "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" -target / + +// Delete the Acrobat Reader DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes new file mode 100644 index 000000000..0cfa8b2fd --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes @@ -0,0 +1,68 @@ + + + + + Apple Remote Desktop Client - 3.5.4 - Mac + This will update the Apple Remote Desktop Client to version 3.5.4 on applicable machines. + name of operating system = "Mac OS X" + = "10.6"]]> + + exists string "CFBundleShortVersionString" of dictionary of file "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Info.plist" + + 7983776]]> + Update + Apple + 2013-10-22 + + x-fixlet-modification-time + Thu, 24 Oct 2013 13:40:03 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes new file mode 100644 index 000000000..4eee03f84 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes @@ -0,0 +1,67 @@ + + + + + Apple Remote Desktop Client - 3.7 - Mac + This will update the Apple Remote Desktop Client to version 3.7 on applicable machines. + name of operating system = "Mac OS X" + exists string "CFBundleShortVersionString" of dictionary of file "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Info.plist" + = "10.7"]]> + + 10544004]]> + Update + Apple + 2013-10-22 + + x-fixlet-modification-time + Thu, 24 Oct 2013 13:38:27 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes b/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes new file mode 100644 index 000000000..1ca14aab6 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes @@ -0,0 +1,34 @@ + + + + + Apple Security Update Ethernet Driver Repair - Mac OS X + + exists lines whose (it contains "com.apple.iokit.AppleBCM5701Ethernet" OR it contains "com.apple.iokit.AppleYukon2") of files "/System/Library/Extensions/AppleKextExcludeList.kext/Contents/Info.plist" + Internal + 2016-03-01 + + x-fixlet-modification-time + Wed, 02 Mar 2016 22:04:39 +0000 + + BESC + + + Click + here + to deploy this action. + + // Run Apple Software Update to install critical and config-data updates only, including the fixed ethernet driver update +wait softwareupdate --background-critical + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes b/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes new file mode 100644 index 000000000..50f3d1e26 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes @@ -0,0 +1,35 @@ + + + + + CLM Mac Enable Add everyone to lpadmin group (printers) + This fixlet allows local users to manage printers by adding the everyone group to the lpadmin group. All users are a part of everyone, therefore everyone can manage printers. WARNING: Users will also be able to delete and add printers! + not ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist") contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + CLM Mac System Configuration + Internal + rzm102; mah60 + 2013-10-10 + + x-fixlet-modification-time + Thu, 10 Oct 2013 20:04:36 +0000 + + BESC + + + Click + here + to deploy this action. + + wait dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes b/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes new file mode 100644 index 000000000..73e45fb24 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes @@ -0,0 +1,78 @@ + + + + + Change local user account password - Mac + +

+
+

]]> + mac of operating system + = "9.0"]]> + Accounts + Internal + jbt8@psu.edu + 2013-05-03 + + x-fixlet-modification-time + Fri, 06 Dec 2013 11:17:48 +0000 + + BESC + + + + Change + &nbsp;specified local user account password. + + action parameter query "username" with description "Please specify the name of an existing local user account" + +wait sh -c "dscl localhost -passwd '/Search/Users/{parameter "username" of action}' {parameter "secret" of action}" + +continue if {exit code of action = 0} + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes b/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes new file mode 100644 index 000000000..8ba48463c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes @@ -0,0 +1,218 @@ + + + + + Check FileVault2 Status for Mac OS X 10.7/10.8 without PGP installed. + This task uses a script found on the Internet to check the status of FileVault2 encryption on Mac laptops.

+

The results of the check are stored in a client setting "_FileVault2". +The original script was derived from the FileVault 2 encryption status check script from http://derflounder.wordpress.com/2011/10/13/filevault-2-encryption-status-check-script/ +

+

Because of the potential impact to performance, I only execute this Task once every 6 hours. This was deemed frequent enough to appropriately record the encryption status, but not so frequent that it adversely impacted overall performance of the targeted computers or their Agents. +

]]> + (operating system as string starts with "Mac OS X 10.7.") or (operating system as string starts with "Mac OS X 10.8.") + not exists application whose (name of it as lowercase = "pgp.app") + if ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry then TRUE else FALSE + ENCRYPTION STATUS + Internal + 2013-08-07 + + x-fixlet-modification-time + Thu, 15 Aug 2013 21:30:23 +0000 + + BESC + + + Click + here + to deploy this action. + + /private/tmp/filevault2-status.txt +fi + + + +if [[ ${{osvers} -ge 7 ]]; then +diskutil cs list >> $CORESTORAGESTATUS + +# If the Mac is running 10.7 or 10.8, but does not have +# any CoreStorage volumes, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Not Enabled" + +if grep -iE 'No CoreStorage' $CORESTORAGESTATUS 1>/dev/null; then +echo "FileVault 2 Encryption Not Enabled" > /private/tmp/filevault2-status.txt +fi + +# If the Mac is running 10.7 or 10.8 and has CoreStorage volumes, +# the script then checks to see if the machine is encrypted, +# encrypting, or decrypting. +# +# If encrypted, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Complete" +# +# If encrypting, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Proceeding." +# How much has been encrypted of of the total +# amount of space is also displayed. If the +# amount of encryption is for some reason not +# known, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Status Unknown. Please check." +# +# If decrypting, the following message is +# displayed without quotes: +# "FileVault 2 Decryption Proceeding" +# How much has been decrypted of of the total +# amount of space is also displayed +# +# If fully decrypted, the following message is +# displayed without quotes: +# "FileVault 2 Decryption Complete" +# + +if grep -iE 'Logical Volume Family' $CORESTORAGESTATUS 1>/dev/null; then + +# This section does 10.7-specific checking of the Mac's +# FileVault 2 status + +if [ "$CONTEXT" = "Present" ]; then +if [ "$ENCRYPTION" = "AES-XTS" ]; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Status" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTSTATUS +if grep -iE 'Complete' $ENCRYPTSTATUS 1>/dev/null; then +echo "FileVault 2 Encryption Complete" > /private/tmp/filevault2-status.txt +else +if grep -iE 'Converting' $ENCRYPTSTATUS 1>/dev/null; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION +if grep -iE 'Forward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" > /private/tmp/filevault2-status.txt +else +echo "FileVault 2 Encryption Status Unknown. Please check." > /private/tmp/filevault2-status.txt +fi +fi +fi +else +if [ "$ENCRYPTION" = "None" ]; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION +if grep -iE 'Backward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" > /private/tmp/filevault2-status.txt +elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Completed" > /private/tmp/filevault2-status.txt +fi +fi +fi +fi +fi +fi +# This section does 10.8-specific checking of the Mac's +# FileVault 2 status + +if [ "$ENCRYPTIONEXTENTS" = "Yes" ]; then +diskutil cs list | grep -E "$EGREP_STRING\Fully Secure" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTSTATUS +if grep -iE 'Yes' $ENCRYPTSTATUS 1>/dev/null; then +echo "FileVault 2 Encryption Complete" > /private/tmp/filevault2-status.txt +else +if grep -iE 'No' $ENCRYPTSTATUS 1>/dev/null; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION +if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" > /private/tmp/filevault2-status.txt + +else +if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" > /private/tmp/filevault2-status.txt +elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Completed" > /private/tmp/filevault2-status.txt +fi +fi +fi +fi +fi +if [ "$ENCRYPTIONEXTENTS" = "No" ]; then +echo "FileVault 2 Encryption Not Enabled" > /private/tmp/filevault2-status.txt +fi + +# Remove the temp files created during the script + +if [ -f /private/tmp/corestorage.txt ]; then +rm /private/tmp/corestorage.txt +fi + +if [ -f /private/tmp/encrypt_status.txt ]; then +rm /private/tmp/encrypt_status.txt +fi + +if [ -f /private/tmp/encrypt_direction.txt ]; then +rm /private/tmp/encrypt_direction.txt +fi +##END## + +delete filevault2.sh +move __createfile filevault2.sh +// if {not exists folder "/TEM-Data"} +// folder create "/TEM-Data" +// endif +// wait /bin/sh -C filevault2.sh > "{parent folder of data folder of client}/filevault2-status.txt" +// wait /bin/sh -C filevault2.sh >> /private/tmp/filevault2-status.txt +wait /bin/sh filevault2.sh +if {exists file "filevault2-status.txt" of folder "/private/tmp"} +setting "_FileVault2"="{lines of file "filevault2-status.txt" of folder "/private/tmp"}" on "{now}" for client +else +setting "_FileVault2"="FAILED" on "{now}" for client +endif]]> + + + + Click + here + to visit the Home Page the script originates from. + + http://derflounder.wordpress.com/2011/10/13/filevault-2-encryption-status-check-script/ + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes new file mode 100644 index 000000000..56272085b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes @@ -0,0 +1,35 @@ + + + + + Config - Login Window - Clear LoginHook - Mac + This Fixlet removes any defined Login Hooks in macOS.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists strings "LoginHook" of dictionaries of file "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + Internal + 2017-02-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults delete /private/var/root/Library/Preferences/com.apple.loginwindow.plist LoginHook + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes new file mode 100644 index 000000000..a1ce4be53 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes @@ -0,0 +1,35 @@ + + + + + Config - Login Window - Clear LogoutHook - Mac + This Fixlet removes any defined Logout Hooks in macOS.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists strings "LogoutHook" of dictionaries of file "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + Internal + 2017-02-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults delete /private/var/root/Library/Preferences/com.apple.loginwindow.plist LogoutHook + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes new file mode 100644 index 000000000..54456959c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes @@ -0,0 +1,43 @@ + + + + + Config - Power Policy - Set to Balanced - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 25 + wait pmset -b displaysleep 15 + wait pmset -c disksleep 30 + wait pmset -b disksleep 20 + wait pmset -c sleep 30 + wait pmset -b sleep 20 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes new file mode 100644 index 000000000..1e202ecfc --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes @@ -0,0 +1,43 @@ + + + + + Config - Power Policy - Set to High Performance - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 45 + wait pmset -b displaysleep 30 + wait pmset -c disksleep 30 + wait pmset -b disksleep 20 + wait pmset -c sleep 60 + wait pmset -b sleep 45 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes new file mode 100644 index 000000000..17b0b3c12 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes @@ -0,0 +1,43 @@ + + + + + Config - Power Policy - Set to Power Saver - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 20 + wait pmset -b displaysleep 5 + wait pmset -c disksleep 30 + wait pmset -b disksleep 15 + wait pmset -c sleep 60 + wait pmset -b sleep 15 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes new file mode 100644 index 000000000..6d3138134 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes @@ -0,0 +1,43 @@ + + + + + Config - Power Policy - Set to Presentation Mode - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 0 + wait pmset -b displaysleep 0 + wait pmset -c disksleep 15 + wait pmset -b disksleep 15 + wait pmset -c sleep 0 + wait pmset -b sleep 0 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes new file mode 100644 index 000000000..bf0dc6a92 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes @@ -0,0 +1,37 @@ + + + + + Config - Wake on Lan - Disable - Mac + This disables Wake on Lan on a Mac.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists integers "Wake On LAN" whose (it != 0) of dictionaries of values of entries of dictionaries "Custom Profile" of dictionaries of files "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" + BIOS Settings + Internal + 2016-04-29 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to disable Wake On LAN on a Mac. + + wait pmset -a womp 0 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes new file mode 100644 index 000000000..de3983597 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes @@ -0,0 +1,37 @@ + + + + + Config - Wake on Lan - Enable - Mac + This enables Wake on Lan on a Mac.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists dictionaries whose (not exists integers "Wake On LAN" of it or exists integers "Wake On LAN" whose (it != 1) of it) of values of entries of dictionaries "Custom Profile" of dictionaries of files "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" + BIOS Settings + Internal + 2016-04-29 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to enable Wake On LAN on a Mac. + + wait pmset -a womp 1 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes new file mode 100644 index 000000000..59c546e8e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes @@ -0,0 +1,35 @@ + + + + + Config - Wireless Adapter - Disable - Mac + + mac of operating system + = "10.10"]]> + boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = True + Internal + 2017-03-24 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait networksetup -setairportpower airport off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes b/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes new file mode 100644 index 000000000..8a25382da --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes @@ -0,0 +1,84 @@ + + + + + Delete user (macOS) + Enter username to delete
Returns exit code 44 if supplied user is not found
Returns exit code 3 if user was not successfully deleted (typically if supplied user is the only remaining account with a secure token)]]> + mac of operating system + Internal + 2024-09-01 + + x-fixlet-modification-time + Sun, 08 Sep 2024 21:01:04 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +action parameter query "user" with description "Enter username to delete" + +delete __createfile +delete "{parameter "scriptName"}" +createfile until _EOF_ +#!/bin/zsh + +toDeleteUser="{parameter "user"}" + +if id "$toDeleteUser" >/dev/null 2>&1; then + echo "User $toDeleteUser found" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +else + echo "User $toDeleteUser not found" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 44 +fi + +sysadminctl -deleteUser "$toDeleteUser" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +sleep 5 + +if id "$toDeleteUser" >/dev/null 2>&1; then + echo "User $toDeleteUser still found, not successfully deleted" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 3 +else + echo "User $toDeleteUser no longer exists" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +fi +exit 0 +_EOF_ +copy "__createfile" "{parameter "scriptName"}" +wait chmod +x "{parameter "scriptName"}" +wait /bin/zsh "{parameter "scriptName"}" +parameter "exitCode" = "{exit code of action}" +delete __createfile +delete "{parameter "scriptName"}" + +wait sh -c "echo Return Code: {parameter "exitCode"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +if {parameter "exitCode" != "0"} +exit {parameter "exitCode"} +endif + +exit {parameter "exitCode"}]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes b/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes new file mode 100644 index 000000000..407aa6c2a --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes @@ -0,0 +1,122 @@ + + + + + Escrow Bootstrap Token (macOS) + +
+

This fixlet creates or updates the Bootstrap Token APFS record and escrows the information to the device's MDM server.

+

Provided credentials MUST be for an account with a secure token. If account does not have a secure token, fixlet will exit with exit code 30.

]]> + mac of operating system + Internal + 2025-04-17 + + parametermetadatatag + { "username": { "Name": "username", "Title": "Username:", "Description": "Username of an account with a secure token", "UIType": "Textbox", "Required":"1" }, "password": { "Name": "password", "Title": "Password:", "Description": "User's password", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password" }, "password2": { "Name": "password2", "Title": "Verify password:", "Description": "Retype password", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password", "CustomValidator": "validatePassword" } } + + + ParameterValidatorTag + { validatePassword : function (validationObj, metadataObj) { var currentValue = validationObj["currentValue"]; var parentValue = FixletUtils.getElementText('password', metadataObj); if ( currentValue !== parentValue ) return "The passwords entered do not match!"; } } + + + x-fixlet-modification-time + Fri, 18 Apr 2025 05:54:29 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +delete __createfile +delete "__Download/{parameter "scriptName"}" +createfile until _end_ +#!/bin/zsh +adminUser="{parameter "username" of action}" +precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) +if [[ "$precheck" == *"ENABLED"* ]]; then + echo "Provided user $adminUser has a secure token. Continuing..." >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 0 +elif [[ "$precheck" == *"DISABLED"* ]]; then + echo "Provided user $adminUser does not have a secure token" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 30 +else + echo "Error checking $adminUser secure token status" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 31 +fi +_end_ +copy "__createfile" "__Download/{parameter "scriptName"}" +wait chmod +x "__Download/{parameter "scriptName"}" +wait /bin/zsh "__Download/{parameter "scriptName"}" +parameter "error" = "{exit code of action}" +delete __createfile +delete "__Download/{parameter "scriptName"}" + +if {parameter "error" is "0"} +wait bash -c "profiles install -type bootstraptoken -user '{parameter "username" of action}' -password '{parameter "password" of action}' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +parameter "error2" = "{exit code of action}" +wait sh -c "echo Return Code: {parameter "error2"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +endif + +if {parameter "error" != "0"} +wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +exit {parameter "error"} +endif + +exit {parameter "error2"} + +]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes b/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes new file mode 100644 index 000000000..e4d99ef93 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes @@ -0,0 +1,224 @@ + + + + + Firmware Password for Mac OS X + This fixlet checks to see if the firmware password is set (an optionally sets the password) for a Mac.

+

Because of the potential impact to performance, I only execute this Task once every 6 hours when using it to audit the password status. This was deemed frequent enough to appropriately record the encryption status, but not so frequent that it adversely impacted overall performance of the targeted computers or their Agents.

]]> + (operating system as string starts with "Mac OS X") + FIRMWARE STATUS + Internal + 2014-07-27 + + bigfixme-added-time + Mon, 19 Aug 2013 11:08:07 GMT + + + bigfixme-modification-time + Mon, 19 Aug 2013 11:17:29 GMT + + + bigfixme-keywords + FileVault FileVault2 Macintosh Encryption + + + x-fixlet-modification-time + Fri, 17 Apr 2015 23:00:21 +0000 + + BESC + + + Click + here + to Audit the&nbsp;Firmware password. + + /private/tmp/firmware_status.txt +exit 0 +fi +/usr/bin/hdiutil attach -nobrowse -quiet /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg +cp "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`/Applications/Utilities/Firmware Password Utility.app/Contents/Resources/setregproptool" /usr/bin +/usr/bin/hdiutil detach "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`" -force +/usr/sbin/diskutil umount Recovery\ HD +fi + + +/usr/bin/setregproptool -c +FIRMWARESET=`echo "$?"` +if [ $FIRMWARESET -eq 0 ]; then +echo "Password Set in Firmware" > /private/tmp/firmware_status.txt +else +SYSTEMUSESNVRAM=`nvram security-mode` +if [ -n "$SYSTEMUSESNVRAM" ]; then +NVRAMPASSWORD=`nvram security-password` +if [ -n "$NVRAMPASSWORD" ]; then +echo "Password Set in NVRAM" > /private/tmp/firmware_status.txt +else +echo "Password NOT Set in NVRAM" > /private/tmp/firmware_status.txt +fi +else +echo "Password NOT Set in Firmware" > /private/tmp/firmware_status.txt +fi +fi + +exit 0 + +##END## + +delete fwstatus.sh +move __createfile fwstatus.sh +wait /bin/sh fwstatus.sh +delete fwstatus.sh + +if {exists file "firmware_status.txt" of folder "/private/tmp"} +setting "_FirmwarePassword"="{lines of file "firmware_status.txt" of folder "/private/tmp"}" on "{now}" for client +else +setting "_FirmwarePassword"="FAILED" on "{now}" for client +endif +]]> + + + + + Click + here + to Set the Firmware password. + + /private/tmp/firmware_status.txt +exit 1 +fi +/usr/bin/hdiutil attach -nobrowse -quiet /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg +cp "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`/Applications/Utilities/Firmware Password Utility.app/Contents/Resources/setregproptool" /usr/bin +/usr/bin/hdiutil detach "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`" -force +/usr/sbin/diskutil umount Recovery\ HD +fi + +/usr/bin/setregproptool -c +FIRMWARESET=`echo "$?"` +if [ $FIRMWARESET -eq 0 ]; then +echo "Password already in Firmware, can't change" > /private/tmp/firmware_status.txt +exit 1 +else +SYSTEMUSESNVRAM=`nvram security-mode` +if [ -n "$SYSTEMUSESNVRAM" ]; then +/usr/bin/python efipw.py -p "{parameter "PASSWORD"}" +else +/usr/bin/setregproptool -m command -p "{parameter "PASSWORD"}" +fi +fi + + +/usr/bin/setregproptool -c +FIRMWARESET=`echo "$?"` +if [ $FIRMWARESET -eq 0 ]; then +echo "Password Set in Firmware" > /private/tmp/firmware_status.txt +else +SYSTEMUSESNVRAM=`nvram security-mode` +if [ -n "$SYSTEMUSESNVRAM" ]; then +NVRAMPASSWORD=`nvram security-password` +if [ -n "$NVRAMPASSWORD" ]; then +echo "Password Set in NVRAM" > /private/tmp/firmware_status.txt +else +echo "Password NOT Set in NVRAM" > /private/tmp/firmware_status.txt +fi +else +echo "Password NOT Set in Firmware" > /private/tmp/firmware_status.txt +fi +fi + + +##END## + +delete fwstatus.sh +move __createfile fwstatus.sh + +createfile until ##END## + +#!/usr/bin/env python +""" + EFIPW (C) 2010 by Paul Makowski (my.hndl@gmail.com) + http://paulmakowski.wordpress.com/ + License: GPLv3 +""" +from optparse import OptionParser +import os +import binascii + +parser = OptionParser(version="%prog 0.2b") + +if os.geteuid(): parser.error("Must be run as root. (e.g. sudo ./efipw.py [options])") + +parser.add_option("-p", "--password", dest="newPassword", metavar="PASSWORD", type="string", help="set new EFI password") + +(options, args) = parser.parse_args() + +# lolCrypt: Apple's lolzy encryption function +def lolCrypt(input): + output = "" + for i in range(0, len(input)): output += (chr(ord(input[i]) ^ 170)) # 170 in decimal is 10101010 in binary; this is the key...don't tell anyone ;) + return output + +def splitLen(seq, length): return [seq[i:i+length] for i in range(0, len(seq), length)] + +if options.newPassword: + newMode = "command" + if len(options.newPassword) > 48: print "Password cannot be longer than 48 characters; new password not set." + else: + newPassword = splitLen(binascii.hexlify(lolCrypt(options.newPassword)), 2) + for i in range(len(newPassword)): newPassword[i] = '%' + newPassword[i] + newPassword = ''.join(newPassword) + p = os.popen('nvram security-password=' + newPassword,"r") + p = os.popen('nvram security-mode=' + newMode,"r") + + +##END## + +delete efipw.py +move __createfile efipw.py + + +wait /bin/sh fwstatus.sh +//secure remove this file as it has a password in it +wait /usr/bin/srm fwstatus.sh +wait /usr/bin/srm efipw.py + +if {exists file "firmware_status.txt" of folder "/private/tmp"} +setting "_FirmwarePassword"="{lines of file "firmware_status.txt" of folder "/private/tmp"}" on "{now}" for client +else +setting "_FirmwarePassword"="FAILED" on "{now}" for client +endif]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes b/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes new file mode 100644 index 000000000..9c2cf60be --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes @@ -0,0 +1,151 @@ + + + + + Grant Secure Token (Mac) + +
+

This fixlet uses an existing account with a secure token to grant a secure token to another account. Additionally, "secure parameters" are used to encrypt the passwords and securely transfer them to the endpoint.

+

If the granting user is not an administrator, they will be temporarily elevated for the duration of the script, and then returned to a standard user account.

+

Logs are written to /Library/Application Support/BigFix/BES Agent/__BESData/__Global/SWDDeployData/SWD_DeploymentResults.log

+
]]> + mac of operating system + Internal + 2024-01-11 + + parametermetadatatag + { "aUser": { "Name": "adminUser", "Title": "Granting user name:", "Description": "Enter the username of a user with a secure token", "UIType": "Textbox", "Required":"1" }, "aPass": { "Name": "adminPass", "Title": "Granting user password:", "Description": "Enter the password of a user with a secure token", "UIType": "Textbox", "Encrypt" : "true", "SubUIType" : "Password" }, "rUser": { "Name": "receiverUser", "Title": "Receiving user name:", "Description": "Enter the username of a user without a secure token", "UIType": "Textbox", "Required":"1" }, "rPass": { "Name": "receiverPass", "Title": "Receiving user password:", "Description": "Enter the password of a user without a secure token", "UIType": "Textbox", "Encrypt" : "true", "SubUIType" : "Password" } } + + + x-fixlet-modification-time + Wed, 10 Apr 2024 16:33:27 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +delete __createfile +delete "__Download/broker.sh" +createfile until _end_ +#/!bin/zsh + +adminUser="{parameter "adminUser" of action}" +adminPass="{parameter "adminPass" of action}" +receiverUser="{parameter "receiverUser" of action}" +receiverPass="{parameter "receiverPass" of action}" + +precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) +if [[ "$precheck" == *"ENABLED"* ]]; then + echo "Granting user $adminUser has a secure token. Continuing..." >> "{parameter "logFolder"}/{parameter "logFile"}" +elif [[ "$precheck" == *"DISABLED"* ]]; then + echo "Granting user $adminUser does not have a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 1 +else + echo "Error checking $adminUser secure token status" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 2 +fi + +if [ -z "$adminPass" ]; then + adminPass="-" +fi + +if [ -z "$receiverPass" ]; then + receiverPass="-" +fi + +resetUser=false +if id -Gn $adminUser | grep -q -w admin; +then + echo "Granting user $adminUser is an administrator. Continuing..." >> "{parameter "logFolder"}/{parameter "logFile"}" +else + echo "Granting user $adminUser is NOT an administrator. Temporarily elevating..." >> "{parameter "logFolder"}/{parameter "logFile"}" + dscl . -merge /Groups/admin GroupMembership $adminUser >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 + resetUser=true +fi + +yes "" | sysadminctl -secureTokenOn $receiverUser -password $receiverPass -adminUser $adminUser -adminPassword $adminPass >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 + +if [ "$resetUser" = true ]; then + echo "Returning $adminUser to standard user" >> "{parameter "logFolder"}/{parameter "logFile"}" + dseditgroup -o edit -d $adminUser -t user admin >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 +fi + +check=$(sysadminctl -secureTokenStatus $receiverUser 2>&1) +if [[ "$check" == *"ENABLED"* ]]; then + echo "Target user $receiverUser has a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 0 +elif [[ "$check" == *"DISABLED"* ]]; then + echo "Target user $receiverUser does not have a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 1 +else + echo "Error checking $receiverUser secure token status" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 2 +fi +_end_ +copy "__createfile" "__Download/broker.sh" +wait chmod +x "__Download/broker.sh" +wait /bin/zsh "__Download/broker.sh" +parameter "error" = "{exit code of action}" +delete __createfile +delete "__Download/broker.sh" + +if {parameter "error" != "0"} +exit {parameter "error"} +endif + +exit {parameter "error"}]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes b/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes new file mode 100644 index 000000000..e65a5c5e3 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes @@ -0,0 +1,43 @@ + + + + + Ignore "macOS Catalina" update - MacOS + + mac of operating system + + not exists strings whose(it = "macOS Catalina") of values of arrays "InactiveUpdates" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" + Internal + 2019-10-08 + + x-fixlet-modification-time + Tue, 08 Oct 2019 19:36:39 +0000 + + BESC + + + Click + here + to deploy this action. + + +// TODO: test this part +wait softwareupdate --ignore "macOS Catalina" + +// Related: +// - https://bigfix.me/relevance/details/3022811 +// - https://babodee.wordpress.com/2018/12/11/ignore-a-specific-macos-update-using-softwareupdate/ + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes new file mode 100644 index 000000000..be85541b6 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes @@ -0,0 +1,42 @@ + + + + + Invoke - 1E NightWatchman Shutdown Now - Win\Mac + This Fixlet uses 1E NightWatchman to shutdown the system.

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + windows of operating system or mac of operating system + if (Windows of Operating System) then (exists file "NightWatchman.exe" of folder (preceding text of last "\" of (it as string) of value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry)) else (exists file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") + Internal + 2016-09-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + parameter "1ECLI"="{if (windows of operating system) then (pathname of file "NightWatchman.exe" of folder (value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry as string)) else (pathname of file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") }" + +if {Windows of Operating System} + wait "{parameter "1ECLI"}" -shutdownnow -CountdownSecs=90 +elseif {Mac of Operating System} + wait "{parameter "1ECLI"}" -shutdownnow CountdownSecs 90 +endif + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes new file mode 100644 index 000000000..d9e6ef060 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes @@ -0,0 +1,42 @@ + + + + + Invoke - 1E NightWatchman Standby Now - Win\Mac + This Fixlet uses 1E NightWatchman to sleep the system.

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + windows of operating system or mac of operating system + if (Windows of Operating System) then (exists file "NightWatchman.exe" of folder (preceding text of last "\" of (it as string) of value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry)) else (exists file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") + Internal + 2016-09-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + parameter "1ECLI"="{if (windows of operating system) then (pathname of file "NightWatchman.exe" of folder (value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry as string)) else (pathname of file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") }" + +if {Windows of Operating System} + wait "{parameter "1ECLI"}" -standbynow -CountdownSecs=90 +elseif {Mac of Operating System} + wait "{parameter "1ECLI"}" -standbynow CountdownSecs 90 +endif + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes new file mode 100644 index 000000000..8369709a2 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes @@ -0,0 +1,40 @@ + + + + + Invoke - Apple Software Update Install - Mac + Invokes an Apple Software Update Install for all missing updates.

+

This fixlet will only be relevant if there are missing updates available that Apple Update is aware of. To query for missing updates run the Fixlet: Invoke - Apple Software Update Query - Mac to see what updates this fixlet will install see Analysis: Apple Update - Mac

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists file "/usr/sbin/softwareupdate" + + Internal + 2017-04-21 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/softwareupdate --install --all + +action requires restart + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes new file mode 100644 index 000000000..49339d832 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes @@ -0,0 +1,35 @@ + + + + + Invoke - Apple Software Update Query - Mac + Invokes an Apple Software Update check. You can view the results of the check in the Analysis: Apple Update - Mac

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists file "/usr/sbin/softwareupdate" + Internal + 2017-04-21 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/softwareupdate -l + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes new file mode 100644 index 000000000..eed03d6e9 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes @@ -0,0 +1,49 @@ + + + + + Invoke - Avast for Business - Run Scan and Quarantine - Windows + This fixlet invokes an Avast AV scan on the endpoint using the installed Avast Anti-virus client.

+

The scan is invoked using ashCmd.exe, the Avast command line virus scanner.

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + NOT in proxy agent context + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of x32 registry) whose (value "DisplayName" of it as string starts with "Avast Business Security")) + Anti-Virus + Internal + 2016-04-15 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + +run "{pathname of file "AshCMD.exe" of folder (value "ProgramFolder" of key "HKEY_LOCAL_MACHINE\Software\AVAST Software\Avast" of x32 registry as string)}" "{parameter "Location" of action}" + + + + + Click + here + to deploy this action. + + +wait "{pathname of file "AshCMD.exe" of folder (value "ProgramFolder" of key "HKEY_LOCAL_MACHINE\Software\AVAST Software\Avast" of x32 registry as string)}" /@="{parameter "ScanName" of action}" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes new file mode 100644 index 000000000..7a05c443b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes @@ -0,0 +1,62 @@ + + + + + Invoke - Avast for Business - Scan and Quarantine - Windows + This fixlet invokes an Avast AV scan on the endpoint using the installed Avast Anti-virus client.

+

The scan is invoked using ashCmd.exe, the Avast command line virus scanner.

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + NOT in proxy agent context + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of x32 registry) whose (value "DisplayName" of it as string starts with "Avast Business Security")) + Anti-Virus + Internal + 2016-04-15 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to invoke an Avast! Anti-Virus scan. + + + + + + + Click + here + to invoke an Avast! Anti-Virus scan and wait for it to finish before returning control back to the BigFix Client. + + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes new file mode 100644 index 000000000..3941f0217 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes @@ -0,0 +1,44 @@ + + + + + Invoke - ClamAV - Scan and Quarantine - Windows + Invokes a ClamAV Scan and Quarantine

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of native registry) whose (value "DisplayName" of it as string starts with "ClamAV")) | false + Internal + 2016-04-14 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes new file mode 100644 index 000000000..102b6c22d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes @@ -0,0 +1,39 @@ + + + + + Invoke - ClamAV - Update Definitions - Windows + Updates the AV Definitions for ClamAV. Requires Internet Access.

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of native registry) whose (value "DisplayName" of it as string starts with "ClamAV")) | false + Internal + 2016-04-15 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +folder create "{program files x64 folder}\ClamAV-x64\database" + +wait "{program files x64 folder}\ClamAV-x64\freshclam.exe" -v + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes new file mode 100644 index 000000000..eaf841aec --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes @@ -0,0 +1,40 @@ + + + + + Invoke - Configuration Profiles Probe - Mac + This fixlet probes the currently configured Apple Configuration Profiles and outputs a report for consumption by BigFix.

+

This fixlet will always be relevant on a Mac system.

+

The results of this probe can be viewed with the Configuration Profiles - Mac Analysis.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + Certificate Store + Internal + 2016-08-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + folder create "/Library/Profiles" + +wait Profiles -P -o "/Library/Profiles/Effective.plist" + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes new file mode 100644 index 000000000..7c780d848 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes @@ -0,0 +1,61 @@ + + + + + Invoke - FileVault 2 Configuration Probe - Mac + This fixlet probes the current FileVault 2 Configuration to allow an analysis to report on FileVault status.

+

This fixlet is always applicable on a Mac computer. Recommended usage is to have it apply at whatever frequency you would like FireVault information updated -- preferably waiting at least a couple of hours between applications.

+

It might make sense to have two actions for this fixlet -- one that applies infrequently on all computers and one that applies frequently on computers that are less than a couple of days old.

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + = "10.7" as version]]> + uptime of operating system) of folder "FileVault" of folder "__Global" of data folder of client))*/]]> + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + "{parameter "storage"}/Status.txt" +fdesetup list > "{parameter "storage"}/Users.txt" +echo "Personal Key Exists: $(fdesetup haspersonalrecoverykey)" > "{parameter "storage"}/RecoverySettings.txt" +echo "Institutional Key Exists: $(fdesetup hasinstitutionalrecoverykey)" >> "{parameter "storage"}/RecoverySettings.txt" + +_end_ + +move __createfile run.sh + +wait bash run.sh 2>&1 "{folder "FileVault" of folder "__Global" of data folder of client}/ConfigurationProbe.txt"]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes new file mode 100644 index 000000000..092a741d2 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes @@ -0,0 +1,50 @@ + + + + + Invoke - FileVault 2 Directory Services Sync - Mac + This fixlet causes the Mac to sync accounts with directory services.

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

]]> + booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry + = "10.7"]]> + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +delete __createfile +delete run.sh + +createfile until _end_ +#!/bin/bash + +fdesetup sync + +_end_ + +move __createfile run.sh + +wait bash run.sh + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes new file mode 100644 index 000000000..bfcb31903 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes @@ -0,0 +1,86 @@ + + + + + Invoke - FileVault 2 Encrypt System Volume - Mac + This fixlet will enable FileVault on the system volume.

+

For machines running Mountain Lion and earlier the prompt to enable FileVault will happen at the next user's logout.

+

For machines running Yosemite and newer the prompt to enable FileVault will happen at the next login OR logout.

+

Note: You cannot encrypt a FileVault drive that is currently decrypting.

+

The Disk Encrypted relevance is thanks to JGStew: https://bigfix.me/relevance/details/3003654

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

]]> + = "10.7" as version]]> + /* Disk does not appear to be encrypted, thanks JGStew! */ not exists (booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry) + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to force the next user to enable FileVault 2 + + /dev/null + +fdesetup enable -defer "{pathname of data folder of client}/__Global/Filevault/Recovery.plist" {if (version of operating system >= "10.10" as version) then "-forceatlogin 10" else ""} + +_end_ + +move __createfile run.sh + +wait bash run.sh]]> + + + + + Click + here + to specify which user you would like to enable FileVault 2 + + /dev/null + +fdesetup enable -user "{parameter "User Name"}" -defer "/Library/Application Support/Bigfix/BES Agent/__BESData/__Global/FilevaultRecovery.plist" {if (version of operating system >= "10.10" as version) then "-forceatlogin 10" else ""} + +_end_ + +move __createfile run.sh + +wait bash run.sh]]> + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes new file mode 100644 index 000000000..c8a83e29e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes @@ -0,0 +1,259 @@ + + + + + Invoke - FileVault 2 Encryption Status Probe - Mac + This fixlet probes the FileVault provider for the current status of FileVault encryption on the system

+

This fixlet is always applicable on a Mac computer. Recommended usage is to have it apply at whatever frequency you would like FireVault information updated -- preferably waiting at least a couple of hours between applications.

+

It might make sense to have two actions for this fixlet -- one that applies infrequently on all computers and one that applies frequently on computers that are less than a couple of days old.

+

Information on using this content is availabe here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + = "10.7" as version]]> + uptime of operating system) of folder "FileVault" of folder "__Global" of data folder of client)) */]]> + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + "$CORESTORAGESTATUS" 2>&1 + + # If the Mac is running 10.7 or higher, but the boot volume + # is not a CoreStorage volume, the following message is + # displayed without quotes: + # + # "FileVault 2 Encryption Not Enabled" + + if grep -iE '/ is not a CoreStorage disk' "$CORESTORAGESTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Not Enabled" + rm -f "$CORESTORAGESTATUS" + exit 0 + fi + + # If the Mac is running 10.7 or higher and the boot volume + # is a CoreStorage volume, the script then checks to see if + # the machine is encrypted, encrypting, or decrypting. + # + # If encrypted, the following message is + # displayed without quotes: + # "FileVault 2 Encryption Complete" + # + # If encrypting, the following message is + # displayed without quotes: + # "FileVault 2 Encryption Proceeding." + # How much has been encrypted of of the total + # amount of space is also displayed. If the + # amount of encryption is for some reason not + # known, the following message is + # displayed without quotes: + # "FileVault 2 Encryption Status Unknown. Please check." + # + # If decrypting, the following message is + # displayed without quotes: + # "FileVault 2 Decryption Proceeding" + # How much has been decrypted of of the total + # amount of space is also displayed + # + # If fully decrypted, the following message is + # displayed without quotes: + # "FileVault 2 Decryption Complete" + # + + # Get the Logical Volume UUID (aka "UUID" in diskutil cs info) + # for the boot drive's CoreStorage volume. + + LV_UUID=`diskutil cs info / | awk '/UUID/ {{print $2;exit}'` + + # Get the Logical Volume Family UUID (aka "Parent LVF UUID" in diskutil cs info) + # for the boot drive's CoreStorage volume. + + LV_FAMILY_UUID=`diskutil cs info / | awk '/Parent LVF UUID/ {{print $4;exit}'` + + CONTEXT=`diskutil cs list $LV_FAMILY_UUID | awk '/Encryption Context/ {{print $3;exit}'` + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -eq 7 || ${{osvers_minor} -eq 8 ]]; then + CONVERTED=`diskutil cs list $LV_UUID | awk '/Size \(Converted\)/ {{print $5,$6;exit}'` + fi + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 9 ]]; then + CONVERTED=`diskutil cs list $LV_UUID | awk '/Conversion Progress/ {{print $3;exit}'` + fi + + ENCRYPTIONEXTENTS=`diskutil cs list $LV_FAMILY_UUID | awk '/Has Encrypted Extents/ {{print $4;exit}'` + ENCRYPTION=`diskutil cs list $LV_FAMILY_UUID | awk '/Encryption Type/ {{print $3;exit}'` + SIZE=`diskutil cs list $LV_UUID | awk '/Size \(Total\)/ {{print $5,$6;exit}'` + + # This section does 10.7-specific checking of the Mac's + # FileVault 2 status + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -eq 7 ]]; then + if [ "$CONTEXT" = "Present" ]; then + if [ "$ENCRYPTION" = "AES-XTS" ]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {{print $3;exit}' > "$ENCRYPTSTATUS" + if grep -iE 'Complete' "$ENCRYPTSTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Complete" + else + if grep -iE 'Converting' "$ENCRYPTSTATUS" 1>/dev/null; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'Forward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" + else + echo "FileVault 2 Encryption Status Unknown. Please check." + fi + fi + fi + else + if [ "$ENCRYPTION" = "None" ]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'Backward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" + elif grep -iE '-none-' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Completed" + fi + fi + fi + fi + fi + fi + + + + # This section does checking of the Mac's FileVault 2 status + # on 10.8.x through 10.10.x + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 8 ]] && [[ ${{osvers_minor} -lt 11 ]]; then + if [[ "$ENCRYPTIONEXTENTS" = "No" ]]; then + echo "FileVault 2 Encryption Not Enabled" + elif [[ "$ENCRYPTIONEXTENTS" = "Yes" ]]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Fully Secure/ {{print $3;exit}' > "$ENCRYPTSTATUS" + if grep -iE 'Yes' "$ENCRYPTSTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Complete" + else + if grep -iE 'No' "$ENCRYPTSTATUS" 1>/dev/null; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'forward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" + else + if grep -iE 'backward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" + elif grep -iE 'none' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Completed" + fi + fi + fi + fi + fi + fi + + # This section does checking of the Mac's FileVault 2 status + # on 10.11.x and higher + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 11 ]]; then + if [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {{print $3;exit}') == "" ]]; then + echo "FileVault 2 Encryption Not Enabled" + elif [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {{print $3;exit}') == "Complete" ]]; then + echo "FileVault 2 Decryption Completed" + elif [[ "$ENCRYPTION" = "AES-XTS" ]]; then + diskutil cs list $LV_FAMILY_UUID | awk '/High Level Queries/ {{print $4,$5;exit}' > "$ENCRYPTSTATUS" + if grep -iE 'Fully Secure' "$ENCRYPTSTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Complete" + else + if grep -iE 'Not Fully' "$ENCRYPTSTATUS" 1>/dev/null; then + if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $4;exit}') != "" ]]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {{print $4;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'forward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" + elif grep -iE 'backward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" + fi + elif [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $4;exit}') == "" ]]; then + if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $3;exit}') == "Complete" ]]; then + echo "FileVault 2 Decryption Completed" + fi + fi + fi + fi + fi +fi + +# Remove the temp files created during the script + +#if [ -f "$CORESTORAGESTATUS" ]; then +# rm -f "$CORESTORAGESTATUS" +#fi + +#if [ -f "$ENCRYPTSTATUS" ]; then +# rm -f "$ENCRYPTSTATUS" +#fi + +#if [ -f "$ENCRYPTDIRECTION" ]; then +# rm -f "$ENCRYPTDIRECTION" +#fi + +exit 0 + +_end_ + +move __createfile run.sh + + + +wait bash run.sh 2>&1 "/Library/Application Support/Bigfix/BES Agent/__BESData/__Global/FileVault/StatusProbe.txt"]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes b/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes new file mode 100644 index 000000000..306ddfa88 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes @@ -0,0 +1,82 @@ + + + + + Reset a user's password on macOS (10.13 and up) +

+
+

+

+

+
+


+

+

Important Notes

+
    +
  • +
    You must enter a password in order to take an action
    +
  • +
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> + mac of operating system + = "10.13.0"]]> + = number of local users whose (user id of it >= 501)]]> + 2019-10-01 + + bigfixme-added-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-modification-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-keywords + user, net.exe, secure parameter, password + + + x-fixlet-modification-time + Tue, 01 Oct 2019 19:12:08 +0000 + + BESC + + + + Change + &nbsp;user's password + + action parameter query "username" with description "Please specify the name of an existing admin account" +action parameter query "username2" with description "Please specify the name of the user whose password you'd like to change." + +delete __createfile +delete resetpw.sh +createfile until EOF + +sysadminctl -resetPasswordFor {parameter "username2"} -newPassword {parameter "secret2"} -adminUser {parameter "username"} -adminPassword {parameter "secret"} + +EOF + +move __createfile resetpw.sh +wait bash resetpw.sh + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes b/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes new file mode 100644 index 000000000..505f5f7b2 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes @@ -0,0 +1,121 @@ + + + + + Run softwareupdate (Mac) + +
+

This action runs softwareupdate on target macOS machine. Supplied username and password _must_ be for a user with a secure token.

+

If supplied account does not have a secure token, fixlet will exit with exit code 30.

+
]]> + mac of operating system + Internal + 2024-05-14 + + parametermetadatatag + { "username": { "Name": "adminUser", "Title": "User:", "Description": "Enter a username that has a secure token", "UIType": "Textbox", "Required":"1" }, "oPassword": { "Name": "adminUserPassword", "Title": "Password:", "Description": "Enter the password of a user with a secure token", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password" }, "flags": { "Name": "commands", "Title": "Arguments: ", "Description": "Specify arguments for softwareupdate", "UIType": "Select", "ValueType": "specified", "Required":"1", "Values": ["--download", "--install"] }, "subFlags": { "Name": "subcommands", "Title": "Additional arguments: ", "Description": "Modify the behavior of the selected action", "UIType": "select", "ValueType": "specified", "Parent": "commands", "Values":[ {"key":"--all", "value":"--all", "parentValue":"--install"}, {"key":"--recommended", "value":"--recommended", "parentValue":"--install"}, {"key":"--os-only", "value":"--os-only", "parentValue":"--install"}, {"key":"--safari-only", "value":"--safari-only", "parentValue":"--install"}, {"key":"--all", "value":"--all", "parentValue":"--download"}, {"key":"--recommended", "value":"--recommended", "parentValue":"--download"}, {"key":"--os-only", "value":"--os-only", "parentValue":"--download"}, {"key":"--safari-only", "value":"--safari-only", "parentValue":"--download"} ] }, "scan": { "Name": "scan", "Title": "Scan: ", "Description": "Specify if softwareupdate should scan for updates before running", "UIType": "Select", "ValueType": "specified", "Values":[ {"key":"Yes", "value":""}, {"key":"No", "value":"--no-scan"} ] }, "reboot": { "Name": "restart", "Title": "Restart automatically: ", "Description": "Select whether or not to automatically restart once action is complete", "UIType": "select", "ValueType": "specified", "Parent": "commands", "Values":[ {"key":"Yes", "value":"--restart", "parentValue":"--install"}, {"key":"No", "value":"", "parentValue":"--install"}, {"key":"<No reboot options for --download>", "value":"", "parentValue":"--download"} ] } } + + + x-fixlet-modification-time + Mon, 03 Jun 2024 19:04:30 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +parameter "updateCommand" = "softwareupdate {parameter "commands"} {parameter "subcommands"} {parameter "restart"} {parameter "scan"} --user {parameter "adminUser"} --stdinpass --agree-to-license --force" + +delete __createfile +delete "__Download/{parameter "scriptName"}" +createfile until _end_ +#!/bin/zsh +echo "Running: {parameter "updateCommand"}" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +adminUser="{parameter "adminUser" of action}" +precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) +if [[ "$precheck" == *"ENABLED"* ]]; then + echo "Provided user $adminUser has a secure token. Continuing..." >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 0 +elif [[ "$precheck" == *"DISABLED"* ]]; then + echo "Provided user $adminUser does not have a secure token" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 30 +else + echo "Error checking $adminUser secure token status" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 31 +fi +_end_ +copy "__createfile" "__Download/{parameter "scriptName"}" +wait chmod +x "__Download/{parameter "scriptName"}" +wait /bin/zsh "__Download/{parameter "scriptName"}" +parameter "error" = "{exit code of action}" +delete __createfile +delete "__Download/{parameter "scriptName"}" + +if {parameter "error" is "0"} +run bash -c "echo '{parameter "adminUserPassword"}' | {parameter "updateCommand"} 2>&1 | awk '!/Downloading:/{{print}' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +parameter "error2" = "{exit code of action}" +wait sh -c "echo Return Code: {parameter "error2"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +endif + +if {parameter "error" != "0"} +wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +exit {parameter "error"} +endif + +exit {parameter "error2"} +]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes new file mode 100644 index 000000000..31294ba18 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes @@ -0,0 +1,39 @@ + + + + + SECURITY - Add IT Admin to Local Admin Group (MAC) + This fixlet will allow AD users to be administrators on the local machine for OSX. + mac of operating system + Internal + 2016-12-29 + + x-fixlet-modification-time + Mon, 16 Jan 2017 20:02:15 +0000 + + BESC + + + Click + here + to deploy this action. + + #!/bin/sh +# Enter your action script here +sudo dseditgroup -o edit -a "domain\group" -t group admin +sudo dseditgroup -o edit -a "domain\group" -t group admin +sudo dseditgroup -o edit -a "domain\group" -t group admin +sudo dseditgroup -o edit -a "domain\group" -t group admin + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes new file mode 100644 index 000000000..13b102e81 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes @@ -0,0 +1,37 @@ + + + + + SECURITY - Allow Password Changes (MAC) + Activates Keychain Sync with AD password + mac of operating system + Internal + 2017-01-10 + + x-fixlet-modification-time + Tue, 10 Jan 2017 22:34:21 +0000 + + BESC + + + Click + here + to deploy this action. + + #!/bin/sh +# Enter your action script here +sudo defaults write "/Users/*/Library/Preferences/com.apple.keychainaccess.plist" SyncLoginPassword - bool true + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes b/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes new file mode 100644 index 000000000..1b8302011 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes @@ -0,0 +1,68 @@ + + + + + Safari 6.1 - Update + + + + +
+

This update is recommended for all Safari users and includes several improvements to performance, usability, compatibility and security.

+
This fixlet will use the built in Apple Software Update tools to update Safari to version 6.1 on Mac OS X 10.7.5 and 10.8.5 based machines.  Access to the public Internet by each client is required for this fixlet to function.
+
+

CVE:

CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-2848, CVE-2013-5129, CVE-2013-5130, CVE-2013-5131
]]> + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + = "10.7.5" AND it as version < "10.8") OR (it as version >= "10.8.5" AND it as version < "10.9")) of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> + + Security Update + Apple + APPLE-SA-2013-10-22-2 + 2013-10-22 + CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-2848, CVE-2013-5129, CVE-2013-5130, CVE-2013-5131 + + x-fixlet-first-propagation + Thu, 18 Apr 2013 22:42:40 +0000 + + + x-fixlet-domain_attributes + PTCH Patch Apple Safari Application + + + x-fixlet-modification-time + Thu, 24 Oct 2013 13:20:38 +0000 + + BESC + + + Click + here + to deploy this action. + + = "10.7" as version AND system version < "10.8" as version} + wait sh -c "softwareupdate -i Safari6.1Lion-6.1" +endif + +if {system version >= "10.8" as version} + wait sh -c "softwareupdate -i Safari6.1MountainLion-6.1" +endif]]> + + + + Click + here + to view more information from Apple on this update. + + http://support.apple.com/kb/HT5701 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes new file mode 100644 index 000000000..b4da3345e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes @@ -0,0 +1,82 @@ + + + + + Security Update 2015-002 (10.10.2 Client) +

Security Update 2015-002 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

5.18 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + + Security Update + Apple + APPLE-SA-2015-03-09-3 + 2015-03-09 + Unspecified + CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + prefetch SecUpd2015-002Yosemite.dmg sha1:d37cdab99470650043fd479ed0bfc27181b260fe size:5433396 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-18425.20150309.B6D35/SecUpd2015-002Yosemite.dmg sha256:e213db40947392a046148d466b27105281b76f182eaee1ac116694824e3c4aa8 + +wait cp "{posix path of file "SecUpd2015-002Yosemite.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/SecUpd2015-002Yosemite" "/private/tmp/SecUpd2015-002Yosemite.dmg" + +wait rm -rf "/private/tmp/SecUpd2015-002Yosemite.dmg" + +wait cp -r "/Volumes/SecUpd2015-002Yosemite/SecUpd2015-002Yosemite.pkg" "/private/tmp/SecUpd2015-002Yosemite.pkg" + +wait /bin/bash -c "devname=`df | grep SecUpd2015-002Yosemite | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/SecUpd2015-002Yosemite.pkg" -target / + +action requires restart + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + wait softwareupdate -i "Security Update 2015-002-1.0" + +action requires restart + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes new file mode 100644 index 000000000..9d00f3f89 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes @@ -0,0 +1,50 @@ + + + + + Security Update 2015-002 (10.10.2 Client) - Audit +

Security Update 2015-002 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

5.18 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + + Security Update + Apple + APPLE-SA-2015-03-09-3 + 2015-03-09 + Unspecified + CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes new file mode 100644 index 000000000..35a402df7 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes @@ -0,0 +1,50 @@ + + + + + Security Update 2015-003 (10.10.2 Client) - Audit +

Security Update 2015-003 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

5.29 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1061
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + + Security Update + Apple + N/A + 2015-03-19 + Unspecified + CVE-2015-1065, CVE-2015-1061 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes new file mode 100644 index 000000000..54a8df919 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes @@ -0,0 +1,87 @@ + + + + + Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) +

Security Update 2015-003 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

4.95 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1061
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as integer) then false else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) < ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as string) then true else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) > ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as string) then false else if ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") as integer)) < ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513") as integer)) then true else false) AND (if ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as integer) > ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as integer) then true else if ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as integer) < ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as integer) then false else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) > ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as string) then true else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) < ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as string) then false else if ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") as integer)) > ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000") as integer)) then true else false)]]> + + Security Update + Apple + N/A + 2015-03-19 + Unspecified + CVE-2015-1065, CVE-2015-1061 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + = "9.2.4.2" as version)} + +prefetch SecUpd2015-003YosemiteCPU.dmg sha1:7226993d49b5393eeccb3226ddbd1b71599b2963 size:5190131 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-19686-20150319-5F671036-CDA1-11E4-81AB-C077A153B4CE/SecUpd2015-003YosemiteCPU.dmg sha256:1408845eed7bffad51413227e8bce87e863bd994b658c993c76846a23f69597a + +wait cp "{posix path of file "SecUpd2015-003YosemiteCPU.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/SecUpd2015-003YosemiteCPU" "/private/tmp/SecUpd2015-003YosemiteCPU.dmg" + +wait rm -rf "/private/tmp/SecUpd2015-003YosemiteCPU.dmg" + +wait cp -r "/Volumes/SecUpd2015-003YosemiteCPU/SecUpd2015-003YosemiteCPU.pkg" "/private/tmp/SecUpd2015-003YosemiteCPU.pkg" + +wait /bin/bash -c "devname=`df | grep SecUpd2015-003YosemiteCPU | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/SecUpd2015-003YosemiteCPU.pkg" -target / + +action requires restart]]> + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + = "9.2.4.2" as version)} + +wait softwareupdate -i "Security Update 2015-003-1.0" + +action requires restart]]> + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes b/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes new file mode 100644 index 000000000..325bfe6b6 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes @@ -0,0 +1,54 @@ + + + + + Set Root Password to resolve vuln in High Sierra - Apple Mac OS X +  

+

This should resolve a discovered issue with Apple Mac OS High Sierra.

+

 

]]> + mac of operating system + = "10.13"]]> + not exists strings 0 whose(length of it = 8) of arrays "passwd" of dictionaries of files "/var/db/dslocal/nodes/Default/users/root.plist" + TRUE /* not exists settings "_RootPasswordSetRandom" of client */ + Internal + jgstew + 2017-11-28 + + x-fixlet-modification-time + Wed, 29 Nov 2017 04:58:53 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes b/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes new file mode 100644 index 000000000..2a6c9265d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes @@ -0,0 +1,53 @@ + + + + + Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac + This Fixlet prompts the TEM console for a Prefix and Suffix to use in the computer name.  It then sets the sharing, host and local subnet names to [Prefix]-serialnumber-[Suffix]. If you leave the Prefix or Suffix blank it will skip the related hyphen.

+

By making these names all match computers should appear in SEP and Secunia using their Sharing Name.

]]> + name of operating system = "Mac OS X" + = "10.5" as version]]> + Internal + 2012-04-06 + + x-fixlet-modification-time + Thu, 24 Oct 2013 14:23:02 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "Prefix_Name" with description "Please enter the name Prefix (optional)" +action parameter query "Suffix_Name" with description "Please enter the name Suffix (optional)" + +parameter "compName" = "{string "IOPlatformSerialNumber" of dictionary of service plane of iokit registry}" + +if {not (parameter "Prefix_Name" of action = "")} + parameter "compName2" = "{parameter "Prefix_Name" of action}-{parameter "compName"}" +else + parameter "compName2" = "{parameter "compName"}" +endif +if {not (parameter "Suffix_Name" of action = "")} + parameter "compName3" = "{parameter "compName3"}-{parameter "Suffix_Name" of action}" +else + parameter "compName3" = "{parameter "compName2"}" +endif + +wait sh -c "scutil --set ComputerName {parameter "compName3"}" +wait sh -c "scutil --set HostName {parameter "compName3"}" +wait sh -c "scutil --set LocalHostName {parameter "compName3"}" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes new file mode 100644 index 000000000..fb824fe33 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes @@ -0,0 +1,44 @@ + + + + + System Configuration: ALF Add Application (Promts) to Application Level Firewall - Mac OS X + This task adds a trusted application and turns on the Application Level Firewall included with Mac OS X.

+

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 15:57:29 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "apppath" with description "Enter path of application" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes new file mode 100644 index 000000000..ed25d5cf7 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes @@ -0,0 +1,43 @@ + + + + + System Configuration: ALF Add Pharos Popup to Application Level Firewall - Mac OS X + This task adds the Pharos Popup to trusted applications and turns on the Application Level Firewall included with Mac OS X.

+

The relevance checks for the bundle identifier in the ALF preference file.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "state" of dictionaries whose (string "bundleid" of it = "com.pharos.popup") of values of array "applications" of dictionaries of it = 0) /*True if com.pharos.popup is not added as allowed app*/ + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:30:30 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes new file mode 100644 index 000000000..105ad18b0 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes @@ -0,0 +1,44 @@ + + + + + System Configuration: ALF Block Application (Promts) from Application Level Firewall - Mac OS X + This task blocks an application and turns on the Application Level Firewall included with Mac OS X.

+

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:32:52 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "apppath" with description "Enter path of application" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes new file mode 100644 index 000000000..c9dbf7e00 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes @@ -0,0 +1,43 @@ + + + + + System Configuration: ALF Block Pharos Popup with Application Level Firewall - Mac OS X + This task adds the Pharos Popup to blocked applications and turns on the Application Level Firewall included with Mac OS X.

+

The relevance checks for the bundle identifier in the ALF preference file.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "state" of dictionaries whose (string "bundleid" of it = "com.pharos.popup") of values of array "applications" of dictionaries of it = 2) /*True for systems that are not blocking (2) com.pharos.popup*/ + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:28:39 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes new file mode 100644 index 000000000..84edae86e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Disable Application Level Firewall - Mac OS X + This task turns off the Application Level Firewall included with Mac OS X.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "globalstate" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 15:27:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes new file mode 100644 index 000000000..612ff30f3 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Disable Logging for Application Level Firewall - Mac OS X + This task turns off the logging for the Application Level Firewall included with Mac OS X.

+

By default logging is enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingenabled" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:55:22 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes new file mode 100644 index 000000000..2631d9c02 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Disable Signed Apps in Application Level Firewall - Mac OS X + This task blocks Signed Apps from opening listening ports for the Application Level Firewall included with Mac OS X.

+

The default mode for Signed Apps is Enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:11:59 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes new file mode 100644 index 000000000..a462e7e5d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Disable Stealth Mode for Application Level Firewall - Mac OS X + This task turns off the Stealth Mode for the Application Level Firewall included with Mac OS X.

+

The default stealth mode is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "stealthenabled" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:37:29 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes new file mode 100644 index 000000000..808eeb075 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Enable Logging for Application Level Firewall - Mac OS X + This task turns on the logging for the Application Level Firewall included with Mac OS X.

+

By default logging is enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:54:10 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes new file mode 100644 index 000000000..d5b9e5969 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Enable Signed Apps in Application Level Firewall - Mac OS X + This task enables Signed Apps to open listening ports for the Application Level Firewall included with Mac OS X.

+

The default mode for Signed Apps is Enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:11:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes new file mode 100644 index 000000000..abf0e9309 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Enable Signed Apps in Application Level Firewall - Mac OS X + This task enables Signed Apps to open listening ports for the Application Level Firewall included with Mac OS X.

+

The default mode for Signed Apps is Enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:11:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes new file mode 100644 index 000000000..8ec20738b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Enable Stealth Mode for Application Level Firewall - Mac OS X + This task turns on the Stealth Mode for the Application Level Firewall included with Mac OS X.

+

The default stealth mode is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "stealthenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:36:55 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes new file mode 100644 index 000000000..392492bdc --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes @@ -0,0 +1,43 @@ + + + + + System Configuration: ALF Remove Application (Promts) from Application Level Firewall - Mac OS X + This task removes an application and turns on the Application Level Firewall included with Mac OS X.

+

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 15:57:10 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "apppath" with description "Enter path of application" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --remove "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes new file mode 100644 index 000000000..6a11ecc40 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes @@ -0,0 +1,42 @@ + + + + + System Configuration: ALF Remove Pharos Popup from Application Level Firewall - Mac OS X + This task removes the Pharos Popup from trusted applications and turns on the Application Level Firewall included with Mac OS X.

+

The relevance checks for the bundle identifier in the ALF preference file.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" contains "com.pharos.popup" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:22:47 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --remove "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes new file mode 100644 index 000000000..ec8175d75 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Set Log Level to "brief" for Application Level Firewall - Mac OS X + This task sets logging to "brief" for the Application Level Firewall included with Mac OS X.

+

By default logging is set to "throttled" for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + = "10.9" as version]]> + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:37:13 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt brief + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes new file mode 100644 index 000000000..83a80c5e3 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Set Log Level to "detail" for Application Level Firewall - Mac OS X + This task sets logging to "detail" for the Application Level Firewall included with Mac OS X.

+

By default logging is set to "throttled" for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + = "10.9" as version]]> + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 2) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:36:54 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt detail + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes new file mode 100644 index 000000000..64527e595 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: ALF Set Log Level to "throttled" for Application Level Firewall - Mac OS X + This task sets logging to "throttled" for the Application Level Firewall included with Mac OS X.

+

By default logging is set to "throttled" for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + = "10.9" as version]]> + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:37:45 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt throttled + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes new file mode 100644 index 000000000..35ca7fadd --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Accept EULA for Installed Version of Xcode - Mac OS X + Perform the function of `sudo xcodebuild -license` to accept the license for the currently installed version of Xcode and the current license agreement.

]]> + mac of operating system + exists file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist" whose(exists string "licenseID" of dictionary of it) + exists file "/Applications/Xcode.app/Contents/version.plist" whose(exists string "CFBundleShortVersionString" of dictionary of it) + not exists file "/Library/Preferences/com.apple.dt.Xcode.plist" whose(((string "IDELastGMLicenseAgreedTo" of dictionary of it) = (string "licenseID" of dictionary of file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist")) AND ((string "IDEXcodeVersionForAgreedToGMLicense" of dictionary of it) = (string "CFBundleShortVersionString" of dictionary of file "/Applications/Xcode.app/Contents/version.plist"))) + = "5.0" as version)]]> + Software Configuration + Internal + mah60 + 2014-04-08 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:40:39 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/bin/defaults write "/Library/Preferences/com.apple.dt.Xcode.plist" IDELastGMLicenseAgreedTo -string "{string "licenseID" of dictionary of file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist"}" +wait /usr/bin/defaults write "/Library/Preferences/com.apple.dt.Xcode.plist" IDEXcodeVersionForAgreedToGMLicense -string "{string "CFBundleShortVersionString" of dictionary of file "/Applications/Xcode.app/Contents/version.plist"}" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes new file mode 100644 index 000000000..a1f3c77d6 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Add Everyone to the Xcode Developer Group - Mac OS X + This fixlet adds the _everyone group, of which all users are a member of, as a nested group of the _developer group.

+

This grants access for all users of the system to fully utilize the Xcode Developer Tools without the need to be an admin on the system.

]]> + mac of operating system + exists file "/usr/sbin/dseditgroup" + not exists file "/var/db/dslocal/nodes/Default/groups/_developer.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + System Configuration + SysMan + mah60 + 2014-04-14 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:38:13 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group developer + +wait /usr/sbin/DevToolsSecurity -enable + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes new file mode 100644 index 000000000..66d948529 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: Allow Managed Users to Add or Delete Printers - Mac OS X + In Mac OS X 10.5.7 or later, access to add or delete network printers on a client computer is controlled by membership in the lpadmin group. You can control the ability of managed user accounts to add and delete printers by controlling the membership of this group.

+

This fixlet adds the "everyone" group, of which all users are a member of, as a nested group of the "_lpadmin" group. This grants access for all users of the system to add, edit, and delete printers as well as manage other aspects of the CUPS printing system.

+

Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers - http://support.apple.com/kb/HT3511

+

This task is applicable on Mac OS X 10.5.7 or later.

]]> + mac of operating system + exists file "/usr/sbin/dseditgroup" + not exists file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + = "10.5.7"]]> + System Configuration + SysMan + rzm102; mah60 + 2014-04-14 + + x-fixlet-modification-time + Wed, 16 Apr 2014 19:30:36 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes new file mode 100644 index 000000000..cceb1e930 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes @@ -0,0 +1,39 @@ + + + + + System Configuration: Allow Managed Users to Add or Delete Printers - Mac OS X + In Mac OS X 10.5.7 or later, access to add or delete network printers on a client computer is controlled by membership in the lpadmin group. You can control the ability of managed user accounts to add and delete printers by controlling the membership of this group.

+

This fixlet adds the _everyone group, of which all users are a member of, as a nested group of the _lpadmin group. This grants access for all users of the system to add, edit, and delete local printers as well as manage other aspects of the CUPS printing system.

+

Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers - http://support.apple.com/kb/HT3511

]]> + mac of operating system + exists file "/usr/sbin/dseditgroup" + not exists file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + System Configuration + SysMan + rzm102; mah60 + 2014-04-14 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:43:38 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes new file mode 100644 index 000000000..75e5ea495 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: Always Show Scroll Bars + This task will enable OS X applications to always show their scroll bars (Always).

+

This changes the default behavior of only showing scroll bars while scrolling (WhenScrolling or Automatic)

+

This task is applicable on Mac OS X 10.8 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.8"]]> + not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (string "AppleShowScrollBars" of dictionary of it = "Always") + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 14:15:58 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here +wait /usr/bin/defaults write "/Library/Preferences/.GlobalPreferences.plist" AppleShowScrollBars -string "Always" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes new file mode 100644 index 000000000..297a1b97c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes @@ -0,0 +1,43 @@ + + + + + System Configuration: Disable BlueTooth Radio + Disable the BlueTooth radio on OS X.

+

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + not exists file "/Library/Preferences/com.apple.Bluetooth.plist" whose (boolean "ControllerPowerState" of dictionary of it = False) + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 13:41:03 +0000 + + BESC + + + Click + here + to deploy this action. + + // Disable power +wait defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -bool false +// Reload the daemon +wait launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist +wait launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes new file mode 100644 index 000000000..925d95509 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes @@ -0,0 +1,43 @@ + + + + + System Configuration: Disable PF Firewall + This fixlet removes the "-e" flag in the ProgramArguments of the /System/Library/LaunchDaemons/com.apple.pfctl.plist and runs the command to disable the pf firewall. +

This disables the pf firewall to start at system boot.

+

This fixlet is applicable on Mac OS X 10.9 or later.

]]> + mac of operating system + = "10.9"]]> + (exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist") + System Configuration + Internal + rzm102 + 2014-06-13 + + x-fixlet-modification-time + Fri, 13 Jun 2014 19:19:57 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here +wait bash -c "defaults write /System/Library/LaunchDaemons/com.apple.pfctl ProgramArguments '(pfctl, -f, /etc/pf.conf)'" +wait chmod 644 /System/Library/LaunchDaemons/com.apple.pfctl.plist +wait plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.pfctl.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes new file mode 100644 index 000000000..bad8a4905 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Disable Printer Sharing - Mac OS X + This fixlet will be relevant if printer sharing is enabled, and running this action will disable printer sharing.

+

System Preferences > Sharing > Printer Sharing

+

This fixlet is applicable on Mac OS X 10.6 or later.

]]> + mac of operating system + = "10.6"]]> + exists file "/etc/cups/cupsd.conf" whose (exists line whose (it contains "# Allow shared printing...") of it) + System Configuration + SysMan + mah60 + 2014-06-25 + + x-fixlet-modification-time + Fri, 14 Nov 2014 13:43:15 +0000 + + BESC + + + Click + here + to deploy this action. + + // Turn Off CUPS Printer Sharing Service +wait /usr/sbin/cupsctl --no-share-printers + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes new file mode 100644 index 000000000..4be8d173a --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Disable Wireless (Airport) Adapter + Disable the Wireless (Airport) radio on OS X. +

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.10"]]> + boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = True + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 14:00:24 +0000 + + BESC + + + Click + here + to deploy this action. + + // disable airport radio +wait networksetup -setairportpower airport off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes new file mode 100644 index 000000000..5e3162f6e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Enable AirDrop over Ethernet + This fixlet configures OS X to use AirDrop over Ethernet. +

The default behavior is to only allow AirDrop over Wi-Fi. This allows machines to also use Etherenet.

+

This fixlet is applicable on Mac OS X 10.8 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.8"]]> + not exists file "/Library/Preferences/com.apple.NetworkBrowser.plist" whose (boolean "BrowseAllInterfaces" of dictionary of it = True) + System Configuration + Internal + rzm102 + 2014-07-31 + + x-fixlet-modification-time + Thu, 31 Jul 2014 14:26:02 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/com.apple.NetworkBrowser" BrowseAllInterfaces -bool true + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes new file mode 100644 index 000000000..9a6e2a07c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Enable Apple Remote Desktop/Remote Management with Full Access for Admin Users - Mac OS X + This fixlet will ensure that the Remote Management (Apple Remote Desktop) service is enabled and that all local admin accounts on the system have full privileges.

+

System Preferences > Sharing > Remote Management

+

This fixlet is applicable on Mac OS X 10.7 or later.

]]> + mac of operating system + = "10.7"]]> + (not exists file "/private/etc/RemoteManagement.launchd") OR (exists items 0 whose (not exists strings whose (it = "-1073741569") of values of arrays "naprivs" of dictionary of it) of (it, strings of values of array "users" of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist", name of it) whose (preceding text of firsts "." of item 2 of it = item 1 of it) of files whose (name of it does not start with "_" AND name of it is not "root.plist") of folder "/var/db/dslocal/nodes/Default/users") OR (not exists file "/Library/Preferences/com.apple.RemoteManagement.plist" whose (exists boolean "ARD_AllLocalUsers" whose (it = False) of dictionary of it)) + Software Sharing + SysMan + mah60 + 2014-11-13 + + x-fixlet-modification-time + Fri, 14 Nov 2014 14:44:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -specifiedUsers +wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users {concatenation "," of strings whose (it is not "root") of values of array "users" of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist"} -privs -all -restart -agent -menu + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes new file mode 100644 index 000000000..e53d91f07 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes @@ -0,0 +1,39 @@ + + + + + System Configuration: Enable Apple Remote Desktop/Remote Management with Full Access for All Local Users - Mac OS X + This fixlet will ensure that the Remote Management (Apple Remote Desktop) service is enabled and that all local accounts on the system have full access and privileges.

+

System Preferences > Sharing > Remote Management

+

This fixlet is applicable on Mac OS X 10.7 or later.

]]> + mac of operating system + = "10.7"]]> + (not exists file "/private/etc/RemoteManagement.launchd") OR (not exists file "/Library/Preferences/com.apple.RemoteManagement.plist" whose (exists dictionary whose (exists boolean "ARD_AllLocalUsers" whose (it = True) of it AND exists integer "ARD_AllLocalUsersPrivs" whose (it = -1073741569) of it) of it)) + Software Sharing + SysMan + mah60 + 2014-11-13 + + x-fixlet-modification-time + Fri, 14 Nov 2014 13:50:15 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -allUsers -privs -all + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes new file mode 100644 index 000000000..1beed4596 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Enable Automatic Restart on Power Loss - Mac OS X + This fixlet enables the option for automatically restarting on power loss using the `systemsetup` utility.

+

System Preferences > Energy Saver > "Startup automatically after power failure"

]]> + mac of operating system + = "10.6"]]> + exists file "/usr/sbin/systemsetup" + not ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry + exists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" whose (exists dictionary "Custom Profile" of it whose (exists dictionary "AC Power" of it whose (exists boolean "Automatic Restart On Power Loss" whose ( it = True)))) + System Configuration + SysMan + mah60 + 2014-04-14 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:37:39 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/systemsetup -setrestartpowerfailure on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes new file mode 100644 index 000000000..819b3d8e5 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes @@ -0,0 +1,43 @@ + + + + + System Configuration: Enable BlueTooth Radio + Enable the BlueTooth radio on OS X.

+

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + not exists file "/Library/Preferences/com.apple.Bluetooth.plist" whose (boolean "ControllerPowerState" of dictionary of it = True) + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 13:40:39 +0000 + + BESC + + + Click + here + to deploy this action. + + // Disable power +wait defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -bool true +// Reload the daemon +wait launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist +wait launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes new file mode 100644 index 000000000..be490bcae --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes @@ -0,0 +1,44 @@ + + + + + System Configuration: Enable PF Firewall + This fixlet adds the "-e" flag to the ProgramArguments of the /System/Library/LaunchDaemons/com.apple.pfctl.plist. +

This  enables the pf firewall to start at system boot.

+

This fixlet is applicable on Mac OS X 10.9 or later.

+
WARNING: Enabling the pf firewall can lock you out of your system if it's not properly configured! Make sure you test this!
]]> + mac of operating system + = "10.9"]]> + not (exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist") + System Configuration + Internal + rzm102 + 2014-06-13 + + x-fixlet-modification-time + Fri, 13 Jun 2014 19:20:26 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here +wait bash -c "defaults write /System/Library/LaunchDaemons/com.apple.pfctl ProgramArguments '(pfctl, -f, /etc/pf.conf, -e)'" +wait chmod 644 /System/Library/LaunchDaemons/com.apple.pfctl.plist +wait plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.pfctl.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes new file mode 100644 index 000000000..45396b02f --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes @@ -0,0 +1,46 @@ + + + + + System Configuration: Enable Remote Login (SSH) for Admins - Mac OS X + This task will enable remote login (SSH) and grant access for all members of the "admin" group on the local system.

+

This task is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + exists file "/usr/sbin/dseditgroup" + exists file "/usr/sbin/systemsetup" + + System Configuration + SysMan + mah60 + 2014-04-16 + + x-fixlet-modification-time + Tue, 02 Dec 2014 13:36:25 +0000 + + BESC + + + Click + here + to deploy this action. + + // Modify SSH Access Group +wait /usr/sbin/dseditgroup -o create -r "Remote Login ACL" com.apple.access_ssh +wait /usr/sbin/dseditgroup -o edit -t group -a admin com.apple.access_ssh + +// Start SSH Service +wait /usr/sbin/systemsetup -setremotelogin on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes new file mode 100644 index 000000000..9956eeebd --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Enable USB SuperDrive on All Macs + This fixlet configures OS X nvram to allow the USB Superdrive to work on all hardware systems. +

This setting configures the nvram boot-args. Please be sure this does not overwrite other settings.

+

This fixlet is applicable on Mac OS X 10.7 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.7"]]> + not ((string of value of it whose ( key of it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry) = "mbasd=1") + System Configuration + Internal + rzm102 + 2014-07-31 + + x-fixlet-modification-time + Thu, 31 Jul 2014 14:43:13 +0000 + + BESC + + + Click + here + to deploy this action. + + wait nvram boot-args="mbasd=1" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes new file mode 100644 index 000000000..eaef16759 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes @@ -0,0 +1,40 @@ + + + + + System Configuration: Enable Wireless (Airport) Adapter + Enable the Wireless (Airport) radio on OS X. +

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.10"]]> + boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = False + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 14:00:46 +0000 + + BESC + + + Click + here + to deploy this action. + + // enable airport radio +wait networksetup -setairportpower airport on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes new file mode 100644 index 000000000..c2d1d046b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes @@ -0,0 +1,42 @@ + + + + + System Configuration: Expand Print Dialog Boxes + This fixlet expands the Print dialog boxes for OS X.

+

The expanded dialog boxes allow for additional options to be specified while printing.

+

This fixlet is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "PMPrintingExpandedStateForPrint" of dictionary of it = True)) OR (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "PMPrintingExpandedStateForPrint2" of dictionary of it = True)) + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 17:42:32 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/.GlobalPreferences.plist" PMPrintingExpandedStateForPrint -bool true +wait defaults write "/Library/Preferences/.GlobalPreferences.plist" PMPrintingExpandedStateForPrint2 -bool true + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes new file mode 100644 index 000000000..bf2edcb33 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes @@ -0,0 +1,42 @@ + + + + + System Configuration: Expand Save Dialog Boxes + This fixlet expands the Save dialog boxes for OS X.

+

The expanded dialog boxes allow for additional options to be specified while saving.

+

This fixlet is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "NSNavPanelExpandedStateForSaveMode" of dictionary of it = True)) OR (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "NSNavPanelExpandedStateForSaveMode2" of dictionary of it = True)) + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 17:28:45 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/.GlobalPreferences.plist" NSNavPanelExpandedStateForSaveMode -bool true +wait defaults write "/Library/Preferences/.GlobalPreferences.plist" NSNavPanelExpandedStateForSaveMode2 -bool true + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes new file mode 100644 index 000000000..adc7a441e --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes @@ -0,0 +1,178 @@ + + + + + System Configuration: Grant Temporary Admin Rights - macOS + This fixlet gives admin rights to a local user. After 30 minutes, a file is touched on the system to trigger a fixlet to remove admin rights. To allow users to elevate admin rights as needed, action this task against an automatic group. There is no end date on the task and it will be reapplicable and re-offered while the action is open.

+

To remove admin rights after 30 minutes, you must run the "System Configuration: Remove Temporary Admin Rights - macOS"

+

The status of the admin rights are reported through the analysis "Temporary Admin Privliges Report - macOS".

]]> + mac of operating system + not exists file "/Library/PSU/removeadmins" + Utilities + Internal + rzm102 + 2018-10-08 + + x-fixlet-modification-time + Tue, 09 Oct 2018 18:24:04 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes new file mode 100644 index 000000000..5dd992e30 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes @@ -0,0 +1,41 @@ + + + + + System Configuration: Quit Printer When Finished + This fixlet configures printers to auto-quit after printing.

+

The default behavior is to leave the printer window open when finished printing. This changes the default to quit the printer after finished. 

+

This fixlet is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + not exists file "/Library/Preferences/com.apple.print.PrintingPrefs.plist" whose (boolean "Quit When Finished" of dictionary of it = True) + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 18:06:48 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/com.apple.print.PrintingPrefs.plist" "Quit When Finished" -bool true + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes new file mode 100644 index 000000000..ad742d7c1 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes @@ -0,0 +1,249 @@ + + + + + System Configuration: Remove Temporary Admin Rights - macOS + This fixlet removes admin rights to a local user. It is relevant after 30 minutes when a file is touched on the system.

+

This task should remain open and running against the same automatic computer group as the Grant Temporary Admin Rights fixlet. Admin rights will only be removed after 30 minutes if this task is running.

+

When started, the task will ask for the username and encrypted password to ensure the local admin maintains the correct password.
Passwords need to be encrupted using the following code: https://github.com/brysontyrrell/EncryptedStrings

+

To offer admin rights, you must run the "System Configuration: Grant Temporary Admin Rights - macOS"

+

The status of the admin rights are reported through the analysis "Temporary Admin Privliges Report - macOS".

]]> + mac of operating system + exists file "/Library/PSU/removeadmins" + Utilities + Internal + rzm102 + 2018-10-08 + + x-fixlet-modification-time + Tue, 09 Oct 2018 18:23:18 +0000 + + BESC + + + Click + here + to deploy this action. + + >> DecryptString("Encrypted String", "Salt", "Passphrase")''' + p = subprocess.Popen(['/usr/bin/openssl', 'enc', '-aes256', '-d', '-a', '-A', '-S', salt, '-k', passphrase], stdin = subprocess.PIPE, stdout = subprocess.PIPE) + return p.communicate(inputString)[0] + +# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # +# APPLICATION +# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # + +if os.path.exists(workingDir + plistFile): + # remove user admin rights + user2Remove = plistlib.readPlist(workingDir + plistFile).User2Remove + subprocess.call(["dseditgroup", "-o", "edit", "-d", user2Remove, "-t", "user", "admin"]) + # add log entry + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - MakeMeAdmin Removed Admin Rights for {{}\r\n".format(datetime.now(), user2Remove)) + log.close() + print 'Revoked Admin Rights for ' + user2Remove + # compre prior to current admin lists + print 'Checking for newly created admin accounts...' + priorAdmins = plistlib.readPlist(workingDir + plistFile).CurrentAdminUsers + currentAdmins = grp.getgrnam('admin').gr_mem + newAdmins = set(currentAdmins).difference(set(priorAdmins)) + newAdm = '' + if not newAdmins: + print ' No New Accounts Found!' + # update compliancy plist + status = {{ 'Status':'Compliant'} + plistlib.writePlist(status, workingDir + statusFile) + else: + print ' New Admin Accounts Found!' + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - MakeMeAdmin Discovered New Admin Accounts: {{}\r\n".format(datetime.now(), list(newAdmins))) + log.close() + # update status plist + status = {{ 'Status':'Remediated', + 'newAdmins':'newAdmin Created', + 'orgAdmin':'orgAdmin OK'} + plistlib.writePlist(status, workingDir + statusFile) + newAdm = plistlib.readPlist(workingDir + statusFile).newAdmins + # loop through new admin accounts and remove admin rights + print ' Removing Admin Rights for New Admin Accounts...' + for user in newAdmins: + subprocess.call(["dseditgroup", "-o", "edit", "-d", user, "-t", "user", "admin"]) + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - MakeMeAdmin Removed Admin Rights for: {{}\r\n".format(datetime.now(), user)) + log.close() + print ' Removed Admin Rights for ' + user + time.sleep(1) + # check if organization admin(s) are valid + print 'Checking organizational admin passwords...' + for admin, admpass in orgAdmins.iteritems(): + # decrypt password + admpassDecrypted = DecryptString(admpass, salt, passphrase) + time.sleep(1) + valid = subprocess.call(["dscl", "/Local/Default", "-authonly", admin, admpassDecrypted]) + time.sleep(1) + if valid == 0: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - orgAdmin Password is Valid \r\n".format(datetime.now())) + log.close() + print 'Password for orgAdmin: ' + admin + ' is valid!' + else: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - orgAdmin Password is Invalid! \r\n".format(datetime.now())) + log.close() + result = subprocess.call(["dscl", ".", "passwd", "/Users/" + admin, admpassDecrypted]) + time.sleep(3) + print 'Password for orgAdmin: ' + admin + ' was invalid!' + if result == 0: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - orgAdmin Password Successfully Reset! \r\n".format(datetime.now())) + log.close() + print 'Password Successfully Reset for ' + admin + "!" + if not newAdm: + # update status plist + status = {{ 'Status':'Remediated', + 'newAdmins':'No newAdmins', + 'orgAdmin':'orgAdmin OK'} + plistlib.writePlist(status, workingDir + statusFile) + else: + # update status plist + status = {{ 'Status':'Remediated', + 'newAdmins':'newAdmin Created', + 'orgAdmin':'orgAdmin OK'} + plistlib.writePlist(status, workingDir + statusFile) + else: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - Error Resetting orgAdmin Password! \r\n".format(datetime.now())) + log.close() + print 'Error Resetting Password for ' + admin + "!" + if not newAdm: + # update status plist + status = {{ 'Status':'Violation', + 'newAdmins':'No newAdmins', + 'orgAdmin':'orgAdmin ERROR'} + plistlib.writePlist(status, workingDir + statusFile) + else: + # update status plist + status = {{ 'Status':'Violation', + 'newAdmins':'newAdmin Created', + 'orgAdmin':'orgAdmin ERROR'} + plistlib.writePlist(status, workingDir + statusFile) + os.remove(workingDir + plistFile) + +if os.path.exists('/Library/LaunchDaemons/' + launchdFile): + print 'Removing LaunchDaemon...' + os.remove('/Library/LaunchDaemons/' + launchdFile) +os.remove(workingDir + "removeadmins") +EOF + +folder create "/Library/PSU" +delete "/Library/PSU/removeAdmin.py" +move __createfile "/Library/PSU/removeAdmin.py" + +wait /usr/bin/python "/Library/PSU/removeAdmin.py" +delete "/Library/PSU/removeAdmin.py" +]]> + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes new file mode 100644 index 000000000..3b7ded496 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes @@ -0,0 +1,38 @@ + + + + + System Configuration: Set Time Zone to America/New_York - Mac OS X + This task will set the the system time zone to 'America/New_York' using the "systemsetup" utility.

+

System Preferences > Date & Time > Time Zone

]]> + mac of operating system + exists file "/usr/sbin/systemsetup" + not exists file "/etc/localtime" whose (sha1 of it = sha1 of file "/usr/share/zoneinfo/America/New_York") + System Configuration + SysMan + mah60 + 2014-04-22 + + x-fixlet-modification-time + Wed, 23 Apr 2014 13:31:21 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/systemsetup -settimezone "America/New_York" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes new file mode 100644 index 000000000..b7e26ed16 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes @@ -0,0 +1,72 @@ + + + + + UPDATE: Mac OS X 10.10.2 Available +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+

File Size:

528.65 MB
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + = "10.10.1" and it as version < "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> + Security Update + Apple + APPLE-SA-2015-01-27-3 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + prefetch OSXUpd10.10.2-10.10.2.dmg sha1:8b5b07e3ac81b101fb4cb89b0a9c6d8fe551d598 size:554331370 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-17158.20150127.ilntx/osxupd10.10.2.dmg sha256:08f02e87adfb06b73dcec6dc55e07e2e88cb661cfb5869d6664a93d2935ebef5 + +wait cp "{posix path of file "OSXUpd10.10.2-10.10.2.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/OSXUpd10.10.2" "/private/tmp/OSXUpd10.10.2-10.10.2.dmg" + +wait rm -rf "/private/tmp/OSXUpd10.10.2-10.10.2.dmg" + +wait cp -r "/Volumes/OSXUpd10.10.2/OSXUpd10.10.2.pkg" "/private/tmp/OSXUpd10.10.2.pkg" + +wait /bin/bash -c "devname=`df | grep OSXUpd10.10.2 | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/OSXUpd10.10.2.pkg" -target / + +action requires restart + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + wait softwareupdate -i OSXUpd10.10.2-10.10.2 + +action requires restart + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes new file mode 100644 index 000000000..dd6cc6a1d --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes @@ -0,0 +1,85 @@ + + + + + UPDATE: Mac OS X 10.10.2 Available (Combo) +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

801.35 MB
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + (exists string "ProductVersion" whose (it as string = "10.10") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + Security Update + Apple + APPLE-SA-2015-01-27-4 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + prefetch OSXUpdCombo10.10.2.dmg sha1:6B2465514B16FFD89D625A17C06F05D04760C130 size:840280237 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-17315.20150128.Cxx4r/OSXUpdCombo10.10.2.dmg sha256:DC5B256D4711FC54999EA050EF37D551071BB0322F79602E9576DF80F0C1C5B4 + +wait cp "{posix path of file "OSXUpdCombo10.10.2.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/OSXUpdCombo10.10.2" "/private/tmp/OSXUpdCombo10.10.2.dmg" + +wait rm -rf "/private/tmp/OSXUpdCombo10.10.2.dmg" + +wait cp -r "/Volumes/OSXUpdCombo10.10.2/OSXUpdCombo10.10.2.pkg" "/private/tmp/OSXUpdCombo10.10.2.pkg" + +wait /bin/bash -c "devname=`df | grep OSXUpdCombo10.10.2 | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/OSXUpdCombo10.10.2.pkg" -target / + +action requires restart + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + if{(string "ProductVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") = "10.10.1"} + wait softwareupdate -i OSXUpd10.10.2-10.10.2 +else + wait softwareupdate -i OSXUpdCombo10.10.2-10.10.2 +endif + +action requires restart + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes new file mode 100644 index 000000000..a10016055 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes @@ -0,0 +1,45 @@ + + + + + UPDATE: Mac OS X 10.10.2 Available (Combo) - Audit +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

+
+

File Size:

N/A
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + (exists string "ProductVersion" whose (it as string = "10.10") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + Security Update + Apple + APPLE-SA-2015-01-27-4 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes new file mode 100644 index 000000000..de5bb051a --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes @@ -0,0 +1,40 @@ + + + + + UPDATE: Mac OS X 10.10.2 Available - Audit +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

+

File Size:

N/A
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + = "10.10.1" and it as version < "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> + Security Update + Apple + APPLE-SA-2015-01-27-3 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes new file mode 100644 index 000000000..c8aca0bb9 --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes @@ -0,0 +1,55 @@ + + + + + UPDATE: macOS High Sierra 10.13.1 root login bug CVE-2017-13872 + Not impacted: macOS Sierra 10.12.6 and earlier
Impact: An attacker may be able to bypass administrator authentication without supplying the administrator’s password
Description: A logic error existed in the validation of credentials. This was addressed with improved credential validation.
CVE-2017-13872 ]]> + true + Patch + LBNL + 2017-11-29 + Critical + CVE-2017-13872 + + x-fixlet-product + macOS High Sierra 10.13 + + + x-fixlet-first-propagation + Thu, 02 Nov 2017 15:25:23 +0000 + + + x-fixlet-modification-time + Thu, 30 Nov 2017 01:52:40 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + #!/bin/bash + +softwareupdate -l +softwareupdate -i 'Security Update 2017-001- ' + + + + Click + here + &nbsp;to view more information from Apple on this update. + + https://support.apple.com/en-us/HT208315 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes b/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes new file mode 100644 index 000000000..4920ece3b --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes @@ -0,0 +1,27 @@ + + + + + Warning - Hosts files contains manually defined hosts - Win\Mac + This fixlet is relevant if there are manually defined hosts in the system's hosts file.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + windows of operating system or mac of operating system + 0]]> + Internal + 2016-04-23 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes b/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes new file mode 100644 index 000000000..855d3f70f --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes @@ -0,0 +1,68 @@ + + + + + set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation + This is a partial mitigation / workaround for CVE-2021-44228.

+

This will be relevant on ALL systems that do not have this environment variable set, regardless of presents of a vulnerable Log4J jar file or even an installed Java runtime. This fixlet doesn't mean that a system is vulnerable, only that it hasn't been mitigated from potential vulnerablity.

References:

+]]> + not exists unique values whose(it contains "true") of values of (variables ("LOG4J_FORMAT_MSG_NO_LOOKUPS") of it; (if (windows of operating system) then (x64 variables ("LOG4J_FORMAT_MSG_NO_LOOKUPS") of it) else NOTHINGS) ) of environments + Configuration + Internal + jgstew + 2021-12-14 + High + CVE-2021-44228 + + x-fixlet-modification-time + Tue, 14 Dec 2021 20:42:02 +0000 + + BESC + + + Click + here + to deploy this action. + + > /etc/profile' +endif + +endif + +if { unix of operating system } +if { exists folders "/etc/profile.d" AND not exists files "/etc/profile.d/CVE-2021-44228.sh" } + +wait /bin/sh -c 'echo -e "export LOG4J_FORMAT_MSG_NO_LOOKUPS=true" > /etc/profile.d/CVE-2021-44228.sh' + +endif +endif + +action requires restart]]> + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes b/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes new file mode 100644 index 000000000..d2a28b73c --- /dev/null +++ b/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes @@ -0,0 +1,53 @@ + + + + + write System Profiler info - Mac + + mac of operating system + not exists folders "/tmp/system_profiler/" + Internal + 2016-05-02 + + x-fixlet-modification-time + Tue, 03 May 2016 20:41:06 +0000 + + BESC + + + Click + here + to deploy this action. + + {parameter "target_folder"}_spOut_listDataTypes.txt" + +// dump system_profiler data into separate .txt files +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("system_profiler " & it & " > " & parameter "target_folder" & it & ".txt") of (it as trimmed string) whose(it as lowercase starts with "sp") of unique values of lines of files "_spOut_listDataTypes.txt" of folder ( parameter "target_folder" ) } +// dump system_profiler data into separate .xml files (plist format) +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("system_profiler -xml " & it & " > " & parameter "target_folder" & it & ".spx") of (it as trimmed string) whose(it as lowercase starts with "sp") of unique values of lines of files "_spOut_listDataTypes.txt" of folder ( parameter "target_folder" ) } + +// Delete empty txt files +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("rm -f '" & it & "'") of pathnames of files whose(0 = size of it AND name of it starts with "SP") of folder ( parameter "target_folder" ) } + +// Delete empty spx/xml/plist files +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("rm -f '" & it & "'") of pathnames of files whose(name of it as lowercase ends with ".spx" AND name of it starts with "SP" AND 0 = (number of values of arrays "_items" of dictionaries of values of arrays of it) of it) of folder ( parameter "target_folder" ) } +]]> + + + + diff --git a/Sites/Apple Management/Fixlets/digest.xml b/Sites/Apple Management/Fixlets/digest.xml new file mode 100644 index 000000000..b5146008a --- /dev/null +++ b/Sites/Apple Management/Fixlets/digest.xml @@ -0,0 +1,8 @@ + + + + = "7.2"]]> + + PT5M + PT5M + diff --git a/Sites/Apple Management/site.xml b/Sites/Apple Management/site.xml new file mode 100644 index 000000000..120d78c57 --- /dev/null +++ b/Sites/Apple Management/site.xml @@ -0,0 +1,13 @@ + + + + + = "10.0.2" or (version of client >= "9.5.17" and version of client < "10.0.0")) AND ((architecture of operating system = "arm64") OR (architecture of operating system = "x86_64"))) AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + ]]> + + diff --git a/Sites/Apple Management/siteConfig.xml b/Sites/Apple Management/siteConfig.xml new file mode 100644 index 000000000..435daf32d --- /dev/null +++ b/Sites/Apple Management/siteConfig.xml @@ -0,0 +1,6 @@ + + + Fixlets + NonClientFiles + OtherFiles + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes index 0e3a96fbf..666aa623f 100644 --- a/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes +++ b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes @@ -375,7 +375,7 @@ createfile until _END_ - BigFix Platform Health Check -- Disable FillDB Performance Logging (WILL RESTART FILLDB SERVICE) on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))} + BigFix Platform Health Check -- Disable FillDB Performance Logging (WILL RESTART FILLDB SERVICE) on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))} /* IS A WINDOWS ROOT SERVER */ (exists main gather service and not exists relay service AND windows of operating system) AND /* FILLDB PERF LOGGING IS ENABLED */ ( exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) AND (exists setting "__FillDB_Perf_Logs_Expiration" whose (now > value of it as time) of client) //* ====================================================================================================> diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes deleted file mode 100644 index 9e03e2631..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes +++ /dev/null @@ -1,179 +0,0 @@ - - - - - Configure BES Relay to Use Different Drive - Version >= 6.0 -
Note: Several DOS windows will appear while the BES Relay is configured. These DOS windows may remain in place for a short period of time while all the files in the relay cache are moved to their new location.

Note: Only the "wwwroot" BES Relay data folder will be moved, the BES Relay executable and other program files will remain at its current location.

Important Note: The first action will fail if the drive entered does not exist. The second action will fail if the new location of the BES Relay wwwroot folder is a subfolder of the current location. Both actions will fail if the new location of the BES Relay wwwroot folder already exists. Pathnames should not contain trailing backslashes or spaces. -]]> - = "6.0"]]> - NOT exists main gather service - exists (values "value" of keys "HKLM\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry as folder) - exists relay service OR exists main gather service - Optional - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Mon, 02 Oct 2006 16:24:04 +0000 - - - x-fixlet-domain_attributes - BES Component Relay - - BESC - - - Click - here - to configure the BES Relay to use a different drive. (The new location will be 'drive:\wwwroot') - - "{value "InboxLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry as string & "\GatherState.xml"}" -parameter "ServerRootDir"="{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" -// if BES Relay v8.0 and above -if {exists relay service AND ((it >= "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} -appendfile rmdir /S /Q "{parameter "ServerRootDir"}bfmirror\bfsites" -appendfile mkdir "{parameter "ServerRootDir"}bfmirror\bfsites" -appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}*.*" "{parameter "RelayDrive" of action}\wwwrootbes" -appendfile rmdir /s /q "{parameter "ServerRootDir"}" -Createfile until end-reg-edit-commands -REGEDIT4 -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] -"value"="{escape of (parameter "RelayDrive" of action & "\wwwrootbes\")}" -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server] -"wwwRootFolder"="{escape of (parameter "RelayDrive" of action & "\wwwrootbes\")}" -end-reg-edit-commands -// else if older than BES Relay v8.0 -else -appendfile rmdir /S /Q "{parameter "ServerRootDir"}\bfmirror\bfsites" -appendfile mkdir "{parameter "ServerRootDir"}\bfmirror\bfsites" -appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}\*.*" "{parameter "RelayDrive" of action}\wwwroot" -appendfile xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayDrive" of action}\wwwroot\bfmirror\bfsites" -appendfile xcopy /E /Y /I /Q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayDrive" of action}\wwwroot\bfmirror\downloads" -appendfile rmdir /s /q "{parameter "ServerRootDir"}" -appendfile rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -appendfile rmdir /s /q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -Createfile until end-reg-edit-commands -REGEDIT4 -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] -"value"="{escape of (parameter "RelayDrive" of action & "\wwwroot")}" -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] -"ContentLocation"="{escape of (parameter "RelayDrive" of action & "\wwwroot\bfmirror\bfsites")}" -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] -"DownloadContentLocation"="{escape of (parameter "RelayDrive" of action & "\wwwroot\bfmirror\downloads")}" -end-reg-edit-commands -endif -move __createfile changedrive.reg -appendfile regedit /s changedrive.reg -appendfile net start BESRelay -move __appendfile changedrive.bat -waithidden changedrive.bat -//wait 5 seconds -parameter "waitTime" = "{apparent registration server time}" -pause while {((apparent registration server time) - time (parameter "waitTime")) < 5*second} -// if for some reason the BES Relay hasn't started yet, fail here -continue if {exists running service "BESRelay"} -relay select -delete changedrive.reg -delete changedrive.bat]]> - - - - Click - here - to configure the BES Relay to use a custom location. - - "{value "InboxLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry as string & "\GatherState.xml"}" -parameter "ServerRootDir"="{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" -// if BES Relay v8.0 and above -if {exists relay service AND ((it >= "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} -appendfile rmdir /S /Q "{parameter "ServerRootDir"}bfmirror\bfsites" -appendfile mkdir "{parameter "ServerRootDir"}bfmirror\bfsites" -appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}*.*" "{parameter "RelayLocation" of action}" -appendfile rmdir /s /q "{parameter "ServerRootDir"}" -Createfile until end-reg-edit-commands -REGEDIT4 -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] -"value"="{escapes of (parameter "RelayLocation" of action & "\")}" -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server] -"wwwRootFolder"="{escapes of (parameter "RelayLocation" of action & "\")}" -end-reg-edit-commands -// else if older than BES Relay v8.0 -else -appendfile rmdir /S /Q "{parameter "ServerRootDir"}\bfmirror\bfsites" -appendfile mkdir "{parameter "ServerRootDir"}\bfmirror\bfsites" -appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}\*.*" "{parameter "RelayLocation" of action}" -appendfile xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayLocation" of action}\bfmirror\bfsites" -appendfile xcopy /E /Y /I /Q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayLocation" of action}\bfmirror\downloads" -appendfile rmdir /s /q "{parameter "ServerRootDir"}" -appendfile rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -appendfile rmdir /s /q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -Createfile until end-reg-edit-commands -REGEDIT4 -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] -"value"="{escapes of (parameter "RelayLocation" of action)}" -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] -"ContentLocation"="{escapes of (parameter "RelayLocation" of action & "\bfmirror\bfsites")}" -[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] -"DownloadContentLocation"="{escapes of (parameter "RelayLocation" of action & "\bfmirror\downloads")}" -end-reg-edit-commands -endif -move __createfile changedrive.reg -appendfile regedit /s changedrive.reg -appendfile net start BESRelay -move __appendfile changedrive.bat -waithidden changedrive.bat -//wait 5 seconds -parameter "waitTime" = "{apparent registration server time}" -pause while {((apparent registration server time) - time (parameter "waitTime")) < 5*second} -// if for some reason the BES Relay hasn't started yet, fail here -continue if {exists running service "BESRelay"} -relay select -delete changedrive.reg -delete changedrive.bat]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes deleted file mode 100644 index b2b3632ed..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes +++ /dev/null @@ -1,95 +0,0 @@ - - - - - Configure BES Relay to Use Drive with Largest Free Disk Space - Version >= 6.0 -
Note: Several DOS windows will appear while the BES Relay is configured. These DOS windows may remain in place for a short period of time while all the files in the relay cache are moved to their new location.

Note: To see which drive the BES Client has determined is the drive with the largest free disk space, please create a new retrieved property with the following relevance clause:

name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))

Note: Only the "wwwroot" BES Relay data folder will be moved, the BES Relay executable and other program files will remain at its current location. -]]> - NOT exists main gather service - exists relay service OR exists main gather service - = "5.1"]]> - exists setting "ChangeRelayCacheDrive" whose (value of it as lowercase = "yes") of client - - Optional - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Mon, 01 May 2006 16:30:49 +0000 - - - x-fixlet-domain_attributes - BES Component Relay - - BESC - - - Click - here - to configure the BES Relay to use the drive with the largest free disk space. (Use the default location 'drive:\wwwroot') - - = "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} -dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwrootbes" -dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwrootbes\")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server]" "wwwRootFolder"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwrootbes\")}" -else -dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwroot" -dos xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwroot\bfmirror\bfsites" -dos xcopy /E /Y /I /Q "{value of setting "_BESRelay_HTTPServer_ServerRootPath" of client & "\bfmirror\downloads"}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwroot\bfmirror\downloads" -dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" -dos rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -dos rmdir /s /q "{value of setting "_BESRelay_HTTPServer_ServerRootPath" of client & "\bfmirror\downloads"}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwroot")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "ContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwroot\bfmirror\bfsites")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "DownloadContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwroot\bfmirror\downloads")}" -endif -dos net start BESRelay]]> - - - - Click - here - to configure the BES Relay to use the drive with the largest free disk space. (Specify a custom location for the Relay files) - - = "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} -dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}" -dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server]" "wwwRootFolder"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\")}" -else -dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}" -dos xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}\bfmirror\bfsites" -dos xcopy /E /Y /I /Q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}\bfmirror\downloads" -dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" -dos rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -dos rmdir /s /q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action))}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "ContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\bfmirror\bfsites")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "DownloadContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\bfmirror\downloads")}" -endif -dos net start BESRelay]]> - - - From bec04389287c94d0ae187127f793d824ec719f14 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 17 Sep 2026 20:46:40 +0000 Subject: [PATCH 2/2] [bot] Apply pre-commit auto-fixes --- ...oftware Update Analysis 10.8 (2994639).bes | 52 +- ...oftware Update Analysis 10.9 (2994640).bes | 50 +- .../Analyses/Apple Time Machine (44).bes | 54 +- .../Analyses/Apple Time Machine (45).bes | 54 +- .../Analyses/Apple Update - Mac (2998548).bes | 48 +- .../Analyses/AppleEFINVRAM (2994552).bes | 60 +- ...ewall (AFL) Audit - Mac OS X (2994738).bes | 74 +- .../Configuration Profile Audit (2998505).bes | 54 +- ...Configuration Profiles - Mac (2998534).bes | 60 +- .../FileVault 2 - Audit - Mac (2998304).bes | 56 +- ... 2 - Recovery Password - Mac (2998121).bes | 50 +- ...yption Status all partitions (2998453).bes | 48 +- ...rewall - Configuration - Mac (2998305).bes | 54 +- .../Launch Daemons - Mac (2998254).bes | 50 +- ...cal Admin_User Audit - Apple (2994546).bes | 54 +- .../Analyses/Location - Mac (2998255).bes | 42 +- .../Analyses/Login Window - Mac (2998514).bes | 42 +- ...ac Global Preferences Report (2994696).bes | 62 +- ...twork Services (DHCP) Checks (2998169).bes | 52 +- .../Mac sudoers file Report (2994662).bes | 64 +- .../Operating System - Mac (2998515).bes | 60 +- .../PF Firewall Audit - Mac (2994651).bes | 74 +- .../Analyses/Printers - Mac (2998265).bes | 50 +- .../Pulse Secure Info - MacOS (2998612).bes | 54 +- ...ion and Licensing - Mac OS X (2994756).bes | 74 +- ...NetBoot) Analysis - Mac OS X (2998201).bes | 64 +- .../Analyses/Stability - Mac (2998354).bes | 52 +- ... Stability Report - Mac OS X (2994700).bes | 64 +- .../Analyses/TSM Backup Audit - Mac (63).bes | 72 +- ...min Privliges Report - macOS (2998600).bes | 50 +- .../Analyses/Time Machine - Mac (2998275).bes | 48 +- .../Fixlets/Analyses/VPN - Mac (2998280).bes | 46 +- ...acOS Intel-Only Applications (2998705).bes | 52 +- ...encrypted computer (APFS only) (24878).bes | 214 ++-- ... encrypted computer (HFS only) (24879).bes | 210 ++-- ... Acrobat Pro DC 15.x - Mac OS X (7613).bes | 170 +-- ...robat Reader DC 15.x - Mac OS X (7612).bes | 170 +-- ...te Desktop Client - 3.5.4 - Mac (3638).bes | 136 +-- ...mote Desktop Client - 3.7 - Mac (3639).bes | 134 +-- ...hernet Driver Repair - Mac OS X (9269).bes | 68 +- ...one to lpadmin group (printers) (2614).bes | 70 +- ...cal user account password - Mac (3671).bes | 156 +-- ...0.7_10.8 without PGP installed. (2569).bes | 436 +++---- ...Window - Clear LoginHook - Mac (23552).bes | 70 +- ...indow - Clear LogoutHook - Mac (23553).bes | 70 +- ...Policy - Set to Balanced - Mac (24028).bes | 86 +- ... Set to High Performance - Mac (24029).bes | 86 +- ...icy - Set to Power Saver - Mac (24030).bes | 86 +- ...Set to Presentation Mode - Mac (24031).bes | 86 +- ... - Wake on Lan - Disable - Mac (23798).bes | 74 +- ...g - Wake on Lan - Enable - Mac (23799).bes | 74 +- ...reless Adapter - Disable - Mac (24026).bes | 70 +- .../Fixlets/Delete user (macOS) (27359).bes | 168 +-- ...Escrow Bootstrap Token (macOS) (27380).bes | 244 ++-- .../Firmware Password for Mac OS X (5033).bes | 448 ++++---- .../Grant Secure Token (Mac) (27341).bes | 302 ++--- ...macOS Catalina_ update - MacOS (26653).bes | 86 +- ...atchman Shutdown Now - Win_Mac (23775).bes | 84 +- ...Watchman Standby Now - Win_Mac (23776).bes | 84 +- ... Software Update Install - Mac (24108).bes | 80 +- ...le Software Update Query - Mac (24109).bes | 70 +- ... Scan and Quarantine - Windows (20572).bes | 98 +- ... Scan and Quarantine - Windows (20573).bes | 124 +- ... Scan and Quarantine - Windows (20574).bes | 88 +- ...- Update Definitions - Windows (20575).bes | 78 +- ...iguration Profiles Probe - Mac (23809).bes | 80 +- ...lt 2 Configuration Probe - Mac (23583).bes | 122 +- ... Directory Services Sync - Mac (20607).bes | 100 +- ... 2 Encrypt System Volume - Mac (20608).bes | 172 +-- ... Encryption Status Probe - Mac (20577).bes | 518 ++++----- ...sword on macOS (10.13 and up) (26652).bes | 164 +-- .../Run softwareupdate (Mac) (27345).bes | 242 ++-- ...in to Local Admin Group (MAC) (23265).bes | 78 +- ...- Allow Password Changes (MAC) (23263).bes | 74 +- .../Fixlets/Safari 6.1 - Update (3636).bes | 136 +-- ...pdate 2015-002 (10.10.2 Client) (3986).bes | 164 +-- ...15-002 (10.10.2 Client) - Audit (3985).bes | 100 +- ...15-003 (10.10.2 Client) - Audit (4002).bes | 100 +- ...t, Early 2015 Mac) (Superseded) (4018).bes | 174 +-- ...n High Sierra - Apple Mac OS X (24858).bes | 108 +- ...REFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes | 106 +- ...ation Level Firewall - Mac OS X (3877).bes | 88 +- ...ation Level Firewall - Mac OS X (3878).bes | 86 +- ...ation Level Firewall - Mac OS X (3879).bes | 88 +- ...ation Level Firewall - Mac OS X (3880).bes | 86 +- ...ation Level Firewall - Mac OS X (3881).bes | 82 +- ...ation Level Firewall - Mac OS X (3882).bes | 82 +- ...ation Level Firewall - Mac OS X (3883).bes | 82 +- ...ation Level Firewall - Mac OS X (3884).bes | 82 +- ...ation Level Firewall - Mac OS X (3885).bes | 82 +- ...ation Level Firewall - Mac OS X (3886).bes | 82 +- ...ation Level Firewall - Mac OS X (3887).bes | 82 +- ...ation Level Firewall - Mac OS X (3888).bes | 82 +- ...ation Level Firewall - Mac OS X (3889).bes | 86 +- ...ation Level Firewall - Mac OS X (3890).bes | 84 +- ...ation Level Firewall - Mac OS X (3891).bes | 82 +- ...ation Level Firewall - Mac OS X (3892).bes | 82 +- ...ation Level Firewall - Mac OS X (3893).bes | 82 +- ...led Version of Xcode - Mac OS X (3770).bes | 80 +- ...code Developer Group - Mac OS X (3771).bes | 80 +- ... or Delete Printers - Mac OS X (20448).bes | 82 +- ...d or Delete Printers - Mac OS X (3772).bes | 78 +- ...ration_ Always Show Scroll Bars (3816).bes | 82 +- ...ation_ Disable BlueTooth Radio (21296).bes | 86 +- ...figuration_ Disable PF Firewall (4017).bes | 86 +- ...ble Printer Sharing - Mac OS X (20449).bes | 80 +- ...ble Wireless (Airport) Adapter (21298).bes | 80 +- ...n_ Enable AirDrop over Ethernet (3821).bes | 80 +- ...cess for Admin Users - Mac OS X (3923).bes | 80 +- ... for All Local Users - Mac OS X (3921).bes | 78 +- ...estart on Power Loss - Mac OS X (3773).bes | 80 +- ...ration_ Enable BlueTooth Radio (21297).bes | 86 +- ...nfiguration_ Enable PF Firewall (4016).bes | 88 +- ...gin (SSH) for Admins - Mac OS X (3980).bes | 92 +- ...able USB SuperDrive on All Macs (3822).bes | 80 +- ...ble Wireless (Airport) Adapter (21299).bes | 80 +- ...tion_ Expand Print Dialog Boxes (3819).bes | 84 +- ...ation_ Expand Save Dialog Boxes (3818).bes | 84 +- ...Temporary Admin Rights - macOS (26654).bes | 356 +++--- ...ion_ Quit Printer When Finished (3820).bes | 82 +- ...Temporary Admin Rights - macOS (26655).bes | 498 ++++---- ...to America_New_York - Mac OS X (10606).bes | 76 +- ...ATE_ Mac OS X 10.10.2 Available (3958).bes | 144 +-- ... OS X 10.10.2 Available (Combo) (3972).bes | 170 +-- ....10.2 Available (Combo) - Audit (3970).bes | 90 +- ... OS X 10.10.2 Available - Audit (3955).bes | 80 +- ... root login bug CVE-2017-13872 (24859).bes | 110 +- ...nually defined hosts - Win_Mac (20536).bes | 54 +- ...al - CVE-2021-44228 mitigation (26900).bes | 136 +-- ...ite System Profiler info - Mac (20446).bes | 106 +- ...DB Performance Logging (4.0.1) (27397).bes | 1014 ++++++++--------- 131 files changed, 7340 insertions(+), 7340 deletions(-) diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes index c7fcc1c16..a2eeb9c45 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.8 (2994639).bes @@ -1,26 +1,26 @@ - - - - - Apple Software Update Analysis 10.8 - Check status of Apple Software Update on OS X 10.8.x. Return "Software Update Enabled" if Apple Software Updates is Enabled. Return "Software Update Disabled" if Software Updates is Disabled. - mac of operating system - = "10.8" AND system version < "10.9"]]> - - x-fixlet-modification-time - Fri, 14 Feb 2014 19:27:04 +0000 - - BESC - if (not exists dictionary "com.apple.softwareupdatecheck.periodic" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Enabled" else if (boolean of value of entry whose (key of it is "Disabled") of dictionary "com.apple.softwareupdatecheck.periodic" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Disabled" else "Software Update Enabled" - if (not exists dictionary "com.apple.softwareupdatecheck.initial" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Enabled" else if (boolean of value of entry whose (key of it is "Disabled") of dictionary "com.apple.softwareupdatecheck.initial" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Disabled" else "Software Update Enabled" - - + + + + + Apple Software Update Analysis 10.8 + Check status of Apple Software Update on OS X 10.8.x. Return "Software Update Enabled" if Apple Software Updates is Enabled. Return "Software Update Disabled" if Software Updates is Disabled. + mac of operating system + = "10.8" AND system version < "10.9"]]> + + x-fixlet-modification-time + Fri, 14 Feb 2014 19:27:04 +0000 + + BESC + if (not exists dictionary "com.apple.softwareupdatecheck.periodic" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Enabled" else if (boolean of value of entry whose (key of it is "Disabled") of dictionary "com.apple.softwareupdatecheck.periodic" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Disabled" else "Software Update Enabled" + if (not exists dictionary "com.apple.softwareupdatecheck.initial" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Enabled" else if (boolean of value of entry whose (key of it is "Disabled") of dictionary "com.apple.softwareupdatecheck.initial" of dictionaries of file "/var/db/launchd.db/com.apple.launchd/overrides.plist") then "Software Update Disabled" else "Software Update Enabled" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes index a80e7a615..60cf54c3d 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Software Update Analysis 10.9 (2994640).bes @@ -1,25 +1,25 @@ - - - - - Apple Software Update Analysis 10.9 - Check status of Apple Software Update on OS X 10.9.x. Return "Software Update Enabled" if Apple Software Updates is Enabled. Return "Software Update Disabled" if Software Updates is Disabled. - mac of operating system - = "10.9"]]> - - x-fixlet-modification-time - Fri, 14 Feb 2014 19:26:12 +0000 - - BESC - if (not exists boolean "AutomaticCheckEnabled" of dictionaries of file "/Library/Preferences/com.apple.SoftwareUpdate.plist") then "Software Update Enabled" else if (boolean "AutomaticCheckEnabled" of dictionaries of file "/Library/Preferences/com.apple.SoftwareUpdate.plist") then "Software Update Enabled" else "Software Update Disabled" - - + + + + + Apple Software Update Analysis 10.9 + Check status of Apple Software Update on OS X 10.9.x. Return "Software Update Enabled" if Apple Software Updates is Enabled. Return "Software Update Disabled" if Software Updates is Disabled. + mac of operating system + = "10.9"]]> + + x-fixlet-modification-time + Fri, 14 Feb 2014 19:26:12 +0000 + + BESC + if (not exists boolean "AutomaticCheckEnabled" of dictionaries of file "/Library/Preferences/com.apple.SoftwareUpdate.plist") then "Software Update Enabled" else if (boolean "AutomaticCheckEnabled" of dictionaries of file "/Library/Preferences/com.apple.SoftwareUpdate.plist") then "Software Update Enabled" else "Software Update Disabled" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes index dccccd84d..c0e28451d 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (44).bes @@ -1,27 +1,27 @@ - - - - - Apple Time Machine - - (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) - = "10.5"]]> - - x-fixlet-modification-time - Mon, 26 Nov 2012 21:36:13 +0000 - - BESC - if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else (((dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) - if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) - if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else (modification time of file "/private/var/db/.TimeMachine.Results.plist" as string) - - + + + + + Apple Time Machine + + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + = "10.5"]]> + + x-fixlet-modification-time + Mon, 26 Nov 2012 21:36:13 +0000 + + BESC + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else (((dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else (modification time of file "/private/var/db/.TimeMachine.Results.plist" as string) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes index 4bdd1a4ac..d0f7b5196 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Time Machine (45).bes @@ -1,27 +1,27 @@ - - - - - Apple Time Machine - - (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) - = "10.5"]]> - - x-fixlet-modification-time - Mon, 26 Nov 2012 21:36:13 +0000 - - BESC - if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else (((dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) - if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) - if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else (modification time of file "/private/var/db/.TimeMachine.Results.plist" as string) - - + + + + + Apple Time Machine + + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + = "10.5"]]> + + x-fixlet-modification-time + Mon, 26 Nov 2012 21:36:13 +0000 + + BESC + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else (((dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else if(not exists dictionary of file "/private/var/db/.TimeMachine.Results.plist") then "No dictionary" else if((not exists entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") then "No backup date entry" else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND "BACKUP_COMPLETED_DATE" = key of it) of dictionary of it) of file "/private/var/db/.TimeMachine.Results.plist") as string) + if(not exists file "/private/var/db/.TimeMachine.Results.plist") then "No .TM.R file" else (modification time of file "/private/var/db/.TimeMachine.Results.plist" as string) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes b/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes index 9ee141c9b..199abd459 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Apple Update - Mac (2998548).bes @@ -1,24 +1,24 @@ - - - - - Apple Update - Mac - Provides information about Apple Software Update on Mac OS.

-

The missing updates relies on the last time Apple Update performed a check -- the data is as old as the last check.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BES - date "LastSuccessfulDate" of dictionary of file "com.apple.SoftwareUpdate.plist" of folder "/Library/Preferences" - (string "Display Name" of it & " " & string "Display Version" of it) of dictionaries of values of array "RecommendedUpdates" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" - string "AppleCatalogURL" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" | "Apple Production" - - + + + + + Apple Update - Mac + Provides information about Apple Software Update on Mac OS.

+

The missing updates relies on the last time Apple Update performed a check -- the data is as old as the last check.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + date "LastSuccessfulDate" of dictionary of file "com.apple.SoftwareUpdate.plist" of folder "/Library/Preferences" + (string "Display Name" of it & " " & string "Display Version" of it) of dictionaries of values of array "RecommendedUpdates" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" + string "AppleCatalogURL" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" | "Apple Production" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes b/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes index 83a778b70..d9a30d98b 100644 --- a/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes +++ b/Sites/Apple Management/Fixlets/Analyses/AppleEFINVRAM (2994552).bes @@ -1,30 +1,30 @@ - - - - - AppleEFINVRAM - Analyze NVRAM Variables with iokit - -https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/ioreg.8.html - -https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/nvram.8.html - - mac of operating system - - x-fixlet-modification-time - Fri, 26 Jul 2013 20:12:57 +0000 - - BESC - concatenation "; " of (keys of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry as string) - if (exists key whose ( it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry) then string of value of it whose ( key of it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry else "<No boot-args>" - - + + + + + AppleEFINVRAM + Analyze NVRAM Variables with iokit + +https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/ioreg.8.html + +https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/nvram.8.html + + mac of operating system + + x-fixlet-modification-time + Fri, 26 Jul 2013 20:12:57 +0000 + + BESC + concatenation "; " of (keys of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry as string) + if (exists key whose ( it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry) then string of value of it whose ( key of it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry else "<No boot-args>" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes b/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes index de0bc6b86..b662c3d57 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Application Firewall (AFL) Audit - Mac OS X (2994738).bes @@ -1,37 +1,37 @@ - - - - - Application Firewall (AFL) Audit - Mac OS X - Audit for OS X's Application Firewall (ALF).

-

References:
http://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/

]]> - = "10.6"]]> - mac of operating system - exists file "/Library/Preferences/com.apple.alf.plist" - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:44:25 +0000 - - BESC - string "version" of dictionary of file "/Library/Preferences/com.apple.alf.plist" - if (integer "globalstate" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" - if (integer "allowsignedenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" - if (integer "loggingenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" - if version of operating system >= "10.9" then (if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 0) then "throttled" else if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "brief" else if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 2) then "detailed" else ERROR "unknown value") else ERROR "OS not Supported" - if (integer "stealthenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" - if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" - if (number of strings "path" of dictionaries of values of array "exceptions" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "path" of dictionaries of values of array "exceptions" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" - if (number of strings "id" of dictionaries of values of array "explicitauths" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "id" of dictionaries of values of array "explicitauths" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" - (strings "proc" of it, "State: " & integer "state" of it as string) of dictionaries of values of entries of dictionary "firewall" of dictionary of file "/Library/Preferences/com.apple.alf.plist" - if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then (strings "bundleid" of it, "State: " & (if (integer "state" of it = 2) then "Blocked" else if (integer "state" of it = 0) then "Allowed" else "unkown") ) of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" - - + + + + + Application Firewall (AFL) Audit - Mac OS X + Audit for OS X's Application Firewall (ALF).

+

References:
http://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/

]]> + = "10.6"]]> + mac of operating system + exists file "/Library/Preferences/com.apple.alf.plist" + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:44:25 +0000 + + BESC + string "version" of dictionary of file "/Library/Preferences/com.apple.alf.plist" + if (integer "globalstate" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if (integer "allowsignedenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if (integer "loggingenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if version of operating system >= "10.9" then (if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 0) then "throttled" else if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "brief" else if (integer "loggingoption" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 2) then "detailed" else ERROR "unknown value") else ERROR "OS not Supported" + if (integer "stealthenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else ERROR "Disabled" + if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + if (number of strings "path" of dictionaries of values of array "exceptions" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "path" of dictionaries of values of array "exceptions" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + if (number of strings "id" of dictionaries of values of array "explicitauths" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "id" of dictionaries of values of array "explicitauths" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + (strings "proc" of it, "State: " & integer "state" of it as string) of dictionaries of values of entries of dictionary "firewall" of dictionary of file "/Library/Preferences/com.apple.alf.plist" + if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then (strings "bundleid" of it, "State: " & (if (integer "state" of it = 2) then "Blocked" else if (integer "state" of it = 0) then "Allowed" else "unkown") ) of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else ERROR "none" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes b/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes index 32460efba..7b16031db 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Configuration Profile Audit (2998505).bes @@ -1,27 +1,27 @@ - - - - - Configuration Profile Audit - "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles" ]]> - mac of operating system - exists file "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles" - - x-fixlet-modification-time - Thu, 22 Dec 2016 20:35:26 +0000 - - BESC - ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") - ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries whose (string "_name" of it = "spconfigprofile_section_deviceconfigprofiles") of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") - ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries whose (string "_name" of it = "spconfigprofile_section_userconfigprofiles") of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") - - + + + + + Configuration Profile Audit + "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles" ]]> + mac of operating system + exists file "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles" + + x-fixlet-modification-time + Thu, 22 Dec 2016 20:35:26 +0000 + + BESC + ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") + ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries whose (string "_name" of it = "spconfigprofile_section_deviceconfigprofiles") of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") + ("Profile Name: " & (string "_name" of it) & " | Description: " & (string "spconfigprofile_description" of it) & " | Organization: " & (if (exists string "spconfigprofile_organization" whose (it != "") of it) then (string "spconfigprofile_organization" of it) ELSE "N/A") & " | Identifier: " & (string "spconfigprofile_profile_identifier" of it) & " | Install Date: " & (string "spconfigprofile_install_date" of it) & " | Removal Prohibited?: " & (string "spconfigprofile_RemovalDisallowed" of it)) of (dictionaries of values of arrays of values of entries of dictionaries whose (string "_name" of it = "spconfigprofile_section_userconfigprofiles") of values of arrays of values of entries of dictionaries of values of arrays of files "/Library/Application Support/BigFix/BES Agent/__BESData/__Global/__ConfigProfiles") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes b/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes index d2fc5cd80..c4454bcce 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Configuration Profiles - Mac (2998534).bes @@ -1,30 +1,30 @@ - - - - - Configuration Profiles - Mac - This analysis provides information on the current state of the currently configured Mac Profiles.

-

This analysis relies on Fixlet: Invoke - Configuration Profiles Probe - Mac in the C3-Inventory site.

-

The data in this analysis only ever be as new as the last run of the probe.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists files "/Library/Profiles/Effective.plist" - BESC - (string "ProfileDisplayName" of it, string "PayloadUUID" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" - strings "ProfileDisplayName" of dictionaries whose (string "ProfileVerificationState" of it = "verified") of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" - strings "ProfileDisplayName" of dictionaries whose (string "ProfileVerificationState" of it != "verified") of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" - (string "ProfileDisplayName" of it, strings "PayloadType" of dictionaries of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" - (string "ProfileDisplayName" of it, strings "URL" of dictionaries of values of arrays "AutoLaunchedApplicationDictionary-managed" of dictionaries "PayloadContent" of dictionaries whose (string "PayloadType" of it = "com.apple.loginitems.managed") of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" - (string "ProfileDisplayName" of it, strings "ServerURL" of dictionaries "PayloadContent" of dictionaries whose (string "PayloadType" of it = "com.apple.mdm") of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" - modification time of files "/Library/Profiles/Effective.plist" - - + + + + + Configuration Profiles - Mac + This analysis provides information on the current state of the currently configured Mac Profiles.

+

This analysis relies on Fixlet: Invoke - Configuration Profiles Probe - Mac in the C3-Inventory site.

+

The data in this analysis only ever be as new as the last run of the probe.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists files "/Library/Profiles/Effective.plist" + BESC + (string "ProfileDisplayName" of it, string "PayloadUUID" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + strings "ProfileDisplayName" of dictionaries whose (string "ProfileVerificationState" of it = "verified") of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + strings "ProfileDisplayName" of dictionaries whose (string "ProfileVerificationState" of it != "verified") of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + (string "ProfileDisplayName" of it, strings "PayloadType" of dictionaries of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + (string "ProfileDisplayName" of it, strings "URL" of dictionaries of values of arrays "AutoLaunchedApplicationDictionary-managed" of dictionaries "PayloadContent" of dictionaries whose (string "PayloadType" of it = "com.apple.loginitems.managed") of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + (string "ProfileDisplayName" of it, strings "ServerURL" of dictionaries "PayloadContent" of dictionaries whose (string "PayloadType" of it = "com.apple.mdm") of values of arrays "ProfileItems" of it) of dictionaries of values of arrays "_computerlevel" of dictionaries of files "/Library/Profiles/Effective.plist" + modification time of files "/Library/Profiles/Effective.plist" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes index f2f1bac0c..9254f8e64 100644 --- a/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes +++ b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Audit - Mac (2998304).bes @@ -1,28 +1,28 @@ - - - - - FileVault 2 - Audit - Mac - Provides audit information about FileVault on the system.

-

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - mac of operating system - exists folder "FileVault" of folder "__Global" of data folder of client - BESC - (following text of first ": " of it as boolean) of (lines containing "Personal Key Exists:" of it) of file "RecoverySettings.txt" of folder "FileVault" of folder "__Global" of data folder of client - (following text of first ": " of it as boolean) of (lines containing "Institutional Key Exists:" of it) of file "RecoverySettings.txt" of folder "FileVault" of folder "__Global" of data folder of client - line 1 of file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client - (if (exists lines containing "Progress" of it) then (lines containing "Progress" of it) else nothing) of (file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client) - lines of file "Users.txt" of folder "FileVault" of folder "__Global" of data folder of client - (if (exists lines containing "Deferred enablement" of it) then (lines containing "Deferred enablement" of it) else nothing) of (file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client) - - + + + + + FileVault 2 - Audit - Mac + Provides audit information about FileVault on the system.

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + mac of operating system + exists folder "FileVault" of folder "__Global" of data folder of client + BESC + (following text of first ": " of it as boolean) of (lines containing "Personal Key Exists:" of it) of file "RecoverySettings.txt" of folder "FileVault" of folder "__Global" of data folder of client + (following text of first ": " of it as boolean) of (lines containing "Institutional Key Exists:" of it) of file "RecoverySettings.txt" of folder "FileVault" of folder "__Global" of data folder of client + line 1 of file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client + (if (exists lines containing "Progress" of it) then (lines containing "Progress" of it) else nothing) of (file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client) + lines of file "Users.txt" of folder "FileVault" of folder "__Global" of data folder of client + (if (exists lines containing "Deferred enablement" of it) then (lines containing "Deferred enablement" of it) else nothing) of (file "Status.txt" of folder "FileVault" of folder "__Global" of data folder of client) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes index 10ef1276a..7dfbfbccc 100644 --- a/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes +++ b/Sites/Apple Management/Fixlets/Analyses/FileVault 2 - Recovery Password - Mac (2998121).bes @@ -1,25 +1,25 @@ - - - - - FileVault 2 - Recovery Password - Mac - Provides the FileVault 2 recovery password if FileVault was enabled using Fixlet: Invoke - FileVault 2 Encrypt System Volume - Mac

-

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - "10.7" as version]]> - exists files whose (name of it as lowercase starts with "Recovery" as lowercase and name of it as lowercase ends with ".plist" as lowercase) of folder "FileVault" of folder "__Global" of data folder of client - BESC - string "RecoveryKey" of dictionary of file "Recovery.plist" of folder "FileVault" of folder "__Global" of data folder of client - if (not exists (booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry)) then "Drive is not Encrypted" else "Drive appears Encrypted" - (string "RecoveryKey" of dictionary of it, modification time of it) of files whose (name of it as lowercase contains "Recovery-" as lowercase and name of it as lowercase ends with ".plist") of folder "FileVault" of folder "__Global" of data folder of client - - + + + + + FileVault 2 - Recovery Password - Mac + Provides the FileVault 2 recovery password if FileVault was enabled using Fixlet: Invoke - FileVault 2 Encrypt System Volume - Mac

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + "10.7" as version]]> + exists files whose (name of it as lowercase starts with "Recovery" as lowercase and name of it as lowercase ends with ".plist" as lowercase) of folder "FileVault" of folder "__Global" of data folder of client + BESC + string "RecoveryKey" of dictionary of file "Recovery.plist" of folder "FileVault" of folder "__Global" of data folder of client + if (not exists (booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry)) then "Drive is not Encrypted" else "Drive appears Encrypted" + (string "RecoveryKey" of dictionary of it, modification time of it) of files whose (name of it as lowercase contains "Recovery-" as lowercase and name of it as lowercase ends with ".plist") of folder "FileVault" of folder "__Global" of data folder of client + + diff --git a/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes b/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes index 1af255cfa..39d440640 100644 --- a/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes +++ b/Sites/Apple Management/Fixlets/Analyses/FileVault2 Encryption Status all partitions (2998453).bes @@ -1,24 +1,24 @@ - - - - - FileVault2 Encryption Status all partitions - Returns the names and FileVault2 encryption status of the volume partitions. - mac of operating system - - x-fixlet-modification-time - Wed, 05 Oct 2016 17:54:00 +0000 - - BESC - (names of it, (if (not exists (booleans whose (it) of values of entries whose ("CoreStorage Encrypted" = key of it) of dictionaries of nodes of nodes of nodes "CoreStoragePhysical" of it)) then "Not Encrypted" else "Encrypted")) of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry - - + + + + + FileVault2 Encryption Status all partitions + Returns the names and FileVault2 encryption status of the volume partitions. + mac of operating system + + x-fixlet-modification-time + Wed, 05 Oct 2016 17:54:00 +0000 + + BESC + (names of it, (if (not exists (booleans whose (it) of values of entries whose ("CoreStorage Encrypted" = key of it) of dictionaries of nodes of nodes of nodes "CoreStoragePhysical" of it)) then "Not Encrypted" else "Encrypted")) of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes b/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes index 09fac2d7a..820a2319b 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Firewall - Configuration - Mac (2998305).bes @@ -1,27 +1,27 @@ - - - - - Firewall - Configuration - Mac - Provides information regarding the configuration of the Application Firewall in Mac OS X.

-

This majority of this analysis is sourced from rustymyers here: https://bigfix.me/analysis/details/2994738

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - exists file "/Library/Preferences/com.apple.alf.plist" - = "10.6"]]> - BESC - if (integer "globalstate" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ - if (integer "allowsignedenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ - if (integer "stealthenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ - (strings "proc" of it, "State: " & integer "state" of it as string) of dictionaries of values of entries of dictionary "firewall" of dictionary of file "/Library/Preferences/com.apple.alf.plist" /* From https://bigfix.me/analysis/details/2994738 */ - if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else "none" /* From https://bigfix.me/analysis/details/2994738 */ - - + + + + + Firewall - Configuration - Mac + Provides information regarding the configuration of the Application Firewall in Mac OS X.

+

This majority of this analysis is sourced from rustymyers here: https://bigfix.me/analysis/details/2994738

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + exists file "/Library/Preferences/com.apple.alf.plist" + = "10.6"]]> + BESC + if (integer "globalstate" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ + if (integer "allowsignedenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ + if (integer "stealthenabled" of dictionary of file "/Library/Preferences/com.apple.alf.plist" = 1) then "Enabled" else "Disabled" /* From https://bigfix.me/analysis/details/2994738 */ + (strings "proc" of it, "State: " & integer "state" of it as string) of dictionaries of values of entries of dictionary "firewall" of dictionary of file "/Library/Preferences/com.apple.alf.plist" /* From https://bigfix.me/analysis/details/2994738 */ + if (number of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" > 0) then concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" else "none" /* From https://bigfix.me/analysis/details/2994738 */ + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes b/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes index f934f345c..024817399 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Launch Daemons - Mac (2998254).bes @@ -1,25 +1,25 @@ - - - - - Launch Daemons - Mac - For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BES - (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/System/Library/LaunchDaemons") - (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/Library/LaunchDaemons") - (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/System/Library/LaunchAgents") - (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/Library/LaunchAgents") - (preceding text of first "/Library" of following text of first "Users/" of pathname of it, name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folders whose (name of it is "LaunchAgents") of folders whose (name of it is "Library") of folders of folder "/Users") - - + + + + + Launch Daemons - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/System/Library/LaunchDaemons") + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/Library/LaunchDaemons") + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/System/Library/LaunchAgents") + (name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folder "/Library/LaunchAgents") + (preceding text of first "/Library" of following text of first "Users/" of pathname of it, name of it, (if (not boolean "Disabled" of dictionary of it | true) then "Enabled" else "Disabled"), concatenation " " of strings of values of array "ProgramArguments" of dictionaries of it | string "Program" of dictionaries of it | "None") of descendants of (folders whose (name of it is "LaunchAgents") of folders whose (name of it is "Library") of folders of folder "/Users") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes b/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes index a14aa0636..2c2d65ca3 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Local Admin_User Audit - Apple (2994546).bes @@ -1,27 +1,27 @@ - - - - - Local Admin/User Audit - Apple - This analysis will audit the number of local admins on the system.

-

From here: http://bigfix.me/cdb/analysis/70

]]> - (exists file "/var/db/dslocal/nodes/Default/groups/admin.plist") - mac of operating system - - x-fixlet-modification-time - Wed, 10 Jul 2013 17:53:24 +0000 - - BESC - (number of values of array of value of entry whose(key of it = "users") of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist") - (concatenation "; " of strings of values of array of value of entry whose(key of it = "users") of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist") - - + + + + + Local Admin/User Audit - Apple + This analysis will audit the number of local admins on the system.

+

From here: http://bigfix.me/cdb/analysis/70

]]> + (exists file "/var/db/dslocal/nodes/Default/groups/admin.plist") + mac of operating system + + x-fixlet-modification-time + Wed, 10 Jul 2013 17:53:24 +0000 + + BESC + (number of values of array of value of entry whose(key of it = "users") of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist") + (concatenation "; " of strings of values of array of value of entry whose(key of it = "users") of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes b/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes index 112d1bd02..7d5e7d182 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Location - Mac (2998255).bes @@ -1,21 +1,21 @@ - - - - - Location - Mac - For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BESC - ((tuple string item 0 of it & ", " & tuple string item 1 of it) as time, tuple string item 2 of it, tuple string item 3 of it) of unique values of ((column "Timestamp" of it as string as floating point as integer * second + "01 Jan 2001 00:00:00" as universal time) as string & ", " & column "Latitude" of it as string & ", " & column "Longitude" of it as string) of rows whose (column "Latitude" of it as string != "0.0") of statement "select * from WifiLocation limit 100" of sqlite database of file "/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/cache_encryptedA.db" - - + + + + + Location - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BESC + ((tuple string item 0 of it & ", " & tuple string item 1 of it) as time, tuple string item 2 of it, tuple string item 3 of it) of unique values of ((column "Timestamp" of it as string as floating point as integer * second + "01 Jan 2001 00:00:00" as universal time) as string & ", " & column "Latitude" of it as string & ", " & column "Longitude" of it as string) of rows whose (column "Latitude" of it as string != "0.0") of statement "select * from WifiLocation limit 100" of sqlite database of file "/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/cache_encryptedA.db" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes b/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes index 35f28704e..79e0abc16 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Login Window - Mac (2998514).bes @@ -1,21 +1,21 @@ - - - - - Login Window - Mac - - mac of operating system - BESC - strings "LoginHook" of dictionaries of files "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" - strings "LogoutHook" of dictionaries of files "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" - - + + + + + Login Window - Mac + + mac of operating system + BESC + strings "LoginHook" of dictionaries of files "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + strings "LogoutHook" of dictionaries of files "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes b/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes index 04602cf9d..d1bec0597 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Mac Global Preferences Report (2994696).bes @@ -1,31 +1,31 @@ - - - - - Mac Global Preferences Report - Report of Global Preferences for OS X Clients - mac of operating system - - x-fixlet-modification-time - Wed, 30 Jul 2014 19:54:33 +0000 - - BESC - string "AppleShowScrollBars" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - boolean "NSNavPanelExpandedStateForSaveMode" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - boolean "NSNavPanelExpandedStateForSaveMode2" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - boolean "PMPrintingExpandedStateForPrint" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - boolean "PMPrintingExpandedStateForPrint2" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - boolean "NSDocumentSaveNewDocumentsToCloud" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - boolean "Quit When Finished" of dictionary of file "/Library/Preferences/com.apple.print.PrintingPrefs.plist" | error "No Pref" - boolean "AppleShowAllExtensions" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" - - + + + + + Mac Global Preferences Report + Report of Global Preferences for OS X Clients + mac of operating system + + x-fixlet-modification-time + Wed, 30 Jul 2014 19:54:33 +0000 + + BESC + string "AppleShowScrollBars" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "NSNavPanelExpandedStateForSaveMode" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "NSNavPanelExpandedStateForSaveMode2" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "PMPrintingExpandedStateForPrint" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "PMPrintingExpandedStateForPrint2" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "NSDocumentSaveNewDocumentsToCloud" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + boolean "Quit When Finished" of dictionary of file "/Library/Preferences/com.apple.print.PrintingPrefs.plist" | error "No Pref" + boolean "AppleShowAllExtensions" of dictionary of file "/Library/Preferences/.GlobalPreferences.plist" | error "No Pref" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes b/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes index 219b8f5b1..f2f94020f 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Mac Network Services (DHCP) Checks (2998169).bes @@ -1,26 +1,26 @@ - - - - - Mac Network Services (DHCP) Checks - This analysis is designed to check systems for DHCP services. Requires running the task "Mac DHCP Checks" first. - mac of operating system - exists file "/Library/Preferences/com.example.dhcptest.plist" - - x-fixlet-modification-time - Thu, 16 Jun 2016 18:23:38 +0000 - - BESC - string "ipaddress" of dictionary of file "/Library/Preferences/com.example.dhcptest.plist" | "unkown error" - string "dhcpserverip" of dictionary of file "/Library/Preferences/com.example.dhcptest.plist" | "unkown error" - - + + + + + Mac Network Services (DHCP) Checks + This analysis is designed to check systems for DHCP services. Requires running the task "Mac DHCP Checks" first. + mac of operating system + exists file "/Library/Preferences/com.example.dhcptest.plist" + + x-fixlet-modification-time + Thu, 16 Jun 2016 18:23:38 +0000 + + BESC + string "ipaddress" of dictionary of file "/Library/Preferences/com.example.dhcptest.plist" | "unkown error" + string "dhcpserverip" of dictionary of file "/Library/Preferences/com.example.dhcptest.plist" | "unkown error" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes b/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes index 719cd8f29..348eb02cb 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Mac sudoers file Report (2994662).bes @@ -1,32 +1,32 @@ - - - - - Mac sudoers file Report - This analysis reports data from the /etc/sudoers file, which is used to allow users to run commands as root without admin rights. - mac of operating system - exists file "/etc/sudoers" - - x-fixlet-modification-time - Tue, 17 Jun 2014 15:06:32 +0000 - - BESC - lines of file "/etc/sudoers" - lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/sudoers" - lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=") of file "/etc/sudoers" - number of lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/sudoers" - number of lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=") of file "/etc/sudoers" - (it as trimmed string) of preceding texts of lasts "ALL=(ALL)" of lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=(ALL) ALL") of file "/etc/sudoers" - (it as trimmed string) of following texts of lasts "Defaults" of lines whose (it as trimmed string starts with "Defaults") of file "/etc/sudoers" - number of lines whose (it as trimmed string starts with "Defaults") of file "/etc/sudoers" - - + + + + + Mac sudoers file Report + This analysis reports data from the /etc/sudoers file, which is used to allow users to run commands as root without admin rights. + mac of operating system + exists file "/etc/sudoers" + + x-fixlet-modification-time + Tue, 17 Jun 2014 15:06:32 +0000 + + BESC + lines of file "/etc/sudoers" + lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/sudoers" + lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=") of file "/etc/sudoers" + number of lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/sudoers" + number of lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=") of file "/etc/sudoers" + (it as trimmed string) of preceding texts of lasts "ALL=(ALL)" of lines whose (it does not start with "#" AND it as trimmed string != "" AND it contains "ALL=(ALL) ALL") of file "/etc/sudoers" + (it as trimmed string) of following texts of lasts "Defaults" of lines whose (it as trimmed string starts with "Defaults") of file "/etc/sudoers" + number of lines whose (it as trimmed string starts with "Defaults") of file "/etc/sudoers" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes b/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes index ea2a2395d..d4777163a 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Operating System - Mac (2998515).bes @@ -1,30 +1,30 @@ - - - - - Operating System - Mac - - - - -

This analysis contains information about the Apple Mac OS X operating system running on BES Client computers. 

-

Since this information does not change often, these properties are only evaluated once per day to avoid excess CPU or other computer resource usage.

-

After activating this analysis, you will see the following properties:

-
    -
  • OS Build
-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - NOT in proxy agent context - BESC - build number of operating system - - + + + + + Operating System - Mac + + + + +

This analysis contains information about the Apple Mac OS X operating system running on BES Client computers. 

+

Since this information does not change often, these properties are only evaluated once per day to avoid excess CPU or other computer resource usage.

+

After activating this analysis, you will see the following properties:

+
    +
  • OS Build
+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + NOT in proxy agent context + BESC + build number of operating system + + diff --git a/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes b/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes index 22cf944af..496548320 100644 --- a/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes +++ b/Sites/Apple Management/Fixlets/Analyses/PF Firewall Audit - Mac (2994651).bes @@ -1,37 +1,37 @@ - - - - - PF Firewall Audit - Mac - Audit of pf firewall for Mac OS X - -References: -http://www.openbsd.org/faq/pf/? -http://support.apple.com/kb/HT200259?viewlocale=en_US? - mac of operating system - exists file "/etc/pf.conf" - - x-fixlet-modification-time - Fri, 13 Jun 2014 16:07:19 +0000 - - BESC - lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/pf.conf" - lines whose (it does not start with "#" AND it as lowercase contains "load anchor") of file "/etc/pf.conf" - following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf" - number of lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/pf.conf" - number of lines whose (it does not start with "#" AND it as lowercase contains "load anchor") of file "/etc/pf.conf" - strings of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist" - exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist" - lines whose (it does not start with "#" AND it as trimmed string != "") of files (following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf") - (name of it, concatenation "%0A" of lines whose (it does not start with "#" AND it as trimmed string != "") of it) of files (following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf") - - + + + + + PF Firewall Audit - Mac + Audit of pf firewall for Mac OS X + +References: +http://www.openbsd.org/faq/pf/? +http://support.apple.com/kb/HT200259?viewlocale=en_US? + mac of operating system + exists file "/etc/pf.conf" + + x-fixlet-modification-time + Fri, 13 Jun 2014 16:07:19 +0000 + + BESC + lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/pf.conf" + lines whose (it does not start with "#" AND it as lowercase contains "load anchor") of file "/etc/pf.conf" + following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf" + number of lines whose (it does not start with "#" AND it as trimmed string != "") of file "/etc/pf.conf" + number of lines whose (it does not start with "#" AND it as lowercase contains "load anchor") of file "/etc/pf.conf" + strings of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist" + exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist" + lines whose (it does not start with "#" AND it as trimmed string != "") of files (following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf") + (name of it, concatenation "%0A" of lines whose (it does not start with "#" AND it as trimmed string != "") of it) of files (following texts of lasts "%22" of preceding texts of lasts "%22" of lines whose (it as lowercase contains "load anchor") of file "/etc/pf.conf") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes b/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes index b970e0a99..2f2f956df 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Printers - Mac (2998265).bes @@ -1,25 +1,25 @@ - - - - - Printers - Mac - Analysis of locally installed printers for Mac OS systems.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BES - (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "ipp://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) - (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "dnssd://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) - (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it), following text of first "AuthInfoRequired " of match (regex "AuthInfoRequired [^;]*") of it & " authentication") of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "smb://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) - (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) - (name of it, modification time of it) of files of folder "/Library/Printers/PPDs/Contents/Resources" - - + + + + + Printers - Mac + Analysis of locally installed printers for Mac OS systems.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "ipp://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "dnssd://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it), following text of first "AuthInfoRequired " of match (regex "AuthInfoRequired [^;]*") of it & " authentication") of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") whose (it contains "smb://") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (following text of first "MakeModel " of match (regex "MakeModel [^;]*") of it, following text of first "DeviceURI " of match (regex "DeviceURI [^;]*") of it, (if (it = "Yes") then ("Shared") else ("Not Shared")) of (following text of first "Shared " of match (regex "Shared [^;]*") of it)) of (parenthesized parts of matches (regex "<Printer[^>]+>([^<]*)</Printer>") of (concatenations ";" of lines of file "/etc/cups/printers.conf")) + (name of it, modification time of it) of files of folder "/Library/Printers/PPDs/Contents/Resources" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes b/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes index 8976fa1c4..1b439dbca 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Pulse Secure Info - MacOS (2998612).bes @@ -1,27 +1,27 @@ - - - - - Pulse Secure Info - MacOS - Returns VPN connections configured on MacOS clients with Pulse Secure. -Returns installed version of Pulse Secure. - mac of operating system - exists application "Pulse Secure.app" - - x-fixlet-modification-time - Tue, 20 Oct 2020 16:53:24 +0000 - - BESC - substrings before "%22" of (substrings after "uri: %22" of (lines whose (it contains "uri:") of file "/Library/Application Support/Pulse Secure/Pulse/connstore.dat")) - unique values of (substrings after "=" of (lines whose (it starts with "DisplayVersion") of file "/Applications/Pulse Secure.app/Contents/Resources/PulseSecureVersion.ini")) - - + + + + + Pulse Secure Info - MacOS + Returns VPN connections configured on MacOS clients with Pulse Secure. +Returns installed version of Pulse Secure. + mac of operating system + exists application "Pulse Secure.app" + + x-fixlet-modification-time + Tue, 20 Oct 2020 16:53:24 +0000 + + BESC + substrings before "%22" of (substrings after "uri: %22" of (lines whose (it contains "uri:") of file "/Library/Application Support/Pulse Secure/Pulse/connstore.dat")) + unique values of (substrings after "=" of (lines whose (it starts with "DisplayVersion") of file "/Applications/Pulse Secure.app/Contents/Resources/PulseSecureVersion.ini")) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes b/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes index 60f208ba1..b21e56792 100644 --- a/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes +++ b/Sites/Apple Management/Fixlets/Analyses/SPSS Installation and Licensing - Mac OS X (2994756).bes @@ -1,37 +1,37 @@ - - - - - SPSS Installation and Licensing - Mac OS X - - mac of operating system - exists folders "/Applications/IBM/SPSS/Statistics" - - x-fixlet-modification-time - Wed, 17 Dec 2014 19:15:10 +0000 - - BESC - unique values of versions of folders "SPSSStatistics.app" of folders of folder "/Applications/IBM/SPSS/Statistics" - unique values of pathnames of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of pathnames of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of lines whose(it as trimmed string != "") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of ( ( ( (if (it < current date) then "Expired on " else "Expires on ") & following text of first ", " of (it as string) ) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of it) of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" ) - unique values of pathnames of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of lines whose (it as trimmed string != "") of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of (it as trimmed string) whose (it != "") of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - unique values of (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" - ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of it) ) of it, name of it ) of folders of folders "/Applications/IBM/SPSS/Statistics" ) - conjunction of ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of it) ) of folders "SPSSStatistics.app/Contents/bin" of it ) of folders whose(name of it as trimmed string as integer >= 20) of folders "/Applications/IBM/SPSS/Statistics" ) - ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of it) ) of it, name of it ) of folders whose(name of it as trimmed string as integer = unique value of maxima of (it as trimmed string as integer) of names of folders of folders "/Applications/IBM/SPSS/Statistics") of folders "/Applications/IBM/SPSS/Statistics" ) - - + + + + + SPSS Installation and Licensing - Mac OS X + + mac of operating system + exists folders "/Applications/IBM/SPSS/Statistics" + + x-fixlet-modification-time + Wed, 17 Dec 2014 19:15:10 +0000 + + BESC + unique values of versions of folders "SPSSStatistics.app" of folders of folder "/Applications/IBM/SPSS/Statistics" + unique values of pathnames of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of pathnames of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of lines whose(it as trimmed string != "") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of ( ( ( (if (it < current date) then "Expired on " else "Expires on ") & following text of first ", " of (it as string) ) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of it) of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" ) + unique values of pathnames of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of lines whose (it as trimmed string != "") of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of (it as trimmed string) whose (it != "") of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + unique values of (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of folders of folders "/Applications/IBM/SPSS/Statistics" + ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of it) ) of it, name of it ) of folders of folders "/Applications/IBM/SPSS/Statistics" ) + conjunction of ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of it) ) of folders "SPSSStatistics.app/Contents/bin" of it ) of folders whose(name of it as trimmed string as integer >= 20) of folders "/Applications/IBM/SPSS/Statistics" ) + ( ( ( (exists (it as trimmed string) whose (it != "" AND ( /* The following should be true of any License Server that is a domain name, or an IPV4 address */ 2 <= number of substrings separated by "." of it )) of keys "DaemonHost" of files "spssprod.inf" of folders "SPSSStatistics.app/Contents/bin" of it ) OR disjunction of ( (if (it < (current date+30*day)) then FALSE else TRUE) of maxima of (it as date) of (following text of last " " of preceding text of first ", " of it & " " & preceding text of first " " of it & " " & following text of last ", " of it) of (it as trimmed string) of (preceding texts of firsts ", exclusive" of following texts of lasts ", expires Midnight of " of it) of lines containing ", expires Midnight of " whose (it contains ", exclusive") of files "lservrc" of folders "SPSSStatistics.app/Contents/bin" of it) ) of it, name of it ) of folders whose(name of it as trimmed string as integer = unique value of maxima of (it as trimmed string as integer) of names of folders of folders "/Applications/IBM/SPSS/Statistics") of folders "/Applications/IBM/SPSS/Statistics" ) + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes b/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes index 76631275f..48d6bc891 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X (2998201).bes @@ -1,32 +1,32 @@ - - - - - Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X - This analysis reports the clients received DHCP and BSDP (NetBoot) information from the task "Install/Upgrade: Service Discovery Tool". Information is stored "/Library/Preferences/edu.psu.sdt.plist" - mac of operating system - exists file "/Library/Preferences/edu.psu.sdt.plist" - - x-fixlet-modification-time - Fri, 15 Jul 2016 15:46:51 +0000 - - BESC - string "checkDate" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "no date" - string "ipaddress" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "unkown error" - string "dhcpserverip" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "unkown error" - strings "ConfigMethod" of dictionaries "IPv4" of dictionaries of values of entries whose( ( (name of primary internet connection) = unique value of strings "DeviceName" of dictionaries "Interface" of dictionaries of values of it) AND key of it is contained by set of ( keys of dictionaries "Service" of dictionaries "Network" of dictionaries of values of entries whose((unique value of (following texts of firsts "/Sets/" of it) of strings "CurrentSet" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist")= key of it) of dictionaries "Sets" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist" ) ) of dictionaries "NetworkServices" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist" - if (exists string "ipaddress" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist") then true else false - (string "ipaddress" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist") contains (concatenation ", " of (address of it as string) of ip interfaces whose (not loopback of it AND exists address of it) of network) - concatenations " " of ("Server:"; concatenations " nbis=(" of ( strings "ip" of it; ( concatenations "; " of (concatenation ", " of (strings "name" of it; strings "id" of it; booleans "default" of it as string) ) of dictionaries of values of arrays "nbis" of it ) );")" ) of dictionaries of values of array "bsdp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" - exists values of array "bsdp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" - - + + + + + Service Discovery Tool (DHCP & NetBoot) Analysis - Mac OS X + This analysis reports the clients received DHCP and BSDP (NetBoot) information from the task "Install/Upgrade: Service Discovery Tool". Information is stored "/Library/Preferences/edu.psu.sdt.plist" + mac of operating system + exists file "/Library/Preferences/edu.psu.sdt.plist" + + x-fixlet-modification-time + Fri, 15 Jul 2016 15:46:51 +0000 + + BESC + string "checkDate" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "no date" + string "ipaddress" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "unkown error" + string "dhcpserverip" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" | "unkown error" + strings "ConfigMethod" of dictionaries "IPv4" of dictionaries of values of entries whose( ( (name of primary internet connection) = unique value of strings "DeviceName" of dictionaries "Interface" of dictionaries of values of it) AND key of it is contained by set of ( keys of dictionaries "Service" of dictionaries "Network" of dictionaries of values of entries whose((unique value of (following texts of firsts "/Sets/" of it) of strings "CurrentSet" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist")= key of it) of dictionaries "Sets" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist" ) ) of dictionaries "NetworkServices" of dictionaries of files "/Library/Preferences/SystemConfiguration/preferences.plist" + if (exists string "ipaddress" of dictionary "dhcp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist") then true else false + (string "ipaddress" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist") contains (concatenation ", " of (address of it as string) of ip interfaces whose (not loopback of it AND exists address of it) of network) + concatenations " " of ("Server:"; concatenations " nbis=(" of ( strings "ip" of it; ( concatenations "; " of (concatenation ", " of (strings "name" of it; strings "id" of it; booleans "default" of it as string) ) of dictionaries of values of arrays "nbis" of it ) );")" ) of dictionaries of values of array "bsdp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" + exists values of array "bsdp" of dictionary of file "/Library/Preferences/edu.psu.sdt.plist" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes b/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes index 727e62056..b6fdc294d 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Stability - Mac (2998354).bes @@ -1,26 +1,26 @@ - - - - - Stability - Mac - Kudos, compliments, and credit for the majority of this analysis to: rustymyers

-

The original analysis this is based off of is available here: https://bigfix.me/analysis/details/2994700

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BESC - number of lines whose ( it as lowercase contains "error") of file "/var/log/system.log" - if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" - - + + + + + Stability - Mac + Kudos, compliments, and credit for the majority of this analysis to: rustymyers

+

The original analysis this is based off of is available here: https://bigfix.me/analysis/details/2994700

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BESC + number of lines whose ( it as lowercase contains "error") of file "/var/log/system.log" + if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes b/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes index ab32eaae5..0725c898c 100644 --- a/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes +++ b/Sites/Apple Management/Fixlets/Analyses/System Stability Report - Mac OS X (2994700).bes @@ -1,32 +1,32 @@ - - - - - System Stability Report - Mac OS X - This analysis analizes the Mac logs for general and specfic errors - mac of operating system - - x-fixlet-modification-time - Wed, 06 Aug 2014 14:40:54 +0000 - - BESC - number of lines whose ( it as lowercase contains "error") of file "/var/log/system.log" - number of lines whose ( it as lowercase contains "com.apple.opendirectoryd") of file "/var/log/system.log" - number of lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" - if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then concatenation ", " of unique values of preceding texts of firsts ": I/O error." of following texts of firsts "kernel[0]: " of lines whose (it contains "kernel[0]:" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then number of lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" - if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then number of lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" - - + + + + + System Stability Report - Mac OS X + This analysis analizes the Mac logs for general and specfic errors + mac of operating system + + x-fixlet-modification-time + Wed, 06 Aug 2014 14:40:54 +0000 + + BESC + number of lines whose ( it as lowercase contains "error") of file "/var/log/system.log" + number of lines whose ( it as lowercase contains "com.apple.opendirectoryd") of file "/var/log/system.log" + number of lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" + if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "kernel[0]" and it contains "I/O error") of file "/var/log/system.log") then concatenation ", " of unique values of preceding texts of firsts ": I/O error." of following texts of firsts "kernel[0]: " of lines whose (it contains "kernel[0]:" and it contains "I/O error") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent") of file "/var/log/system.log") then number of lines whose (it contains "BESAgent") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" + if (exists lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log") then number of lines whose (it contains "BESAgent" and it contains "spindump") of file "/var/log/system.log" else ERROR "none" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes b/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes index ab809b323..4ff7113f3 100644 --- a/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes +++ b/Sites/Apple Management/Fixlets/Analyses/TSM Backup Audit - Mac (63).bes @@ -1,36 +1,36 @@ - - - - - TSM Backup Audit - Mac - - (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) - (exists folder "/Applications/Tivoli Storage Manager") OR (exists folder "/Library/Application Support/tivoli/tsm") OR (exists application "Tivoli Storage Manager.app") OR (exists folder "/Library/Logs/tivoli/tsm") OR (exists folder "/Library/Preferences/Tivoli Storage Manager") - - x-fixlet-modification-time - Mon, 10 Dec 2012 13:28:08 +0000 - - BESC - exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys" - exists file "/Library/Preferences/Tivoli Storage Manager/dsm.opt" - exists folder "/Library/Logs/tivoli/tsm" - exists folder "/Applications/Tivoli Storage Manager" - exists folder "/Library/Preferences/Tivoli Storage Manager" - if(not exists file "/Library/Logs/tivoli/tsm/dsmsched.log") then "<dsmsched missing>" else (modification time of file "/Library/Logs/tivoli/tsm/dsmsched.log" as string) - if(exists application "Tivoli Storage Manager.app") then (version of application "Tivoli Storage Manager.app" as string) else "<TSM not installed>" - if(not exists file "/Library/Application Support/tivoli/tsm/client/ba/bin/tsmstats.ini") then "<tsmstats missing>" else (modification time of file "/Library/Application Support/tivoli/tsm/client/ba/bin/tsmstats.ini" as string) - if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") then "<no dsm.opt file>" else if(not exists line whose(it as uppercase contains "SERVERNAME ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") then "<SERVERNAME missing>" else (following text of first "SERVERNAME " of (it as uppercase) of line whose(it as uppercase contains "SERVERNAME ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") - if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<no dsm.sys file>" else if(not exists line whose(it as lowercase contains "tcpserveraddress ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<tcpserveraddress missing>" else (concatenation " " of substrings separated by " " whose (it != "") of following text of first "tcpserveraddress " of (it as lowercase) of (line whose(it as lowercase contains "tcpserveraddress ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys")) - if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<no dsm.sys file>" else if(not exists line whose(it as lowercase contains "nodename ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<nodename missing>" else (concatenation " " of substrings separated by " " whose (it != "") of following text of first "nodename " of (it as lowercase) of (line whose(it as lowercase contains "nodename ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys")) - exists processes whose (name of it = "dsmcad") - - + + + + + TSM Backup Audit - Mac + + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + (exists folder "/Applications/Tivoli Storage Manager") OR (exists folder "/Library/Application Support/tivoli/tsm") OR (exists application "Tivoli Storage Manager.app") OR (exists folder "/Library/Logs/tivoli/tsm") OR (exists folder "/Library/Preferences/Tivoli Storage Manager") + + x-fixlet-modification-time + Mon, 10 Dec 2012 13:28:08 +0000 + + BESC + exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys" + exists file "/Library/Preferences/Tivoli Storage Manager/dsm.opt" + exists folder "/Library/Logs/tivoli/tsm" + exists folder "/Applications/Tivoli Storage Manager" + exists folder "/Library/Preferences/Tivoli Storage Manager" + if(not exists file "/Library/Logs/tivoli/tsm/dsmsched.log") then "<dsmsched missing>" else (modification time of file "/Library/Logs/tivoli/tsm/dsmsched.log" as string) + if(exists application "Tivoli Storage Manager.app") then (version of application "Tivoli Storage Manager.app" as string) else "<TSM not installed>" + if(not exists file "/Library/Application Support/tivoli/tsm/client/ba/bin/tsmstats.ini") then "<tsmstats missing>" else (modification time of file "/Library/Application Support/tivoli/tsm/client/ba/bin/tsmstats.ini" as string) + if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") then "<no dsm.opt file>" else if(not exists line whose(it as uppercase contains "SERVERNAME ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") then "<SERVERNAME missing>" else (following text of first "SERVERNAME " of (it as uppercase) of line whose(it as uppercase contains "SERVERNAME ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.opt") + if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<no dsm.sys file>" else if(not exists line whose(it as lowercase contains "tcpserveraddress ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<tcpserveraddress missing>" else (concatenation " " of substrings separated by " " whose (it != "") of following text of first "tcpserveraddress " of (it as lowercase) of (line whose(it as lowercase contains "tcpserveraddress ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys")) + if(not exists file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<no dsm.sys file>" else if(not exists line whose(it as lowercase contains "nodename ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys") then "<nodename missing>" else (concatenation " " of substrings separated by " " whose (it != "") of following text of first "nodename " of (it as lowercase) of (line whose(it as lowercase contains "nodename ") of file "/Library/Preferences/Tivoli Storage Manager/dsm.sys")) + exists processes whose (name of it = "dsmcad") + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes b/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes index a0568c12c..3c3b5269b 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Temporary Admin Privliges Report - macOS (2998600).bes @@ -1,25 +1,25 @@ - - - - - Temporary Admin Privliges Report - macOS - This analysis determines the status of the Temporary Admin Privliges task.

-

To utilize this analysis you must first run the "System Configuration: Grant Temporary Admin Rights - macOS" task.

]]> - mac of operating system - - x-fixlet-modification-time - Mon, 08 Oct 2018 19:55:16 +0000 - - BESC - if (exists file "/Library/PSU/MakeMeAdmin.Status.plist") then if (string "Status" of dictionary of file "/Library/PSU/MakeMeAdmin.Status.plist" = "Compliant") then "Compliant" else (it as string) of (string "Status" of it, string "newAdmins" of it, string "orgAdmin" of it) of dictionary of file "/Library/PSU/MakeMeAdmin.Status.plist" else "Compliant" - - + + + + + Temporary Admin Privliges Report - macOS + This analysis determines the status of the Temporary Admin Privliges task.

+

To utilize this analysis you must first run the "System Configuration: Grant Temporary Admin Rights - macOS" task.

]]> + mac of operating system + + x-fixlet-modification-time + Mon, 08 Oct 2018 19:55:16 +0000 + + BESC + if (exists file "/Library/PSU/MakeMeAdmin.Status.plist") then if (string "Status" of dictionary of file "/Library/PSU/MakeMeAdmin.Status.plist" = "Compliant") then "Compliant" else (it as string) of (string "Status" of it, string "newAdmins" of it, string "orgAdmin" of it) of dictionary of file "/Library/PSU/MakeMeAdmin.Status.plist" else "Compliant" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes b/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes index 3c7814435..60fa504a9 100644 --- a/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes +++ b/Sites/Apple Management/Fixlets/Analyses/Time Machine - Mac (2998275).bes @@ -1,24 +1,24 @@ - - - - - Time Machine - Mac - For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BES - if (exists file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") then ((string of it) of values of (if (exists array "ExcludeByPath" of it) then (array "ExcludeByPath" of it) else (none); (if (exists array "SkipPaths" of it) then (array "SkipPaths" of it) else (none))) of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") else "None" - (boolean "SkipSystemFiles" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False - (boolean "RequiresACPower" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False - (boolean "AutoBackup" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False - - + + + + + Time Machine - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + if (exists file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") then ((string of it) of values of (if (exists array "ExcludeByPath" of it) then (array "ExcludeByPath" of it) else (none); (if (exists array "SkipPaths" of it) then (array "SkipPaths" of it) else (none))) of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") else "None" + (boolean "SkipSystemFiles" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False + (boolean "RequiresACPower" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False + (boolean "AutoBackup" of dictionary of file "com.apple.TimeMachine.plist" of folder "/Library/Preferences") | False + + diff --git a/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes b/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes index 323fb3061..0c47de2ae 100644 --- a/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes +++ b/Sites/Apple Management/Fixlets/Analyses/VPN - Mac (2998280).bes @@ -1,23 +1,23 @@ - - - - - VPN - Mac - For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - BES - (string "UserDefinedName" of it, string "SubType" of dictionary "Interface" of it, string "CommRemoteAddress" of dictionary "PPP" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "SubType" of dictionary "Interface" of it = "PPTP") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" - (string "UserDefinedName" of it, string "Type" of dictionary "Interface" of it, string "RemoteAddress" of dictionary "IPSec" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "Type" of dictionary "Interface" of it = "IPSec") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" - (string "UserDefinedName" of it, string "SubType" of dictionary "Interface" of it, string "CommRemoteAddress" of dictionary "PPP" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "SubType" of dictionary "Interface" of it = "L2TP") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" - - + + + + + VPN - Mac + For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + BES + (string "UserDefinedName" of it, string "SubType" of dictionary "Interface" of it, string "CommRemoteAddress" of dictionary "PPP" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "SubType" of dictionary "Interface" of it = "PPTP") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" + (string "UserDefinedName" of it, string "Type" of dictionary "Interface" of it, string "RemoteAddress" of dictionary "IPSec" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "Type" of dictionary "Interface" of it = "IPSec") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" + (string "UserDefinedName" of it, string "SubType" of dictionary "Interface" of it, string "CommRemoteAddress" of dictionary "PPP" of it) of dictionaries whose (exists dictionary "IPv4" of it and string "SubType" of dictionary "Interface" of it = "L2TP") of values of entries of dictionary "NetworkServices" of dictionary of file "preferences.plist" of folder "/Library/Preferences/SystemConfiguration" + + diff --git a/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes b/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes index 1bfb5504b..a9a0ec13b 100644 --- a/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes +++ b/Sites/Apple Management/Fixlets/Analyses/macOS Intel-Only Applications (2998705).bes @@ -1,26 +1,26 @@ - - - - - macOS Intel-Only Applications - These files and applications require Rosetta 2, which will no longer be supported after macOS 27. - mac of operating system - - x-fixlet-modification-time - Fri, 10 Apr 2026 19:35:18 +0000 - - BESC - (name of folder it, it) of unique values of (item 1 of it as string) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,9)) of it as hexadecimal), pathname of parent folder of parent folder of parent folder of it as string) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files of folders "Contents/MacOS" of folders (pathnames of regapps) - (item 1 of it, item 2 of it) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,15)) of it as hexadecimal), name of parent folder of parent folder of parent folder of it, pathname of it) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files of folders "Contents/MacOS" of folders (pathnames of regapps) - (item 1 of it, item 2 of it) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,15)) of it as hexadecimal), name of it, pathname of it) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files (pathnames of image files of processes) - - + + + + + macOS Intel-Only Applications + These files and applications require Rosetta 2, which will no longer be supported after macOS 27. + mac of operating system + + x-fixlet-modification-time + Fri, 10 Apr 2026 19:35:18 +0000 + + BESC + (name of folder it, it) of unique values of (item 1 of it as string) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,9)) of it as hexadecimal), pathname of parent folder of parent folder of parent folder of it as string) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files of folders "Contents/MacOS" of folders (pathnames of regapps) + (item 1 of it, item 2 of it) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,15)) of it as hexadecimal), name of parent folder of parent folder of parent folder of it, pathname of it) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files of folders "Contents/MacOS" of folders (pathnames of regapps) + (item 1 of it, item 2 of it) of (concatenation of lasts 2 of ("0" & it) of (bytes (integers in (0,15)) of it as hexadecimal), name of it, pathname of it) whose (item 0 of it starts with "cffaedfe07" or item 0 of it starts with "cafebabe07") of files (pathnames of image files of processes) + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes index 38f9afc14..dfc8889fc 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (APFS only) (24878).bes @@ -1,107 +1,107 @@ - - - - - Add additional FileVault user to encrypted computer (APFS only) -

-
-

-

-
-


-

-

Important Notes

-
    -
  • -
    You must enter a password in order to take an action
    -
  • -
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> - mac of operating system - = "10.13.0"]]> - ((it as string as lowercase contains "true")) of booleans of values of entries whose (("CoreStorage Encrypted" = key of it) OR ("Encrypted" = key of it)) of dictionaries whose (exists substring "False" of (booleans of values of entries whose ("Removable" = key of it) of it as string)) of (it; nodes of it; nodes of nodes of it; nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of nodes of it) of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of service plane of iokit registry - exists substring "Solid" of (strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes of nodes of it; strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of it) of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it starts with "RP")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry - 2018-01-04 - - bigfixme-added-time - Fri, 06 Dec 2013 04:16:50 GMT - - - bigfixme-modification-time - Fri, 06 Dec 2013 04:16:50 GMT - - - bigfixme-keywords - user, net.exe, secure parameter, password - - - x-fixlet-modification-time - Thu, 04 Jan 2018 14:54:29 +0000 - - BESC - - - - Add - &nbsp;FileVault 2 user - - - - - - Username - {parameter "username"} - Password - {parameter "secret" of action} -AdditionalUsers - - - Username - {parameter "username2"} - Password - {parameter "secret2" of action} - - - - -EOF - -move __createfile /tmp/fdesetup.plist - -wait /bin/sh -c "fdesetup add -inputplist < /tmp/fdesetup.plist" - -wait /bin/sh -c "fdesetup list > "/.filevault/users.txt"" - -delete /tmp/fdesetup.plist]]> - - - - + + + + + Add additional FileVault user to encrypted computer (APFS only) +

+
+

+

+
+


+

+

Important Notes

+
    +
  • +
    You must enter a password in order to take an action
    +
  • +
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> + mac of operating system + = "10.13.0"]]> + ((it as string as lowercase contains "true")) of booleans of values of entries whose (("CoreStorage Encrypted" = key of it) OR ("Encrypted" = key of it)) of dictionaries whose (exists substring "False" of (booleans of values of entries whose ("Removable" = key of it) of it as string)) of (it; nodes of it; nodes of nodes of it; nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of nodes of it) of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of service plane of iokit registry + exists substring "Solid" of (strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of nodes "IOAHCIBlockStorageDevice" of nodes of nodes of it; strings of values of entries whose (key of it = "Medium Type") of dictionaries of values of entries whose (key of it = "Device Characteristics") of dictionaries of it) of (if (name of it = "SATA") then (nodes of nodes of it) else (nodes of nodes of nodes of nodes of it)) of nodes whose ((name of it = "SATA") OR (name of it starts with "RP")) of node "AppleACPIPCI" of node "PCI0" of node "AppleACPIPlatformExpert" of service plane of iokit registry + 2018-01-04 + + bigfixme-added-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-modification-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-keywords + user, net.exe, secure parameter, password + + + x-fixlet-modification-time + Thu, 04 Jan 2018 14:54:29 +0000 + + BESC + + + + Add + &nbsp;FileVault 2 user + + + + + + Username + {parameter "username"} + Password + {parameter "secret" of action} +AdditionalUsers + + + Username + {parameter "username2"} + Password + {parameter "secret2" of action} + + + + +EOF + +move __createfile /tmp/fdesetup.plist + +wait /bin/sh -c "fdesetup add -inputplist < /tmp/fdesetup.plist" + +wait /bin/sh -c "fdesetup list > "/.filevault/users.txt"" + +delete /tmp/fdesetup.plist]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes index 2d97a5cf9..baf132fba 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Add additional FileVault user to encrypted computer (HFS only) (24879).bes @@ -1,105 +1,105 @@ - - - - - Add additional FileVault user to encrypted computer (HFS only) -

-
-
-

-

Important Notes

-
    -
  • -
    You must enter a password in order to take an action
    -
  • -
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> - mac of operating system - ((it as string as lowercase contains "true")) of booleans of values of entries whose (("CoreStorage Encrypted" = key of it) OR ("Encrypted" = key of it)) of dictionaries whose (exists substring "False" of (booleans of values of entries whose ("Removable" = key of it) of it as string)) of (it; nodes of it; nodes of nodes of it; nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of nodes of it) of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of service plane of iokit registry - - 2018-01-04 - - bigfixme-added-time - Fri, 06 Dec 2013 04:16:50 GMT - - - bigfixme-modification-time - Fri, 06 Dec 2013 04:16:50 GMT - - - bigfixme-keywords - user, net.exe, secure parameter, password - - - x-fixlet-modification-time - Thu, 04 Jan 2018 15:03:04 +0000 - - BESC - - - - Add - &nbsp;user to the list of FileVault users - - - - - - Username - - Password - {parameter "FVKey"} -AdditionalUsers - - - Username - {parameter "username"} - Password - {parameter "secret" of action} - - - - -EOF - -move __createfile /tmp/fdesetup.plist - -wait /bin/sh -c "fdesetup add -inputplist < /tmp/fdesetup.plist" - -wait /bin/sh -c "fdesetup list > "/.filevault/users.txt"" - -delete /tmp/fdesetup.plist]]> - - - - + + + + + Add additional FileVault user to encrypted computer (HFS only) +

+
+
+

+

Important Notes

+
    +
  • +
    You must enter a password in order to take an action
    +
  • +
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> + mac of operating system + ((it as string as lowercase contains "true")) of booleans of values of entries whose (("CoreStorage Encrypted" = key of it) OR ("Encrypted" = key of it)) of dictionaries whose (exists substring "False" of (booleans of values of entries whose ("Removable" = key of it) of it as string)) of (it; nodes of it; nodes of nodes of it; nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of it; nodes of nodes of nodes of nodes of nodes of it) of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of nodes of service plane of iokit registry + + 2018-01-04 + + bigfixme-added-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-modification-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-keywords + user, net.exe, secure parameter, password + + + x-fixlet-modification-time + Thu, 04 Jan 2018 15:03:04 +0000 + + BESC + + + + Add + &nbsp;user to the list of FileVault users + + + + + + Username + + Password + {parameter "FVKey"} +AdditionalUsers + + + Username + {parameter "username"} + Password + {parameter "secret" of action} + + + + +EOF + +move __createfile /tmp/fdesetup.plist + +wait /bin/sh -c "fdesetup add -inputplist < /tmp/fdesetup.plist" + +wait /bin/sh -c "fdesetup list > "/.filevault/users.txt"" + +delete /tmp/fdesetup.plist]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes index 2e4c64110..0c9b1757a 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X (7613).bes @@ -1,85 +1,85 @@ - - - - - Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X - Use this action to update Adobe Acrobat Pro DC to version 15.010.20056. This action is relevant on Macs running Mavericks or newer with a previous version of Adobe Acrobat Pro DC installed.

-

Adobe Acrobat Pro DC Update 15.010.20056 Planned Update (Continuous Track), January 12, 2016

-

https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html

-

Action 1: Use this when Acrobat Pro DC is not running otherwise the update will fail. Acrobat Pro DC needs to be closed in order for the update to succesfully install. If you would like to forcibly close Acrobat Pro DC, then use Action 2.

-

Action 2: Use this to forcibly close Acrobat Pro DC by killing the process, and then proceed with installing the update.

]]> - mac of operating system - = "10.9.0"]]> - = "15.0")]]> - Internal - 2016-01-17 - - x-fixlet-modification-time - Mon, 18 Jan 2016 02:10:02 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process. - - prefetch AcrobatDCUpd1501020056.pkg sha1:981d1367eb9e1926bba62549764ef9b90700d6a9 size:249165728 http://ardownload.adobe.com/pub/adobe/acrobat/mac/AcrobatDC/1501020056/AcrobatDCUpd1501020056.pkg sha256:240341d7407b4f29cf1b527e841ecc61657da092a17fa2dd109a0b92ab3a789b - -// Delete the Acrobat DC Update PKG in case it already exists -wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " - -// Kill all Acrobat processes to forcibly close Acrobat DC -// Uncomment the next line to forcibly close Acrobat DC by killing the process -// wait /bin/sh -c "/usr/bin/killall 'AdobeAcrobat' " - -// Move the downloaded Acrobat DC Update PKG to the temp directory -move "{posix path of file "AcrobatDCUpd1501020056.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcrobatDCUpd1501020056.pkg" - -// Install the Acrobat DC update -wait installer -pkg "/private/tmp/AcrobatDCUpd1501020056.pkg" -target / - -// Delete the Acrobat DC Update PKG in the temp directory -wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " - -// Uncomment the next line to require a restart after installing the update -// action requires restart - - - - Click - here - &nbsp;to upgrade to Adobe Acrobat Pro DC&nbsp;regardless of whether Acrobat&nbsp;Pro DC is running. - - prefetch AcrobatDCUpd1501020056.pkg sha1:981d1367eb9e1926bba62549764ef9b90700d6a9 size:249165728 http://ardownload.adobe.com/pub/adobe/acrobat/mac/AcrobatDC/1501020056/AcrobatDCUpd1501020056.pkg sha256:240341d7407b4f29cf1b527e841ecc61657da092a17fa2dd109a0b92ab3a789b - -// Delete the Acrobat DC Update PKG in case it already exists -wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " - -// Kill all Acrobat processes to forcibly close Acrobat DC -// Uncomment the next line to forcibly close Acrobat DC by killing the process -wait /bin/sh -c "/usr/bin/killall 'AdobeAcrobat' " - -// Move the downloaded Acrobat DC Update PKG to the temp directory -move "{posix path of file "AcrobatDCUpd1501020056.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcrobatDCUpd1501020056.pkg" - -// Install the Acrobat DC update -wait installer -pkg "/private/tmp/AcrobatDCUpd1501020056.pkg" -target / - -// Delete the Acrobat DC Update PKG in the temp directory -wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " - -// Uncomment the next line to require a restart after installing the update -// action requires restart - - - + + + + + Adobe Acrobat Pro DC 15.010.20056 - Adobe Acrobat Pro DC 15.x - Mac OS X + Use this action to update Adobe Acrobat Pro DC to version 15.010.20056. This action is relevant on Macs running Mavericks or newer with a previous version of Adobe Acrobat Pro DC installed.

+

Adobe Acrobat Pro DC Update 15.010.20056 Planned Update (Continuous Track), January 12, 2016

+

https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html

+

Action 1: Use this when Acrobat Pro DC is not running otherwise the update will fail. Acrobat Pro DC needs to be closed in order for the update to succesfully install. If you would like to forcibly close Acrobat Pro DC, then use Action 2.

+

Action 2: Use this to forcibly close Acrobat Pro DC by killing the process, and then proceed with installing the update.

]]> + mac of operating system + = "10.9.0"]]> + = "15.0")]]> + Internal + 2016-01-17 + + x-fixlet-modification-time + Mon, 18 Jan 2016 02:10:02 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process. + + prefetch AcrobatDCUpd1501020056.pkg sha1:981d1367eb9e1926bba62549764ef9b90700d6a9 size:249165728 http://ardownload.adobe.com/pub/adobe/acrobat/mac/AcrobatDC/1501020056/AcrobatDCUpd1501020056.pkg sha256:240341d7407b4f29cf1b527e841ecc61657da092a17fa2dd109a0b92ab3a789b + +// Delete the Acrobat DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Kill all Acrobat processes to forcibly close Acrobat DC +// Uncomment the next line to forcibly close Acrobat DC by killing the process +// wait /bin/sh -c "/usr/bin/killall 'AdobeAcrobat' " + +// Move the downloaded Acrobat DC Update PKG to the temp directory +move "{posix path of file "AcrobatDCUpd1501020056.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcrobatDCUpd1501020056.pkg" + +// Install the Acrobat DC update +wait installer -pkg "/private/tmp/AcrobatDCUpd1501020056.pkg" -target / + +// Delete the Acrobat DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + + Click + here + &nbsp;to upgrade to Adobe Acrobat Pro DC&nbsp;regardless of whether Acrobat&nbsp;Pro DC is running. + + prefetch AcrobatDCUpd1501020056.pkg sha1:981d1367eb9e1926bba62549764ef9b90700d6a9 size:249165728 http://ardownload.adobe.com/pub/adobe/acrobat/mac/AcrobatDC/1501020056/AcrobatDCUpd1501020056.pkg sha256:240341d7407b4f29cf1b527e841ecc61657da092a17fa2dd109a0b92ab3a789b + +// Delete the Acrobat DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Kill all Acrobat processes to forcibly close Acrobat DC +// Uncomment the next line to forcibly close Acrobat DC by killing the process +wait /bin/sh -c "/usr/bin/killall 'AdobeAcrobat' " + +// Move the downloaded Acrobat DC Update PKG to the temp directory +move "{posix path of file "AcrobatDCUpd1501020056.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcrobatDCUpd1501020056.pkg" + +// Install the Acrobat DC update +wait installer -pkg "/private/tmp/AcrobatDCUpd1501020056.pkg" -target / + +// Delete the Acrobat DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcrobatDCUpd1501020056.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes index 5efdc0f49..70c13d055 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X (7612).bes @@ -1,85 +1,85 @@ - - - - - Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X - Use this action to update Adobe Acrobat Reader DC to version 15.010.20056. This action is relevant on Macs running Mavericks or newer with a previous version of Adobe Acrobat Pro DC installed.

-

Adobe Acrobat Reader DC Update 15.010.20056 Planned Update (Continuous Track), October 29, 2015

-

https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html

-

Action 1: Use this when Acrobat Reader DC is not running otherwise the update will fail. Acrobat Reader DC needs to be closed in order for the update to succesfully install. If you would like to forcibly close Acrobat Reader DC, then use Action 2.

-

Action 2: Use this to forcibly close Acrobat Reader DC by killing the process, and then proceed with installing the update.

]]> - mac of operating system - = "10.9.0"]]> - = "15.0")]]> - Internal - 2016-01-17 - - x-fixlet-modification-time - Mon, 18 Jan 2016 02:09:50 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process. - - prefetch AcroRdrDCUpd1501020056_MUI.pkg sha1:ee6717bd7d1abcabcc87a685453e6cb2bf8acce0 size:86105619 http://ardownload.adobe.com/pub/adobe/reader/mac/AcrobatDC/1501020056/AcroRdrDCUpd1501020056_MUI.pkg sha256:5d801caeaeaee283845eb186379d72b43083cce83c761b119fa3495d232527dc - -// Delete the Acrobat Reader DC Update PKG in case it already exists -wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " - -// Kill all Acrobat Reader processes to forcibly close Acrobat Reader DC -// Uncomment the next line to forcibly close Acrobat Reader DC by killing the process -// wait /bin/sh -c "/usr/bin/killall 'AdobeReader' " - -// Move the downloaded Acrobat Reader DC Update PKG to the temp directory -move "{posix path of file "AcroRdrDCUpd1501020056_MUI.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" - -// Install the Acrobat Reader DC update -wait installer -pkg "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" -target / - -// Delete the Acrobat Reader DC Update PKG in the temp directory -wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " - -// Uncomment the next line to require a restart after installing the update -// action requires restart - - - - Click - here - &nbsp;to upgrade to Adobe Acrobat Reader DC&nbsp;regardless of whether Acrobat Reader DC is running. - - prefetch AcroRdrDCUpd1501020056_MUI.pkg sha1:ee6717bd7d1abcabcc87a685453e6cb2bf8acce0 size:86105619 http://ardownload.adobe.com/pub/adobe/reader/mac/AcrobatDC/1501020056/AcroRdrDCUpd1501020056_MUI.pkg sha256:5d801caeaeaee283845eb186379d72b43083cce83c761b119fa3495d232527dc - -// Delete the Acrobat Reader DC Update PKG in case it already exists -wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " - -// Kill all Acrobat Reader processes to forcibly close Acrobat Reader DC -// Uncomment the next line to forcibly close Acrobat Reader DC by killing the process -wait /bin/sh -c "/usr/bin/killall 'AdobeReader' " - -// Move the downloaded Acrobat Reader DC Update PKG to the temp directory -move "{posix path of file "AcroRdrDCUpd1501020056_MUI.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" - -// Install the Acrobat Reader DC update -wait installer -pkg "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" -target / - -// Delete the Acrobat Reader DC Update PKG in the temp directory -wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " - -// Uncomment the next line to require a restart after installing the update -// action requires restart - - - + + + + + Adobe Acrobat Reader DC 15.010.20056 - Adobe Acrobat Reader DC 15.x - Mac OS X + Use this action to update Adobe Acrobat Reader DC to version 15.010.20056. This action is relevant on Macs running Mavericks or newer with a previous version of Adobe Acrobat Pro DC installed.

+

Adobe Acrobat Reader DC Update 15.010.20056 Planned Update (Continuous Track), October 29, 2015

+

https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html

+

Action 1: Use this when Acrobat Reader DC is not running otherwise the update will fail. Acrobat Reader DC needs to be closed in order for the update to succesfully install. If you would like to forcibly close Acrobat Reader DC, then use Action 2.

+

Action 2: Use this to forcibly close Acrobat Reader DC by killing the process, and then proceed with installing the update.

]]> + mac of operating system + = "10.9.0"]]> + = "15.0")]]> + Internal + 2016-01-17 + + x-fixlet-modification-time + Mon, 18 Jan 2016 02:09:50 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process. + + prefetch AcroRdrDCUpd1501020056_MUI.pkg sha1:ee6717bd7d1abcabcc87a685453e6cb2bf8acce0 size:86105619 http://ardownload.adobe.com/pub/adobe/reader/mac/AcrobatDC/1501020056/AcroRdrDCUpd1501020056_MUI.pkg sha256:5d801caeaeaee283845eb186379d72b43083cce83c761b119fa3495d232527dc + +// Delete the Acrobat Reader DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Kill all Acrobat Reader processes to forcibly close Acrobat Reader DC +// Uncomment the next line to forcibly close Acrobat Reader DC by killing the process +// wait /bin/sh -c "/usr/bin/killall 'AdobeReader' " + +// Move the downloaded Acrobat Reader DC Update PKG to the temp directory +move "{posix path of file "AcroRdrDCUpd1501020056_MUI.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" + +// Install the Acrobat Reader DC update +wait installer -pkg "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" -target / + +// Delete the Acrobat Reader DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + + Click + here + &nbsp;to upgrade to Adobe Acrobat Reader DC&nbsp;regardless of whether Acrobat Reader DC is running. + + prefetch AcroRdrDCUpd1501020056_MUI.pkg sha1:ee6717bd7d1abcabcc87a685453e6cb2bf8acce0 size:86105619 http://ardownload.adobe.com/pub/adobe/reader/mac/AcrobatDC/1501020056/AcroRdrDCUpd1501020056_MUI.pkg sha256:5d801caeaeaee283845eb186379d72b43083cce83c761b119fa3495d232527dc + +// Delete the Acrobat Reader DC Update PKG in case it already exists +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Kill all Acrobat Reader processes to forcibly close Acrobat Reader DC +// Uncomment the next line to forcibly close Acrobat Reader DC by killing the process +wait /bin/sh -c "/usr/bin/killall 'AdobeReader' " + +// Move the downloaded Acrobat Reader DC Update PKG to the temp directory +move "{posix path of file "AcroRdrDCUpd1501020056_MUI.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" + +// Install the Acrobat Reader DC update +wait installer -pkg "/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg" -target / + +// Delete the Acrobat Reader DC Update PKG in the temp directory +wait /bin/sh -c "rm '/private/tmp/AcroRdrDCUpd1501020056_MUI.pkg' " + +// Uncomment the next line to require a restart after installing the update +// action requires restart + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes index 0cfa8b2fd..df3e3985e 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.5.4 - Mac (3638).bes @@ -1,68 +1,68 @@ - - - - - Apple Remote Desktop Client - 3.5.4 - Mac - This will update the Apple Remote Desktop Client to version 3.5.4 on applicable machines. - name of operating system = "Mac OS X" - = "10.6"]]> - - exists string "CFBundleShortVersionString" of dictionary of file "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Info.plist" - - 7983776]]> - Update - Apple - 2013-10-22 - - x-fixlet-modification-time - Thu, 24 Oct 2013 13:40:03 +0000 - - BESC - - - Click - here - to deploy this action. - - - - - + + + + + Apple Remote Desktop Client - 3.5.4 - Mac + This will update the Apple Remote Desktop Client to version 3.5.4 on applicable machines. + name of operating system = "Mac OS X" + = "10.6"]]> + + exists string "CFBundleShortVersionString" of dictionary of file "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Info.plist" + + 7983776]]> + Update + Apple + 2013-10-22 + + x-fixlet-modification-time + Thu, 24 Oct 2013 13:40:03 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes index 4eee03f84..6a34b1859 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Apple Remote Desktop Client - 3.7 - Mac (3639).bes @@ -1,67 +1,67 @@ - - - - - Apple Remote Desktop Client - 3.7 - Mac - This will update the Apple Remote Desktop Client to version 3.7 on applicable machines. - name of operating system = "Mac OS X" - exists string "CFBundleShortVersionString" of dictionary of file "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Info.plist" - = "10.7"]]> - - 10544004]]> - Update - Apple - 2013-10-22 - - x-fixlet-modification-time - Thu, 24 Oct 2013 13:38:27 +0000 - - BESC - - - Click - here - to deploy this action. - - - - - + + + + + Apple Remote Desktop Client - 3.7 - Mac + This will update the Apple Remote Desktop Client to version 3.7 on applicable machines. + name of operating system = "Mac OS X" + exists string "CFBundleShortVersionString" of dictionary of file "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Info.plist" + = "10.7"]]> + + 10544004]]> + Update + Apple + 2013-10-22 + + x-fixlet-modification-time + Thu, 24 Oct 2013 13:38:27 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes b/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes index 1ca14aab6..0e462cdb7 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Apple Security Update Ethernet Driver Repair - Mac OS X (9269).bes @@ -1,34 +1,34 @@ - - - - - Apple Security Update Ethernet Driver Repair - Mac OS X - - exists lines whose (it contains "com.apple.iokit.AppleBCM5701Ethernet" OR it contains "com.apple.iokit.AppleYukon2") of files "/System/Library/Extensions/AppleKextExcludeList.kext/Contents/Info.plist" - Internal - 2016-03-01 - - x-fixlet-modification-time - Wed, 02 Mar 2016 22:04:39 +0000 - - BESC - - - Click - here - to deploy this action. - - // Run Apple Software Update to install critical and config-data updates only, including the fixed ethernet driver update -wait softwareupdate --background-critical - - - + + + + + Apple Security Update Ethernet Driver Repair - Mac OS X + + exists lines whose (it contains "com.apple.iokit.AppleBCM5701Ethernet" OR it contains "com.apple.iokit.AppleYukon2") of files "/System/Library/Extensions/AppleKextExcludeList.kext/Contents/Info.plist" + Internal + 2016-03-01 + + x-fixlet-modification-time + Wed, 02 Mar 2016 22:04:39 +0000 + + BESC + + + Click + here + to deploy this action. + + // Run Apple Software Update to install critical and config-data updates only, including the fixed ethernet driver update +wait softwareupdate --background-critical + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes b/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes index 50f3d1e26..c5232f96b 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/CLM Mac Enable Add everyone to lpadmin group (printers) (2614).bes @@ -1,35 +1,35 @@ - - - - - CLM Mac Enable Add everyone to lpadmin group (printers) - This fixlet allows local users to manage printers by adding the everyone group to the lpadmin group. All users are a part of everyone, therefore everyone can manage printers. WARNING: Users will also be able to delete and add printers! - not ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist") contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) - CLM Mac System Configuration - Internal - rzm102; mah60 - 2013-10-10 - - x-fixlet-modification-time - Thu, 10 Oct 2013 20:04:36 +0000 - - BESC - - - Click - here - to deploy this action. - - wait dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin - - - + + + + + CLM Mac Enable Add everyone to lpadmin group (printers) + This fixlet allows local users to manage printers by adding the everyone group to the lpadmin group. All users are a part of everyone, therefore everyone can manage printers. WARNING: Users will also be able to delete and add printers! + not ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist") contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + CLM Mac System Configuration + Internal + rzm102; mah60 + 2013-10-10 + + x-fixlet-modification-time + Thu, 10 Oct 2013 20:04:36 +0000 + + BESC + + + Click + here + to deploy this action. + + wait dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes b/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes index 73e45fb24..8f81453a9 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Change local user account password - Mac (3671).bes @@ -1,78 +1,78 @@ - - - - - Change local user account password - Mac - -

-
-

]]> - mac of operating system - = "9.0"]]> - Accounts - Internal - jbt8@psu.edu - 2013-05-03 - - x-fixlet-modification-time - Fri, 06 Dec 2013 11:17:48 +0000 - - BESC - - - - Change - &nbsp;specified local user account password. - - action parameter query "username" with description "Please specify the name of an existing local user account" - -wait sh -c "dscl localhost -passwd '/Search/Users/{parameter "username" of action}' {parameter "secret" of action}" - -continue if {exit code of action = 0} - - - - - + + + + + Change local user account password - Mac + +

+
+

]]> + mac of operating system + = "9.0"]]> + Accounts + Internal + jbt8@psu.edu + 2013-05-03 + + x-fixlet-modification-time + Fri, 06 Dec 2013 11:17:48 +0000 + + BESC + + + + Change + &nbsp;specified local user account password. + + action parameter query "username" with description "Please specify the name of an existing local user account" + +wait sh -c "dscl localhost -passwd '/Search/Users/{parameter "username" of action}' {parameter "secret" of action}" + +continue if {exit code of action = 0} + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes b/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes index 8ba48463c..d610230c1 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Check FileVault2 Status for Mac OS X 10.7_10.8 without PGP installed. (2569).bes @@ -1,218 +1,218 @@ - - - - - Check FileVault2 Status for Mac OS X 10.7/10.8 without PGP installed. - This task uses a script found on the Internet to check the status of FileVault2 encryption on Mac laptops.

-

The results of the check are stored in a client setting "_FileVault2". -The original script was derived from the FileVault 2 encryption status check script from http://derflounder.wordpress.com/2011/10/13/filevault-2-encryption-status-check-script/ -

-

Because of the potential impact to performance, I only execute this Task once every 6 hours. This was deemed frequent enough to appropriately record the encryption status, but not so frequent that it adversely impacted overall performance of the targeted computers or their Agents. -

]]> - (operating system as string starts with "Mac OS X 10.7.") or (operating system as string starts with "Mac OS X 10.8.") - not exists application whose (name of it as lowercase = "pgp.app") - if ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry then TRUE else FALSE - ENCRYPTION STATUS - Internal - 2013-08-07 - - x-fixlet-modification-time - Thu, 15 Aug 2013 21:30:23 +0000 - - BESC - - - Click - here - to deploy this action. - - /private/tmp/filevault2-status.txt -fi - - - -if [[ ${{osvers} -ge 7 ]]; then -diskutil cs list >> $CORESTORAGESTATUS - -# If the Mac is running 10.7 or 10.8, but does not have -# any CoreStorage volumes, the following message is -# displayed without quotes: -# "FileVault 2 Encryption Not Enabled" - -if grep -iE 'No CoreStorage' $CORESTORAGESTATUS 1>/dev/null; then -echo "FileVault 2 Encryption Not Enabled" > /private/tmp/filevault2-status.txt -fi - -# If the Mac is running 10.7 or 10.8 and has CoreStorage volumes, -# the script then checks to see if the machine is encrypted, -# encrypting, or decrypting. -# -# If encrypted, the following message is -# displayed without quotes: -# "FileVault 2 Encryption Complete" -# -# If encrypting, the following message is -# displayed without quotes: -# "FileVault 2 Encryption Proceeding." -# How much has been encrypted of of the total -# amount of space is also displayed. If the -# amount of encryption is for some reason not -# known, the following message is -# displayed without quotes: -# "FileVault 2 Encryption Status Unknown. Please check." -# -# If decrypting, the following message is -# displayed without quotes: -# "FileVault 2 Decryption Proceeding" -# How much has been decrypted of of the total -# amount of space is also displayed -# -# If fully decrypted, the following message is -# displayed without quotes: -# "FileVault 2 Decryption Complete" -# - -if grep -iE 'Logical Volume Family' $CORESTORAGESTATUS 1>/dev/null; then - -# This section does 10.7-specific checking of the Mac's -# FileVault 2 status - -if [ "$CONTEXT" = "Present" ]; then -if [ "$ENCRYPTION" = "AES-XTS" ]; then -diskutil cs list | grep -E "$EGREP_STRING\Conversion Status" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTSTATUS -if grep -iE 'Complete' $ENCRYPTSTATUS 1>/dev/null; then -echo "FileVault 2 Encryption Complete" > /private/tmp/filevault2-status.txt -else -if grep -iE 'Converting' $ENCRYPTSTATUS 1>/dev/null; then -diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION -if grep -iE 'Forward' $ENCRYPTDIRECTION 1>/dev/null; then -echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" > /private/tmp/filevault2-status.txt -else -echo "FileVault 2 Encryption Status Unknown. Please check." > /private/tmp/filevault2-status.txt -fi -fi -fi -else -if [ "$ENCRYPTION" = "None" ]; then -diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION -if grep -iE 'Backward' $ENCRYPTDIRECTION 1>/dev/null; then -echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" > /private/tmp/filevault2-status.txt -elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then -echo "FileVault 2 Decryption Completed" > /private/tmp/filevault2-status.txt -fi -fi -fi -fi -fi -fi -# This section does 10.8-specific checking of the Mac's -# FileVault 2 status - -if [ "$ENCRYPTIONEXTENTS" = "Yes" ]; then -diskutil cs list | grep -E "$EGREP_STRING\Fully Secure" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTSTATUS -if grep -iE 'Yes' $ENCRYPTSTATUS 1>/dev/null; then -echo "FileVault 2 Encryption Complete" > /private/tmp/filevault2-status.txt -else -if grep -iE 'No' $ENCRYPTSTATUS 1>/dev/null; then -diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION -if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then -echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" > /private/tmp/filevault2-status.txt - -else -if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then -echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" > /private/tmp/filevault2-status.txt -elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then -echo "FileVault 2 Decryption Completed" > /private/tmp/filevault2-status.txt -fi -fi -fi -fi -fi -if [ "$ENCRYPTIONEXTENTS" = "No" ]; then -echo "FileVault 2 Encryption Not Enabled" > /private/tmp/filevault2-status.txt -fi - -# Remove the temp files created during the script - -if [ -f /private/tmp/corestorage.txt ]; then -rm /private/tmp/corestorage.txt -fi - -if [ -f /private/tmp/encrypt_status.txt ]; then -rm /private/tmp/encrypt_status.txt -fi - -if [ -f /private/tmp/encrypt_direction.txt ]; then -rm /private/tmp/encrypt_direction.txt -fi -##END## - -delete filevault2.sh -move __createfile filevault2.sh -// if {not exists folder "/TEM-Data"} -// folder create "/TEM-Data" -// endif -// wait /bin/sh -C filevault2.sh > "{parent folder of data folder of client}/filevault2-status.txt" -// wait /bin/sh -C filevault2.sh >> /private/tmp/filevault2-status.txt -wait /bin/sh filevault2.sh -if {exists file "filevault2-status.txt" of folder "/private/tmp"} -setting "_FileVault2"="{lines of file "filevault2-status.txt" of folder "/private/tmp"}" on "{now}" for client -else -setting "_FileVault2"="FAILED" on "{now}" for client -endif]]> - - - - Click - here - to visit the Home Page the script originates from. - - http://derflounder.wordpress.com/2011/10/13/filevault-2-encryption-status-check-script/ - - - + + + + + Check FileVault2 Status for Mac OS X 10.7/10.8 without PGP installed. + This task uses a script found on the Internet to check the status of FileVault2 encryption on Mac laptops.

+

The results of the check are stored in a client setting "_FileVault2". +The original script was derived from the FileVault 2 encryption status check script from http://derflounder.wordpress.com/2011/10/13/filevault-2-encryption-status-check-script/ +

+

Because of the potential impact to performance, I only execute this Task once every 6 hours. This was deemed frequent enough to appropriately record the encryption status, but not so frequent that it adversely impacted overall performance of the targeted computers or their Agents. +

]]> + (operating system as string starts with "Mac OS X 10.7.") or (operating system as string starts with "Mac OS X 10.8.") + not exists application whose (name of it as lowercase = "pgp.app") + if ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry then TRUE else FALSE + ENCRYPTION STATUS + Internal + 2013-08-07 + + x-fixlet-modification-time + Thu, 15 Aug 2013 21:30:23 +0000 + + BESC + + + Click + here + to deploy this action. + + /private/tmp/filevault2-status.txt +fi + + + +if [[ ${{osvers} -ge 7 ]]; then +diskutil cs list >> $CORESTORAGESTATUS + +# If the Mac is running 10.7 or 10.8, but does not have +# any CoreStorage volumes, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Not Enabled" + +if grep -iE 'No CoreStorage' $CORESTORAGESTATUS 1>/dev/null; then +echo "FileVault 2 Encryption Not Enabled" > /private/tmp/filevault2-status.txt +fi + +# If the Mac is running 10.7 or 10.8 and has CoreStorage volumes, +# the script then checks to see if the machine is encrypted, +# encrypting, or decrypting. +# +# If encrypted, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Complete" +# +# If encrypting, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Proceeding." +# How much has been encrypted of of the total +# amount of space is also displayed. If the +# amount of encryption is for some reason not +# known, the following message is +# displayed without quotes: +# "FileVault 2 Encryption Status Unknown. Please check." +# +# If decrypting, the following message is +# displayed without quotes: +# "FileVault 2 Decryption Proceeding" +# How much has been decrypted of of the total +# amount of space is also displayed +# +# If fully decrypted, the following message is +# displayed without quotes: +# "FileVault 2 Decryption Complete" +# + +if grep -iE 'Logical Volume Family' $CORESTORAGESTATUS 1>/dev/null; then + +# This section does 10.7-specific checking of the Mac's +# FileVault 2 status + +if [ "$CONTEXT" = "Present" ]; then +if [ "$ENCRYPTION" = "AES-XTS" ]; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Status" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTSTATUS +if grep -iE 'Complete' $ENCRYPTSTATUS 1>/dev/null; then +echo "FileVault 2 Encryption Complete" > /private/tmp/filevault2-status.txt +else +if grep -iE 'Converting' $ENCRYPTSTATUS 1>/dev/null; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION +if grep -iE 'Forward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" > /private/tmp/filevault2-status.txt +else +echo "FileVault 2 Encryption Status Unknown. Please check." > /private/tmp/filevault2-status.txt +fi +fi +fi +else +if [ "$ENCRYPTION" = "None" ]; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION +if grep -iE 'Backward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" > /private/tmp/filevault2-status.txt +elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Completed" > /private/tmp/filevault2-status.txt +fi +fi +fi +fi +fi +fi +# This section does 10.8-specific checking of the Mac's +# FileVault 2 status + +if [ "$ENCRYPTIONEXTENTS" = "Yes" ]; then +diskutil cs list | grep -E "$EGREP_STRING\Fully Secure" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTSTATUS +if grep -iE 'Yes' $ENCRYPTSTATUS 1>/dev/null; then +echo "FileVault 2 Encryption Complete" > /private/tmp/filevault2-status.txt +else +if grep -iE 'No' $ENCRYPTSTATUS 1>/dev/null; then +diskutil cs list | grep -E "$EGREP_STRING\Conversion Direction" | sed -e's/\|//' | awk '{{print $3}' >> $ENCRYPTDIRECTION +if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" > /private/tmp/filevault2-status.txt + +else +if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" > /private/tmp/filevault2-status.txt +elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then +echo "FileVault 2 Decryption Completed" > /private/tmp/filevault2-status.txt +fi +fi +fi +fi +fi +if [ "$ENCRYPTIONEXTENTS" = "No" ]; then +echo "FileVault 2 Encryption Not Enabled" > /private/tmp/filevault2-status.txt +fi + +# Remove the temp files created during the script + +if [ -f /private/tmp/corestorage.txt ]; then +rm /private/tmp/corestorage.txt +fi + +if [ -f /private/tmp/encrypt_status.txt ]; then +rm /private/tmp/encrypt_status.txt +fi + +if [ -f /private/tmp/encrypt_direction.txt ]; then +rm /private/tmp/encrypt_direction.txt +fi +##END## + +delete filevault2.sh +move __createfile filevault2.sh +// if {not exists folder "/TEM-Data"} +// folder create "/TEM-Data" +// endif +// wait /bin/sh -C filevault2.sh > "{parent folder of data folder of client}/filevault2-status.txt" +// wait /bin/sh -C filevault2.sh >> /private/tmp/filevault2-status.txt +wait /bin/sh filevault2.sh +if {exists file "filevault2-status.txt" of folder "/private/tmp"} +setting "_FileVault2"="{lines of file "filevault2-status.txt" of folder "/private/tmp"}" on "{now}" for client +else +setting "_FileVault2"="FAILED" on "{now}" for client +endif]]> + + + + Click + here + to visit the Home Page the script originates from. + + http://derflounder.wordpress.com/2011/10/13/filevault-2-encryption-status-check-script/ + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes index 56272085b..a45d48870 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LoginHook - Mac (23552).bes @@ -1,35 +1,35 @@ - - - - - Config - Login Window - Clear LoginHook - Mac - This Fixlet removes any defined Login Hooks in macOS.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists strings "LoginHook" of dictionaries of file "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" - Internal - 2017-02-06 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - wait defaults delete /private/var/root/Library/Preferences/com.apple.loginwindow.plist LoginHook - - - + + + + + Config - Login Window - Clear LoginHook - Mac + This Fixlet removes any defined Login Hooks in macOS.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists strings "LoginHook" of dictionaries of file "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + Internal + 2017-02-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults delete /private/var/root/Library/Preferences/com.apple.loginwindow.plist LoginHook + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes index a1ce4be53..805bed581 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Login Window - Clear LogoutHook - Mac (23553).bes @@ -1,35 +1,35 @@ - - - - - Config - Login Window - Clear LogoutHook - Mac - This Fixlet removes any defined Logout Hooks in macOS.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists strings "LogoutHook" of dictionaries of file "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" - Internal - 2017-02-06 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - wait defaults delete /private/var/root/Library/Preferences/com.apple.loginwindow.plist LogoutHook - - - + + + + + Config - Login Window - Clear LogoutHook - Mac + This Fixlet removes any defined Logout Hooks in macOS.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists strings "LogoutHook" of dictionaries of file "/private/var/root/Library/Preferences/com.apple.loginwindow.plist" + Internal + 2017-02-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults delete /private/var/root/Library/Preferences/com.apple.loginwindow.plist LogoutHook + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes index 54456959c..35f50f35f 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Balanced - Mac (24028).bes @@ -1,43 +1,43 @@ - - - - - Config - Power Policy - Set to Balanced - Mac - This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

-

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

-

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> - mac of operating system - Internal - 2016-05-02 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here - - wait pmset -c displaysleep 25 - wait pmset -b displaysleep 15 - wait pmset -c disksleep 30 - wait pmset -b disksleep 20 - wait pmset -c sleep 30 - wait pmset -b sleep 20 - - - - + + + + + Config - Power Policy - Set to Balanced - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 25 + wait pmset -b displaysleep 15 + wait pmset -c disksleep 30 + wait pmset -b disksleep 20 + wait pmset -c sleep 30 + wait pmset -b sleep 20 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes index 1e202ecfc..bcca8a531 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to High Performance - Mac (24029).bes @@ -1,43 +1,43 @@ - - - - - Config - Power Policy - Set to High Performance - Mac - This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

-

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

-

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> - mac of operating system - Internal - 2016-05-02 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here - - wait pmset -c displaysleep 45 - wait pmset -b displaysleep 30 - wait pmset -c disksleep 30 - wait pmset -b disksleep 20 - wait pmset -c sleep 60 - wait pmset -b sleep 45 - - - - + + + + + Config - Power Policy - Set to High Performance - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 45 + wait pmset -b displaysleep 30 + wait pmset -c disksleep 30 + wait pmset -b disksleep 20 + wait pmset -c sleep 60 + wait pmset -b sleep 45 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes index 17b0b3c12..e7ddb7e77 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Power Saver - Mac (24030).bes @@ -1,43 +1,43 @@ - - - - - Config - Power Policy - Set to Power Saver - Mac - This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

-

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

-

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> - mac of operating system - Internal - 2016-05-02 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here - - wait pmset -c displaysleep 20 - wait pmset -b displaysleep 5 - wait pmset -c disksleep 30 - wait pmset -b disksleep 15 - wait pmset -c sleep 60 - wait pmset -b sleep 15 - - - - + + + + + Config - Power Policy - Set to Power Saver - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 20 + wait pmset -b displaysleep 5 + wait pmset -c disksleep 30 + wait pmset -b disksleep 15 + wait pmset -c sleep 60 + wait pmset -b sleep 15 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes index 6d3138134..9d9ef8b77 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Power Policy - Set to Presentation Mode - Mac (24031).bes @@ -1,43 +1,43 @@ - - - - - Config - Power Policy - Set to Presentation Mode - Mac - This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

-

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

-

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> - mac of operating system - Internal - 2016-05-02 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here - - wait pmset -c displaysleep 0 - wait pmset -b displaysleep 0 - wait pmset -c disksleep 15 - wait pmset -b disksleep 15 - wait pmset -c sleep 0 - wait pmset -b sleep 0 - - - - + + + + + Config - Power Policy - Set to Presentation Mode - Mac + This Fixlet modifies the Power Policy on the device. We are soliciting feedback on the best way to configure these.

+

If you have thoughts please reply here: https://github.com/strawgate/C3-Power-Management/issues/4

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + mac of operating system + Internal + 2016-05-02 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + + wait pmset -c displaysleep 0 + wait pmset -b displaysleep 0 + wait pmset -c disksleep 15 + wait pmset -b disksleep 15 + wait pmset -c sleep 0 + wait pmset -b sleep 0 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes index bf0dc6a92..22de3cddf 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Disable - Mac (23798).bes @@ -1,37 +1,37 @@ - - - - - Config - Wake on Lan - Disable - Mac - This disables Wake on Lan on a Mac.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists integers "Wake On LAN" whose (it != 0) of dictionaries of values of entries of dictionaries "Custom Profile" of dictionaries of files "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" - BIOS Settings - Internal - 2016-04-29 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to disable Wake On LAN on a Mac. - - wait pmset -a womp 0 - - - - + + + + + Config - Wake on Lan - Disable - Mac + This disables Wake on Lan on a Mac.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists integers "Wake On LAN" whose (it != 0) of dictionaries of values of entries of dictionaries "Custom Profile" of dictionaries of files "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" + BIOS Settings + Internal + 2016-04-29 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to disable Wake On LAN on a Mac. + + wait pmset -a womp 0 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes index de3983597..bb4ed6d44 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Wake on Lan - Enable - Mac (23799).bes @@ -1,37 +1,37 @@ - - - - - Config - Wake on Lan - Enable - Mac - This enables Wake on Lan on a Mac.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists dictionaries whose (not exists integers "Wake On LAN" of it or exists integers "Wake On LAN" whose (it != 1) of it) of values of entries of dictionaries "Custom Profile" of dictionaries of files "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" - BIOS Settings - Internal - 2016-04-29 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to enable Wake On LAN on a Mac. - - wait pmset -a womp 1 - - - - + + + + + Config - Wake on Lan - Enable - Mac + This enables Wake on Lan on a Mac.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists dictionaries whose (not exists integers "Wake On LAN" of it or exists integers "Wake On LAN" whose (it != 1) of it) of values of entries of dictionaries "Custom Profile" of dictionaries of files "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" + BIOS Settings + Internal + 2016-04-29 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to enable Wake On LAN on a Mac. + + wait pmset -a womp 1 + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes b/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes index 59c546e8e..bc915594c 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Config - Wireless Adapter - Disable - Mac (24026).bes @@ -1,35 +1,35 @@ - - - - - Config - Wireless Adapter - Disable - Mac - - mac of operating system - = "10.10"]]> - boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = True - Internal - 2017-03-24 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - wait networksetup -setairportpower airport off - - - + + + + + Config - Wireless Adapter - Disable - Mac + + mac of operating system + = "10.10"]]> + boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = True + Internal + 2017-03-24 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait networksetup -setairportpower airport off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes b/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes index 8a25382da..c8a35a18c 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Delete user (macOS) (27359).bes @@ -1,84 +1,84 @@ - - - - - Delete user (macOS) - Enter username to delete
Returns exit code 44 if supplied user is not found
Returns exit code 3 if user was not successfully deleted (typically if supplied user is the only remaining account with a secure token)]]> - mac of operating system - Internal - 2024-09-01 - - x-fixlet-modification-time - Sun, 08 Sep 2024 21:01:04 +0000 - - BESC - - - Click - here - to deploy this action. - - > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" - -action parameter query "user" with description "Enter username to delete" - -delete __createfile -delete "{parameter "scriptName"}" -createfile until _EOF_ -#!/bin/zsh - -toDeleteUser="{parameter "user"}" - -if id "$toDeleteUser" >/dev/null 2>&1; then - echo "User $toDeleteUser found" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' -else - echo "User $toDeleteUser not found" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 44 -fi - -sysadminctl -deleteUser "$toDeleteUser" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' -sleep 5 - -if id "$toDeleteUser" >/dev/null 2>&1; then - echo "User $toDeleteUser still found, not successfully deleted" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 3 -else - echo "User $toDeleteUser no longer exists" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' -fi -exit 0 -_EOF_ -copy "__createfile" "{parameter "scriptName"}" -wait chmod +x "{parameter "scriptName"}" -wait /bin/zsh "{parameter "scriptName"}" -parameter "exitCode" = "{exit code of action}" -delete __createfile -delete "{parameter "scriptName"}" - -wait sh -c "echo Return Code: {parameter "exitCode"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" - -if {parameter "exitCode" != "0"} -exit {parameter "exitCode"} -endif - -exit {parameter "exitCode"}]]> - - - - + + + + + Delete user (macOS) + Enter username to delete
Returns exit code 44 if supplied user is not found
Returns exit code 3 if user was not successfully deleted (typically if supplied user is the only remaining account with a secure token)]]> + mac of operating system + Internal + 2024-09-01 + + x-fixlet-modification-time + Sun, 08 Sep 2024 21:01:04 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +action parameter query "user" with description "Enter username to delete" + +delete __createfile +delete "{parameter "scriptName"}" +createfile until _EOF_ +#!/bin/zsh + +toDeleteUser="{parameter "user"}" + +if id "$toDeleteUser" >/dev/null 2>&1; then + echo "User $toDeleteUser found" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +else + echo "User $toDeleteUser not found" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 44 +fi + +sysadminctl -deleteUser "$toDeleteUser" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +sleep 5 + +if id "$toDeleteUser" >/dev/null 2>&1; then + echo "User $toDeleteUser still found, not successfully deleted" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 3 +else + echo "User $toDeleteUser no longer exists" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +fi +exit 0 +_EOF_ +copy "__createfile" "{parameter "scriptName"}" +wait chmod +x "{parameter "scriptName"}" +wait /bin/zsh "{parameter "scriptName"}" +parameter "exitCode" = "{exit code of action}" +delete __createfile +delete "{parameter "scriptName"}" + +wait sh -c "echo Return Code: {parameter "exitCode"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +if {parameter "exitCode" != "0"} +exit {parameter "exitCode"} +endif + +exit {parameter "exitCode"}]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes b/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes index 407aa6c2a..e650df791 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Escrow Bootstrap Token (macOS) (27380).bes @@ -1,122 +1,122 @@ - - - - - Escrow Bootstrap Token (macOS) - -
-

This fixlet creates or updates the Bootstrap Token APFS record and escrows the information to the device's MDM server.

-

Provided credentials MUST be for an account with a secure token. If account does not have a secure token, fixlet will exit with exit code 30.

]]> - mac of operating system - Internal - 2025-04-17 - - parametermetadatatag - { "username": { "Name": "username", "Title": "Username:", "Description": "Username of an account with a secure token", "UIType": "Textbox", "Required":"1" }, "password": { "Name": "password", "Title": "Password:", "Description": "User's password", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password" }, "password2": { "Name": "password2", "Title": "Verify password:", "Description": "Retype password", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password", "CustomValidator": "validatePassword" } } - - - ParameterValidatorTag - { validatePassword : function (validationObj, metadataObj) { var currentValue = validationObj["currentValue"]; var parentValue = FixletUtils.getElementText('password', metadataObj); if ( currentValue !== parentValue ) return "The passwords entered do not match!"; } } - - - x-fixlet-modification-time - Fri, 18 Apr 2025 05:54:29 +0000 - - BESC - - - Click - here - to deploy this action. - - > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" - -delete __createfile -delete "__Download/{parameter "scriptName"}" -createfile until _end_ -#!/bin/zsh -adminUser="{parameter "username" of action}" -precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) -if [[ "$precheck" == *"ENABLED"* ]]; then - echo "Provided user $adminUser has a secure token. Continuing..." >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 0 -elif [[ "$precheck" == *"DISABLED"* ]]; then - echo "Provided user $adminUser does not have a secure token" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 30 -else - echo "Error checking $adminUser secure token status" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 31 -fi -_end_ -copy "__createfile" "__Download/{parameter "scriptName"}" -wait chmod +x "__Download/{parameter "scriptName"}" -wait /bin/zsh "__Download/{parameter "scriptName"}" -parameter "error" = "{exit code of action}" -delete __createfile -delete "__Download/{parameter "scriptName"}" - -if {parameter "error" is "0"} -wait bash -c "profiles install -type bootstraptoken -user '{parameter "username" of action}' -password '{parameter "password" of action}' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -parameter "error2" = "{exit code of action}" -wait sh -c "echo Return Code: {parameter "error2"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -endif - -if {parameter "error" != "0"} -wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -exit {parameter "error"} -endif - -exit {parameter "error2"} - -]]> - - - - + + + + + Escrow Bootstrap Token (macOS) + +
+

This fixlet creates or updates the Bootstrap Token APFS record and escrows the information to the device's MDM server.

+

Provided credentials MUST be for an account with a secure token. If account does not have a secure token, fixlet will exit with exit code 30.

]]> + mac of operating system + Internal + 2025-04-17 + + parametermetadatatag + { "username": { "Name": "username", "Title": "Username:", "Description": "Username of an account with a secure token", "UIType": "Textbox", "Required":"1" }, "password": { "Name": "password", "Title": "Password:", "Description": "User's password", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password" }, "password2": { "Name": "password2", "Title": "Verify password:", "Description": "Retype password", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password", "CustomValidator": "validatePassword" } } + + + ParameterValidatorTag + { validatePassword : function (validationObj, metadataObj) { var currentValue = validationObj["currentValue"]; var parentValue = FixletUtils.getElementText('password', metadataObj); if ( currentValue !== parentValue ) return "The passwords entered do not match!"; } } + + + x-fixlet-modification-time + Fri, 18 Apr 2025 05:54:29 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +delete __createfile +delete "__Download/{parameter "scriptName"}" +createfile until _end_ +#!/bin/zsh +adminUser="{parameter "username" of action}" +precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) +if [[ "$precheck" == *"ENABLED"* ]]; then + echo "Provided user $adminUser has a secure token. Continuing..." >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 0 +elif [[ "$precheck" == *"DISABLED"* ]]; then + echo "Provided user $adminUser does not have a secure token" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 30 +else + echo "Error checking $adminUser secure token status" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 31 +fi +_end_ +copy "__createfile" "__Download/{parameter "scriptName"}" +wait chmod +x "__Download/{parameter "scriptName"}" +wait /bin/zsh "__Download/{parameter "scriptName"}" +parameter "error" = "{exit code of action}" +delete __createfile +delete "__Download/{parameter "scriptName"}" + +if {parameter "error" is "0"} +wait bash -c "profiles install -type bootstraptoken -user '{parameter "username" of action}' -password '{parameter "password" of action}' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +parameter "error2" = "{exit code of action}" +wait sh -c "echo Return Code: {parameter "error2"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +endif + +if {parameter "error" != "0"} +wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +exit {parameter "error"} +endif + +exit {parameter "error2"} + +]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes b/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes index e4d99ef93..856f18ef1 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Firmware Password for Mac OS X (5033).bes @@ -1,224 +1,224 @@ - - - - - Firmware Password for Mac OS X - This fixlet checks to see if the firmware password is set (an optionally sets the password) for a Mac.

-

Because of the potential impact to performance, I only execute this Task once every 6 hours when using it to audit the password status. This was deemed frequent enough to appropriately record the encryption status, but not so frequent that it adversely impacted overall performance of the targeted computers or their Agents.

]]> - (operating system as string starts with "Mac OS X") - FIRMWARE STATUS - Internal - 2014-07-27 - - bigfixme-added-time - Mon, 19 Aug 2013 11:08:07 GMT - - - bigfixme-modification-time - Mon, 19 Aug 2013 11:17:29 GMT - - - bigfixme-keywords - FileVault FileVault2 Macintosh Encryption - - - x-fixlet-modification-time - Fri, 17 Apr 2015 23:00:21 +0000 - - BESC - - - Click - here - to Audit the&nbsp;Firmware password. - - /private/tmp/firmware_status.txt -exit 0 -fi -/usr/bin/hdiutil attach -nobrowse -quiet /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg -cp "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`/Applications/Utilities/Firmware Password Utility.app/Contents/Resources/setregproptool" /usr/bin -/usr/bin/hdiutil detach "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`" -force -/usr/sbin/diskutil umount Recovery\ HD -fi - - -/usr/bin/setregproptool -c -FIRMWARESET=`echo "$?"` -if [ $FIRMWARESET -eq 0 ]; then -echo "Password Set in Firmware" > /private/tmp/firmware_status.txt -else -SYSTEMUSESNVRAM=`nvram security-mode` -if [ -n "$SYSTEMUSESNVRAM" ]; then -NVRAMPASSWORD=`nvram security-password` -if [ -n "$NVRAMPASSWORD" ]; then -echo "Password Set in NVRAM" > /private/tmp/firmware_status.txt -else -echo "Password NOT Set in NVRAM" > /private/tmp/firmware_status.txt -fi -else -echo "Password NOT Set in Firmware" > /private/tmp/firmware_status.txt -fi -fi - -exit 0 - -##END## - -delete fwstatus.sh -move __createfile fwstatus.sh -wait /bin/sh fwstatus.sh -delete fwstatus.sh - -if {exists file "firmware_status.txt" of folder "/private/tmp"} -setting "_FirmwarePassword"="{lines of file "firmware_status.txt" of folder "/private/tmp"}" on "{now}" for client -else -setting "_FirmwarePassword"="FAILED" on "{now}" for client -endif -]]> - - - - - Click - here - to Set the Firmware password. - - /private/tmp/firmware_status.txt -exit 1 -fi -/usr/bin/hdiutil attach -nobrowse -quiet /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg -cp "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`/Applications/Utilities/Firmware Password Utility.app/Contents/Resources/setregproptool" /usr/bin -/usr/bin/hdiutil detach "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`" -force -/usr/sbin/diskutil umount Recovery\ HD -fi - -/usr/bin/setregproptool -c -FIRMWARESET=`echo "$?"` -if [ $FIRMWARESET -eq 0 ]; then -echo "Password already in Firmware, can't change" > /private/tmp/firmware_status.txt -exit 1 -else -SYSTEMUSESNVRAM=`nvram security-mode` -if [ -n "$SYSTEMUSESNVRAM" ]; then -/usr/bin/python efipw.py -p "{parameter "PASSWORD"}" -else -/usr/bin/setregproptool -m command -p "{parameter "PASSWORD"}" -fi -fi - - -/usr/bin/setregproptool -c -FIRMWARESET=`echo "$?"` -if [ $FIRMWARESET -eq 0 ]; then -echo "Password Set in Firmware" > /private/tmp/firmware_status.txt -else -SYSTEMUSESNVRAM=`nvram security-mode` -if [ -n "$SYSTEMUSESNVRAM" ]; then -NVRAMPASSWORD=`nvram security-password` -if [ -n "$NVRAMPASSWORD" ]; then -echo "Password Set in NVRAM" > /private/tmp/firmware_status.txt -else -echo "Password NOT Set in NVRAM" > /private/tmp/firmware_status.txt -fi -else -echo "Password NOT Set in Firmware" > /private/tmp/firmware_status.txt -fi -fi - - -##END## - -delete fwstatus.sh -move __createfile fwstatus.sh - -createfile until ##END## - -#!/usr/bin/env python -""" - EFIPW (C) 2010 by Paul Makowski (my.hndl@gmail.com) - http://paulmakowski.wordpress.com/ - License: GPLv3 -""" -from optparse import OptionParser -import os -import binascii - -parser = OptionParser(version="%prog 0.2b") - -if os.geteuid(): parser.error("Must be run as root. (e.g. sudo ./efipw.py [options])") - -parser.add_option("-p", "--password", dest="newPassword", metavar="PASSWORD", type="string", help="set new EFI password") - -(options, args) = parser.parse_args() - -# lolCrypt: Apple's lolzy encryption function -def lolCrypt(input): - output = "" - for i in range(0, len(input)): output += (chr(ord(input[i]) ^ 170)) # 170 in decimal is 10101010 in binary; this is the key...don't tell anyone ;) - return output - -def splitLen(seq, length): return [seq[i:i+length] for i in range(0, len(seq), length)] - -if options.newPassword: - newMode = "command" - if len(options.newPassword) > 48: print "Password cannot be longer than 48 characters; new password not set." - else: - newPassword = splitLen(binascii.hexlify(lolCrypt(options.newPassword)), 2) - for i in range(len(newPassword)): newPassword[i] = '%' + newPassword[i] - newPassword = ''.join(newPassword) - p = os.popen('nvram security-password=' + newPassword,"r") - p = os.popen('nvram security-mode=' + newMode,"r") - - -##END## - -delete efipw.py -move __createfile efipw.py - - -wait /bin/sh fwstatus.sh -//secure remove this file as it has a password in it -wait /usr/bin/srm fwstatus.sh -wait /usr/bin/srm efipw.py - -if {exists file "firmware_status.txt" of folder "/private/tmp"} -setting "_FirmwarePassword"="{lines of file "firmware_status.txt" of folder "/private/tmp"}" on "{now}" for client -else -setting "_FirmwarePassword"="FAILED" on "{now}" for client -endif]]> - - - - + + + + + Firmware Password for Mac OS X + This fixlet checks to see if the firmware password is set (an optionally sets the password) for a Mac.

+

Because of the potential impact to performance, I only execute this Task once every 6 hours when using it to audit the password status. This was deemed frequent enough to appropriately record the encryption status, but not so frequent that it adversely impacted overall performance of the targeted computers or their Agents.

]]> + (operating system as string starts with "Mac OS X") + FIRMWARE STATUS + Internal + 2014-07-27 + + bigfixme-added-time + Mon, 19 Aug 2013 11:08:07 GMT + + + bigfixme-modification-time + Mon, 19 Aug 2013 11:17:29 GMT + + + bigfixme-keywords + FileVault FileVault2 Macintosh Encryption + + + x-fixlet-modification-time + Fri, 17 Apr 2015 23:00:21 +0000 + + BESC + + + Click + here + to Audit the&nbsp;Firmware password. + + /private/tmp/firmware_status.txt +exit 0 +fi +/usr/bin/hdiutil attach -nobrowse -quiet /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg +cp "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`/Applications/Utilities/Firmware Password Utility.app/Contents/Resources/setregproptool" /usr/bin +/usr/bin/hdiutil detach "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`" -force +/usr/sbin/diskutil umount Recovery\ HD +fi + + +/usr/bin/setregproptool -c +FIRMWARESET=`echo "$?"` +if [ $FIRMWARESET -eq 0 ]; then +echo "Password Set in Firmware" > /private/tmp/firmware_status.txt +else +SYSTEMUSESNVRAM=`nvram security-mode` +if [ -n "$SYSTEMUSESNVRAM" ]; then +NVRAMPASSWORD=`nvram security-password` +if [ -n "$NVRAMPASSWORD" ]; then +echo "Password Set in NVRAM" > /private/tmp/firmware_status.txt +else +echo "Password NOT Set in NVRAM" > /private/tmp/firmware_status.txt +fi +else +echo "Password NOT Set in Firmware" > /private/tmp/firmware_status.txt +fi +fi + +exit 0 + +##END## + +delete fwstatus.sh +move __createfile fwstatus.sh +wait /bin/sh fwstatus.sh +delete fwstatus.sh + +if {exists file "firmware_status.txt" of folder "/private/tmp"} +setting "_FirmwarePassword"="{lines of file "firmware_status.txt" of folder "/private/tmp"}" on "{now}" for client +else +setting "_FirmwarePassword"="FAILED" on "{now}" for client +endif +]]> + + + + + Click + here + to Set the Firmware password. + + /private/tmp/firmware_status.txt +exit 1 +fi +/usr/bin/hdiutil attach -nobrowse -quiet /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg +cp "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`/Applications/Utilities/Firmware Password Utility.app/Contents/Resources/setregproptool" /usr/bin +/usr/bin/hdiutil detach "/Volumes/`ls -b /Volumes/ | grep "OS X Base System"`" -force +/usr/sbin/diskutil umount Recovery\ HD +fi + +/usr/bin/setregproptool -c +FIRMWARESET=`echo "$?"` +if [ $FIRMWARESET -eq 0 ]; then +echo "Password already in Firmware, can't change" > /private/tmp/firmware_status.txt +exit 1 +else +SYSTEMUSESNVRAM=`nvram security-mode` +if [ -n "$SYSTEMUSESNVRAM" ]; then +/usr/bin/python efipw.py -p "{parameter "PASSWORD"}" +else +/usr/bin/setregproptool -m command -p "{parameter "PASSWORD"}" +fi +fi + + +/usr/bin/setregproptool -c +FIRMWARESET=`echo "$?"` +if [ $FIRMWARESET -eq 0 ]; then +echo "Password Set in Firmware" > /private/tmp/firmware_status.txt +else +SYSTEMUSESNVRAM=`nvram security-mode` +if [ -n "$SYSTEMUSESNVRAM" ]; then +NVRAMPASSWORD=`nvram security-password` +if [ -n "$NVRAMPASSWORD" ]; then +echo "Password Set in NVRAM" > /private/tmp/firmware_status.txt +else +echo "Password NOT Set in NVRAM" > /private/tmp/firmware_status.txt +fi +else +echo "Password NOT Set in Firmware" > /private/tmp/firmware_status.txt +fi +fi + + +##END## + +delete fwstatus.sh +move __createfile fwstatus.sh + +createfile until ##END## + +#!/usr/bin/env python +""" + EFIPW (C) 2010 by Paul Makowski (my.hndl@gmail.com) + http://paulmakowski.wordpress.com/ + License: GPLv3 +""" +from optparse import OptionParser +import os +import binascii + +parser = OptionParser(version="%prog 0.2b") + +if os.geteuid(): parser.error("Must be run as root. (e.g. sudo ./efipw.py [options])") + +parser.add_option("-p", "--password", dest="newPassword", metavar="PASSWORD", type="string", help="set new EFI password") + +(options, args) = parser.parse_args() + +# lolCrypt: Apple's lolzy encryption function +def lolCrypt(input): + output = "" + for i in range(0, len(input)): output += (chr(ord(input[i]) ^ 170)) # 170 in decimal is 10101010 in binary; this is the key...don't tell anyone ;) + return output + +def splitLen(seq, length): return [seq[i:i+length] for i in range(0, len(seq), length)] + +if options.newPassword: + newMode = "command" + if len(options.newPassword) > 48: print "Password cannot be longer than 48 characters; new password not set." + else: + newPassword = splitLen(binascii.hexlify(lolCrypt(options.newPassword)), 2) + for i in range(len(newPassword)): newPassword[i] = '%' + newPassword[i] + newPassword = ''.join(newPassword) + p = os.popen('nvram security-password=' + newPassword,"r") + p = os.popen('nvram security-mode=' + newMode,"r") + + +##END## + +delete efipw.py +move __createfile efipw.py + + +wait /bin/sh fwstatus.sh +//secure remove this file as it has a password in it +wait /usr/bin/srm fwstatus.sh +wait /usr/bin/srm efipw.py + +if {exists file "firmware_status.txt" of folder "/private/tmp"} +setting "_FirmwarePassword"="{lines of file "firmware_status.txt" of folder "/private/tmp"}" on "{now}" for client +else +setting "_FirmwarePassword"="FAILED" on "{now}" for client +endif]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes b/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes index 9c2cf60be..4bdaa4164 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Grant Secure Token (Mac) (27341).bes @@ -1,151 +1,151 @@ - - - - - Grant Secure Token (Mac) - -
-

This fixlet uses an existing account with a secure token to grant a secure token to another account. Additionally, "secure parameters" are used to encrypt the passwords and securely transfer them to the endpoint.

-

If the granting user is not an administrator, they will be temporarily elevated for the duration of the script, and then returned to a standard user account.

-

Logs are written to /Library/Application Support/BigFix/BES Agent/__BESData/__Global/SWDDeployData/SWD_DeploymentResults.log

-
]]> - mac of operating system - Internal - 2024-01-11 - - parametermetadatatag - { "aUser": { "Name": "adminUser", "Title": "Granting user name:", "Description": "Enter the username of a user with a secure token", "UIType": "Textbox", "Required":"1" }, "aPass": { "Name": "adminPass", "Title": "Granting user password:", "Description": "Enter the password of a user with a secure token", "UIType": "Textbox", "Encrypt" : "true", "SubUIType" : "Password" }, "rUser": { "Name": "receiverUser", "Title": "Receiving user name:", "Description": "Enter the username of a user without a secure token", "UIType": "Textbox", "Required":"1" }, "rPass": { "Name": "receiverPass", "Title": "Receiving user password:", "Description": "Enter the password of a user without a secure token", "UIType": "Textbox", "Encrypt" : "true", "SubUIType" : "Password" } } - - - x-fixlet-modification-time - Wed, 10 Apr 2024 16:33:27 +0000 - - BESC - - - Click - here - to deploy this action. - - > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" - -delete __createfile -delete "__Download/broker.sh" -createfile until _end_ -#/!bin/zsh - -adminUser="{parameter "adminUser" of action}" -adminPass="{parameter "adminPass" of action}" -receiverUser="{parameter "receiverUser" of action}" -receiverPass="{parameter "receiverPass" of action}" - -precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) -if [[ "$precheck" == *"ENABLED"* ]]; then - echo "Granting user $adminUser has a secure token. Continuing..." >> "{parameter "logFolder"}/{parameter "logFile"}" -elif [[ "$precheck" == *"DISABLED"* ]]; then - echo "Granting user $adminUser does not have a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" - exit 1 -else - echo "Error checking $adminUser secure token status" >> "{parameter "logFolder"}/{parameter "logFile"}" - exit 2 -fi - -if [ -z "$adminPass" ]; then - adminPass="-" -fi - -if [ -z "$receiverPass" ]; then - receiverPass="-" -fi - -resetUser=false -if id -Gn $adminUser | grep -q -w admin; -then - echo "Granting user $adminUser is an administrator. Continuing..." >> "{parameter "logFolder"}/{parameter "logFile"}" -else - echo "Granting user $adminUser is NOT an administrator. Temporarily elevating..." >> "{parameter "logFolder"}/{parameter "logFile"}" - dscl . -merge /Groups/admin GroupMembership $adminUser >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 - resetUser=true -fi - -yes "" | sysadminctl -secureTokenOn $receiverUser -password $receiverPass -adminUser $adminUser -adminPassword $adminPass >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 - -if [ "$resetUser" = true ]; then - echo "Returning $adminUser to standard user" >> "{parameter "logFolder"}/{parameter "logFile"}" - dseditgroup -o edit -d $adminUser -t user admin >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 -fi - -check=$(sysadminctl -secureTokenStatus $receiverUser 2>&1) -if [[ "$check" == *"ENABLED"* ]]; then - echo "Target user $receiverUser has a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" - exit 0 -elif [[ "$check" == *"DISABLED"* ]]; then - echo "Target user $receiverUser does not have a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" - exit 1 -else - echo "Error checking $receiverUser secure token status" >> "{parameter "logFolder"}/{parameter "logFile"}" - exit 2 -fi -_end_ -copy "__createfile" "__Download/broker.sh" -wait chmod +x "__Download/broker.sh" -wait /bin/zsh "__Download/broker.sh" -parameter "error" = "{exit code of action}" -delete __createfile -delete "__Download/broker.sh" - -if {parameter "error" != "0"} -exit {parameter "error"} -endif - -exit {parameter "error"}]]> - - - - + + + + + Grant Secure Token (Mac) + +
+

This fixlet uses an existing account with a secure token to grant a secure token to another account. Additionally, "secure parameters" are used to encrypt the passwords and securely transfer them to the endpoint.

+

If the granting user is not an administrator, they will be temporarily elevated for the duration of the script, and then returned to a standard user account.

+

Logs are written to /Library/Application Support/BigFix/BES Agent/__BESData/__Global/SWDDeployData/SWD_DeploymentResults.log

+
]]> + mac of operating system + Internal + 2024-01-11 + + parametermetadatatag + { "aUser": { "Name": "adminUser", "Title": "Granting user name:", "Description": "Enter the username of a user with a secure token", "UIType": "Textbox", "Required":"1" }, "aPass": { "Name": "adminPass", "Title": "Granting user password:", "Description": "Enter the password of a user with a secure token", "UIType": "Textbox", "Encrypt" : "true", "SubUIType" : "Password" }, "rUser": { "Name": "receiverUser", "Title": "Receiving user name:", "Description": "Enter the username of a user without a secure token", "UIType": "Textbox", "Required":"1" }, "rPass": { "Name": "receiverPass", "Title": "Receiving user password:", "Description": "Enter the password of a user without a secure token", "UIType": "Textbox", "Encrypt" : "true", "SubUIType" : "Password" } } + + + x-fixlet-modification-time + Wed, 10 Apr 2024 16:33:27 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +delete __createfile +delete "__Download/broker.sh" +createfile until _end_ +#/!bin/zsh + +adminUser="{parameter "adminUser" of action}" +adminPass="{parameter "adminPass" of action}" +receiverUser="{parameter "receiverUser" of action}" +receiverPass="{parameter "receiverPass" of action}" + +precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) +if [[ "$precheck" == *"ENABLED"* ]]; then + echo "Granting user $adminUser has a secure token. Continuing..." >> "{parameter "logFolder"}/{parameter "logFile"}" +elif [[ "$precheck" == *"DISABLED"* ]]; then + echo "Granting user $adminUser does not have a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 1 +else + echo "Error checking $adminUser secure token status" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 2 +fi + +if [ -z "$adminPass" ]; then + adminPass="-" +fi + +if [ -z "$receiverPass" ]; then + receiverPass="-" +fi + +resetUser=false +if id -Gn $adminUser | grep -q -w admin; +then + echo "Granting user $adminUser is an administrator. Continuing..." >> "{parameter "logFolder"}/{parameter "logFile"}" +else + echo "Granting user $adminUser is NOT an administrator. Temporarily elevating..." >> "{parameter "logFolder"}/{parameter "logFile"}" + dscl . -merge /Groups/admin GroupMembership $adminUser >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 + resetUser=true +fi + +yes "" | sysadminctl -secureTokenOn $receiverUser -password $receiverPass -adminUser $adminUser -adminPassword $adminPass >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 + +if [ "$resetUser" = true ]; then + echo "Returning $adminUser to standard user" >> "{parameter "logFolder"}/{parameter "logFile"}" + dseditgroup -o edit -d $adminUser -t user admin >> "{parameter "logFolder"}/{parameter "logFile"}" 2>&1 +fi + +check=$(sysadminctl -secureTokenStatus $receiverUser 2>&1) +if [[ "$check" == *"ENABLED"* ]]; then + echo "Target user $receiverUser has a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 0 +elif [[ "$check" == *"DISABLED"* ]]; then + echo "Target user $receiverUser does not have a secure token" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 1 +else + echo "Error checking $receiverUser secure token status" >> "{parameter "logFolder"}/{parameter "logFile"}" + exit 2 +fi +_end_ +copy "__createfile" "__Download/broker.sh" +wait chmod +x "__Download/broker.sh" +wait /bin/zsh "__Download/broker.sh" +parameter "error" = "{exit code of action}" +delete __createfile +delete "__Download/broker.sh" + +if {parameter "error" != "0"} +exit {parameter "error"} +endif + +exit {parameter "error"}]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes b/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes index e65a5c5e3..96bbbb076 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Ignore _macOS Catalina_ update - MacOS (26653).bes @@ -1,43 +1,43 @@ - - - - - Ignore "macOS Catalina" update - MacOS - - mac of operating system - - not exists strings whose(it = "macOS Catalina") of values of arrays "InactiveUpdates" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" - Internal - 2019-10-08 - - x-fixlet-modification-time - Tue, 08 Oct 2019 19:36:39 +0000 - - BESC - - - Click - here - to deploy this action. - - -// TODO: test this part -wait softwareupdate --ignore "macOS Catalina" - -// Related: -// - https://bigfix.me/relevance/details/3022811 -// - https://babodee.wordpress.com/2018/12/11/ignore-a-specific-macos-update-using-softwareupdate/ - - - - - + + + + + Ignore "macOS Catalina" update - MacOS + + mac of operating system + + not exists strings whose(it = "macOS Catalina") of values of arrays "InactiveUpdates" of dictionaries of files "/Library/Preferences/com.apple.SoftwareUpdate.plist" + Internal + 2019-10-08 + + x-fixlet-modification-time + Tue, 08 Oct 2019 19:36:39 +0000 + + BESC + + + Click + here + to deploy this action. + + +// TODO: test this part +wait softwareupdate --ignore "macOS Catalina" + +// Related: +// - https://bigfix.me/relevance/details/3022811 +// - https://babodee.wordpress.com/2018/12/11/ignore-a-specific-macos-update-using-softwareupdate/ + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes index be85541b6..2f91b2d5e 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Shutdown Now - Win_Mac (23775).bes @@ -1,42 +1,42 @@ - - - - - Invoke - 1E NightWatchman Shutdown Now - Win\Mac - This Fixlet uses 1E NightWatchman to shutdown the system.

-

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> - windows of operating system or mac of operating system - if (Windows of Operating System) then (exists file "NightWatchman.exe" of folder (preceding text of last "\" of (it as string) of value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry)) else (exists file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") - Internal - 2016-09-06 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - parameter "1ECLI"="{if (windows of operating system) then (pathname of file "NightWatchman.exe" of folder (value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry as string)) else (pathname of file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") }" - -if {Windows of Operating System} - wait "{parameter "1ECLI"}" -shutdownnow -CountdownSecs=90 -elseif {Mac of Operating System} - wait "{parameter "1ECLI"}" -shutdownnow CountdownSecs 90 -endif - - - - + + + + + Invoke - 1E NightWatchman Shutdown Now - Win\Mac + This Fixlet uses 1E NightWatchman to shutdown the system.

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + windows of operating system or mac of operating system + if (Windows of Operating System) then (exists file "NightWatchman.exe" of folder (preceding text of last "\" of (it as string) of value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry)) else (exists file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") + Internal + 2016-09-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + parameter "1ECLI"="{if (windows of operating system) then (pathname of file "NightWatchman.exe" of folder (value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry as string)) else (pathname of file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") }" + +if {Windows of Operating System} + wait "{parameter "1ECLI"}" -shutdownnow -CountdownSecs=90 +elseif {Mac of Operating System} + wait "{parameter "1ECLI"}" -shutdownnow CountdownSecs 90 +endif + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes index d9e6ef060..fe4412df9 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - 1E NightWatchman Standby Now - Win_Mac (23776).bes @@ -1,42 +1,42 @@ - - - - - Invoke - 1E NightWatchman Standby Now - Win\Mac - This Fixlet uses 1E NightWatchman to sleep the system.

-

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> - windows of operating system or mac of operating system - if (Windows of Operating System) then (exists file "NightWatchman.exe" of folder (preceding text of last "\" of (it as string) of value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry)) else (exists file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") - Internal - 2016-09-06 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - parameter "1ECLI"="{if (windows of operating system) then (pathname of file "NightWatchman.exe" of folder (value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry as string)) else (pathname of file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") }" - -if {Windows of Operating System} - wait "{parameter "1ECLI"}" -standbynow -CountdownSecs=90 -elseif {Mac of Operating System} - wait "{parameter "1ECLI"}" -standbynow CountdownSecs 90 -endif - - - - + + + + + Invoke - 1E NightWatchman Standby Now - Win\Mac + This Fixlet uses 1E NightWatchman to sleep the system.

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + windows of operating system or mac of operating system + if (Windows of Operating System) then (exists file "NightWatchman.exe" of folder (preceding text of last "\" of (it as string) of value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry)) else (exists file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") + Internal + 2016-09-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + parameter "1ECLI"="{if (windows of operating system) then (pathname of file "NightWatchman.exe" of folder (value "InstallationDirectory" of key "1E\NightWatchman" of key "HKEY_LOCAL_MACHINE\Software" of native registry as string)) else (pathname of file "nightwatchman" of folder "/Library/Application Support/1E/NightWatchman") }" + +if {Windows of Operating System} + wait "{parameter "1ECLI"}" -standbynow -CountdownSecs=90 +elseif {Mac of Operating System} + wait "{parameter "1ECLI"}" -standbynow CountdownSecs 90 +endif + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes index 8369709a2..8eb4983d9 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Install - Mac (24108).bes @@ -1,40 +1,40 @@ - - - - - Invoke - Apple Software Update Install - Mac - Invokes an Apple Software Update Install for all missing updates.

-

This fixlet will only be relevant if there are missing updates available that Apple Update is aware of. To query for missing updates run the Fixlet: Invoke - Apple Software Update Query - Mac to see what updates this fixlet will install see Analysis: Apple Update - Mac

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists file "/usr/sbin/softwareupdate" - - Internal - 2017-04-21 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/softwareupdate --install --all - -action requires restart - - - - + + + + + Invoke - Apple Software Update Install - Mac + Invokes an Apple Software Update Install for all missing updates.

+

This fixlet will only be relevant if there are missing updates available that Apple Update is aware of. To query for missing updates run the Fixlet: Invoke - Apple Software Update Query - Mac to see what updates this fixlet will install see Analysis: Apple Update - Mac

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists file "/usr/sbin/softwareupdate" + + Internal + 2017-04-21 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/softwareupdate --install --all + +action requires restart + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes index 49339d832..0cec9c19c 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Apple Software Update Query - Mac (24109).bes @@ -1,35 +1,35 @@ - - - - - Invoke - Apple Software Update Query - Mac - Invokes an Apple Software Update check. You can view the results of the check in the Analysis: Apple Update - Mac

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - exists file "/usr/sbin/softwareupdate" - Internal - 2017-04-21 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/softwareupdate -l - - - + + + + + Invoke - Apple Software Update Query - Mac + Invokes an Apple Software Update check. You can view the results of the check in the Analysis: Apple Update - Mac

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + exists file "/usr/sbin/softwareupdate" + Internal + 2017-04-21 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/softwareupdate -l + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes index eed03d6e9..7d9aba5be 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Run Scan and Quarantine - Windows (20572).bes @@ -1,49 +1,49 @@ - - - - - Invoke - Avast for Business - Run Scan and Quarantine - Windows - This fixlet invokes an Avast AV scan on the endpoint using the installed Avast Anti-virus client.

-

The scan is invoked using ashCmd.exe, the Avast command line virus scanner.

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - windows of operating system - NOT in proxy agent context - (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of x32 registry) whose (value "DisplayName" of it as string starts with "Avast Business Security")) - Anti-Virus - Internal - 2016-04-15 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - -run "{pathname of file "AshCMD.exe" of folder (value "ProgramFolder" of key "HKEY_LOCAL_MACHINE\Software\AVAST Software\Avast" of x32 registry as string)}" "{parameter "Location" of action}" - - - - - Click - here - to deploy this action. - - -wait "{pathname of file "AshCMD.exe" of folder (value "ProgramFolder" of key "HKEY_LOCAL_MACHINE\Software\AVAST Software\Avast" of x32 registry as string)}" /@="{parameter "ScanName" of action}" - - - + + + + + Invoke - Avast for Business - Run Scan and Quarantine - Windows + This fixlet invokes an Avast AV scan on the endpoint using the installed Avast Anti-virus client.

+

The scan is invoked using ashCmd.exe, the Avast command line virus scanner.

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + NOT in proxy agent context + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of x32 registry) whose (value "DisplayName" of it as string starts with "Avast Business Security")) + Anti-Virus + Internal + 2016-04-15 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + +run "{pathname of file "AshCMD.exe" of folder (value "ProgramFolder" of key "HKEY_LOCAL_MACHINE\Software\AVAST Software\Avast" of x32 registry as string)}" "{parameter "Location" of action}" + + + + + Click + here + to deploy this action. + + +wait "{pathname of file "AshCMD.exe" of folder (value "ProgramFolder" of key "HKEY_LOCAL_MACHINE\Software\AVAST Software\Avast" of x32 registry as string)}" /@="{parameter "ScanName" of action}" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes index 7a05c443b..1523db1bb 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Avast for Business - Scan and Quarantine - Windows (20573).bes @@ -1,62 +1,62 @@ - - - - - Invoke - Avast for Business - Scan and Quarantine - Windows - This fixlet invokes an Avast AV scan on the endpoint using the installed Avast Anti-virus client.

-

The scan is invoked using ashCmd.exe, the Avast command line virus scanner.

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - windows of operating system - NOT in proxy agent context - (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of x32 registry) whose (value "DisplayName" of it as string starts with "Avast Business Security")) - Anti-Virus - Internal - 2016-04-15 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to invoke an Avast! Anti-Virus scan. - - - - - - - Click - here - to invoke an Avast! Anti-Virus scan and wait for it to finish before returning control back to the BigFix Client. - - - - - - + + + + + Invoke - Avast for Business - Scan and Quarantine - Windows + This fixlet invokes an Avast AV scan on the endpoint using the installed Avast Anti-virus client.

+

The scan is invoked using ashCmd.exe, the Avast command line virus scanner.

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + NOT in proxy agent context + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of x32 registry) whose (value "DisplayName" of it as string starts with "Avast Business Security")) + Anti-Virus + Internal + 2016-04-15 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to invoke an Avast! Anti-Virus scan. + + + + + + + Click + here + to invoke an Avast! Anti-Virus scan and wait for it to finish before returning control back to the BigFix Client. + + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes index 3941f0217..1a449b41f 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Scan and Quarantine - Windows (20574).bes @@ -1,44 +1,44 @@ - - - - - Invoke - ClamAV - Scan and Quarantine - Windows - Invokes a ClamAV Scan and Quarantine

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - windows of operating system - (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of native registry) whose (value "DisplayName" of it as string starts with "ClamAV")) | false - Internal - 2016-04-14 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - - - - - + + + + + Invoke - ClamAV - Scan and Quarantine - Windows + Invokes a ClamAV Scan and Quarantine

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of native registry) whose (value "DisplayName" of it as string starts with "ClamAV")) | false + Internal + 2016-04-14 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes index 102b6c22d..61e7af94f 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - ClamAV - Update Definitions - Windows (20575).bes @@ -1,39 +1,39 @@ - - - - - Invoke - ClamAV - Update Definitions - Windows - Updates the AV Definitions for ClamAV. Requires Internet Access.

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - windows of operating system - (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of native registry) whose (value "DisplayName" of it as string starts with "ClamAV")) | false - Internal - 2016-04-15 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here - -folder create "{program files x64 folder}\ClamAV-x64\database" - -wait "{program files x64 folder}\ClamAV-x64\freshclam.exe" -v - - - + + + + + Invoke - ClamAV - Update Definitions - Windows + Updates the AV Definitions for ClamAV. Requires Internet Access.

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + windows of operating system + (exists (keys of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of native registry) whose (value "DisplayName" of it as string starts with "ClamAV")) | false + Internal + 2016-04-15 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +folder create "{program files x64 folder}\ClamAV-x64\database" + +wait "{program files x64 folder}\ClamAV-x64\freshclam.exe" -v + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes index eaf841aec..b3ff6ff48 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - Configuration Profiles Probe - Mac (23809).bes @@ -1,40 +1,40 @@ - - - - - Invoke - Configuration Profiles Probe - Mac - This fixlet probes the currently configured Apple Configuration Profiles and outputs a report for consumption by BigFix.

-

This fixlet will always be relevant on a Mac system.

-

The results of this probe can be viewed with the Configuration Profiles - Mac Analysis.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - mac of operating system - Certificate Store - Internal - 2016-08-12 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to deploy this action. - - folder create "/Library/Profiles" - -wait Profiles -P -o "/Library/Profiles/Effective.plist" - - - - + + + + + Invoke - Configuration Profiles Probe - Mac + This fixlet probes the currently configured Apple Configuration Profiles and outputs a report for consumption by BigFix.

+

This fixlet will always be relevant on a Mac system.

+

The results of this probe can be viewed with the Configuration Profiles - Mac Analysis.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + mac of operating system + Certificate Store + Internal + 2016-08-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to deploy this action. + + folder create "/Library/Profiles" + +wait Profiles -P -o "/Library/Profiles/Effective.plist" + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes index 7c780d848..80ea0cc58 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Configuration Probe - Mac (23583).bes @@ -1,61 +1,61 @@ - - - - - Invoke - FileVault 2 Configuration Probe - Mac - This fixlet probes the current FileVault 2 Configuration to allow an analysis to report on FileVault status.

-

This fixlet is always applicable on a Mac computer. Recommended usage is to have it apply at whatever frequency you would like FireVault information updated -- preferably waiting at least a couple of hours between applications.

-

It might make sense to have two actions for this fixlet -- one that applies infrequently on all computers and one that applies frequently on computers that are less than a couple of days old.

-

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - = "10.7" as version]]> - uptime of operating system) of folder "FileVault" of folder "__Global" of data folder of client))*/]]> - Disk Encryption - Internal - 2016-04-30 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - "{parameter "storage"}/Status.txt" -fdesetup list > "{parameter "storage"}/Users.txt" -echo "Personal Key Exists: $(fdesetup haspersonalrecoverykey)" > "{parameter "storage"}/RecoverySettings.txt" -echo "Institutional Key Exists: $(fdesetup hasinstitutionalrecoverykey)" >> "{parameter "storage"}/RecoverySettings.txt" - -_end_ - -move __createfile run.sh - -wait bash run.sh 2>&1 "{folder "FileVault" of folder "__Global" of data folder of client}/ConfigurationProbe.txt"]]> - - - - + + + + + Invoke - FileVault 2 Configuration Probe - Mac + This fixlet probes the current FileVault 2 Configuration to allow an analysis to report on FileVault status.

+

This fixlet is always applicable on a Mac computer. Recommended usage is to have it apply at whatever frequency you would like FireVault information updated -- preferably waiting at least a couple of hours between applications.

+

It might make sense to have two actions for this fixlet -- one that applies infrequently on all computers and one that applies frequently on computers that are less than a couple of days old.

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + = "10.7" as version]]> + uptime of operating system) of folder "FileVault" of folder "__Global" of data folder of client))*/]]> + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + "{parameter "storage"}/Status.txt" +fdesetup list > "{parameter "storage"}/Users.txt" +echo "Personal Key Exists: $(fdesetup haspersonalrecoverykey)" > "{parameter "storage"}/RecoverySettings.txt" +echo "Institutional Key Exists: $(fdesetup hasinstitutionalrecoverykey)" >> "{parameter "storage"}/RecoverySettings.txt" + +_end_ + +move __createfile run.sh + +wait bash run.sh 2>&1 "{folder "FileVault" of folder "__Global" of data folder of client}/ConfigurationProbe.txt"]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes index 092a741d2..9dffffb8b 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Directory Services Sync - Mac (20607).bes @@ -1,50 +1,50 @@ - - - - - Invoke - FileVault 2 Directory Services Sync - Mac - This fixlet causes the Mac to sync accounts with directory services.

-

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

]]> - booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry - = "10.7"]]> - Disk Encryption - Internal - 2016-04-30 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here - -delete __createfile -delete run.sh - -createfile until _end_ -#!/bin/bash - -fdesetup sync - -_end_ - -move __createfile run.sh - -wait bash run.sh - - - + + + + + Invoke - FileVault 2 Directory Services Sync - Mac + This fixlet causes the Mac to sync accounts with directory services.

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

]]> + booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry + = "10.7"]]> + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +delete __createfile +delete run.sh + +createfile until _end_ +#!/bin/bash + +fdesetup sync + +_end_ + +move __createfile run.sh + +wait bash run.sh + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes index bfcb31903..a57fd8829 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encrypt System Volume - Mac (20608).bes @@ -1,86 +1,86 @@ - - - - - Invoke - FileVault 2 Encrypt System Volume - Mac - This fixlet will enable FileVault on the system volume.

-

For machines running Mountain Lion and earlier the prompt to enable FileVault will happen at the next user's logout.

-

For machines running Yosemite and newer the prompt to enable FileVault will happen at the next login OR logout.

-

Note: You cannot encrypt a FileVault drive that is currently decrypting.

-

The Disk Encrypted relevance is thanks to JGStew: https://bigfix.me/relevance/details/3003654

-

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

]]> - = "10.7" as version]]> - /* Disk does not appear to be encrypted, thanks JGStew! */ not exists (booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry) - Disk Encryption - Internal - 2016-04-30 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - to force the next user to enable FileVault 2 - - /dev/null - -fdesetup enable -defer "{pathname of data folder of client}/__Global/Filevault/Recovery.plist" {if (version of operating system >= "10.10" as version) then "-forceatlogin 10" else ""} - -_end_ - -move __createfile run.sh - -wait bash run.sh]]> - - - - - Click - here - to specify which user you would like to enable FileVault 2 - - /dev/null - -fdesetup enable -user "{parameter "User Name"}" -defer "/Library/Application Support/Bigfix/BES Agent/__BESData/__Global/FilevaultRecovery.plist" {if (version of operating system >= "10.10" as version) then "-forceatlogin 10" else ""} - -_end_ - -move __createfile run.sh - -wait bash run.sh]]> - - - + + + + + Invoke - FileVault 2 Encrypt System Volume - Mac + This fixlet will enable FileVault on the system volume.

+

For machines running Mountain Lion and earlier the prompt to enable FileVault will happen at the next user's logout.

+

For machines running Yosemite and newer the prompt to enable FileVault will happen at the next login OR logout.

+

Note: You cannot encrypt a FileVault drive that is currently decrypting.

+

The Disk Encrypted relevance is thanks to JGStew: https://bigfix.me/relevance/details/3003654

+

Information on using this content is available here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

]]> + = "10.7" as version]]> + /* Disk does not appear to be encrypted, thanks JGStew! */ not exists (booleans of values of entries whose("CoreStorage Encrypted" = key of it) of dictionaries whose( exists entries whose("BSD Name" = key of it AND "disk1" = string of value of it) of it ) of nodes of nodes of nodes "CoreStoragePhysical" of nodes of nodes "IOGUIDPartitionScheme" of nodes of nodes "IOBlockStorageDriver" of nodes "IOAHCIBlockStorageDevice" of nodes "AppleAHCIDiskDriver" of nodes "IOAHCIDevice" of (it; nodes of nodes "AppleAHCI" of it) of nodes of nodes of nodes of nodes "AppleACPIPCI" of nodes whose(name of it starts with "PCI") of nodes "AppleACPIPlatformExpert" of service plane of iokit registry) + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + to force the next user to enable FileVault 2 + + /dev/null + +fdesetup enable -defer "{pathname of data folder of client}/__Global/Filevault/Recovery.plist" {if (version of operating system >= "10.10" as version) then "-forceatlogin 10" else ""} + +_end_ + +move __createfile run.sh + +wait bash run.sh]]> + + + + + Click + here + to specify which user you would like to enable FileVault 2 + + /dev/null + +fdesetup enable -user "{parameter "User Name"}" -defer "/Library/Application Support/Bigfix/BES Agent/__BESData/__Global/FilevaultRecovery.plist" {if (version of operating system >= "10.10" as version) then "-forceatlogin 10" else ""} + +_end_ + +move __createfile run.sh + +wait bash run.sh]]> + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes index c8a83e29e..4ba71d9bb 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Invoke - FileVault 2 Encryption Status Probe - Mac (20577).bes @@ -1,259 +1,259 @@ - - - - - Invoke - FileVault 2 Encryption Status Probe - Mac - This fixlet probes the FileVault provider for the current status of FileVault encryption on the system

-

This fixlet is always applicable on a Mac computer. Recommended usage is to have it apply at whatever frequency you would like FireVault information updated -- preferably waiting at least a couple of hours between applications.

-

It might make sense to have two actions for this fixlet -- one that applies infrequently on all computers and one that applies frequently on computers that are less than a couple of days old.

-

Information on using this content is availabe here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

-

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> - = "10.7" as version]]> - uptime of operating system) of folder "FileVault" of folder "__Global" of data folder of client)) */]]> - Disk Encryption - Internal - 2016-04-30 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - to deploy this action. - - "$CORESTORAGESTATUS" 2>&1 - - # If the Mac is running 10.7 or higher, but the boot volume - # is not a CoreStorage volume, the following message is - # displayed without quotes: - # - # "FileVault 2 Encryption Not Enabled" - - if grep -iE '/ is not a CoreStorage disk' "$CORESTORAGESTATUS" 1>/dev/null; then - echo "FileVault 2 Encryption Not Enabled" - rm -f "$CORESTORAGESTATUS" - exit 0 - fi - - # If the Mac is running 10.7 or higher and the boot volume - # is a CoreStorage volume, the script then checks to see if - # the machine is encrypted, encrypting, or decrypting. - # - # If encrypted, the following message is - # displayed without quotes: - # "FileVault 2 Encryption Complete" - # - # If encrypting, the following message is - # displayed without quotes: - # "FileVault 2 Encryption Proceeding." - # How much has been encrypted of of the total - # amount of space is also displayed. If the - # amount of encryption is for some reason not - # known, the following message is - # displayed without quotes: - # "FileVault 2 Encryption Status Unknown. Please check." - # - # If decrypting, the following message is - # displayed without quotes: - # "FileVault 2 Decryption Proceeding" - # How much has been decrypted of of the total - # amount of space is also displayed - # - # If fully decrypted, the following message is - # displayed without quotes: - # "FileVault 2 Decryption Complete" - # - - # Get the Logical Volume UUID (aka "UUID" in diskutil cs info) - # for the boot drive's CoreStorage volume. - - LV_UUID=`diskutil cs info / | awk '/UUID/ {{print $2;exit}'` - - # Get the Logical Volume Family UUID (aka "Parent LVF UUID" in diskutil cs info) - # for the boot drive's CoreStorage volume. - - LV_FAMILY_UUID=`diskutil cs info / | awk '/Parent LVF UUID/ {{print $4;exit}'` - - CONTEXT=`diskutil cs list $LV_FAMILY_UUID | awk '/Encryption Context/ {{print $3;exit}'` - - if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -eq 7 || ${{osvers_minor} -eq 8 ]]; then - CONVERTED=`diskutil cs list $LV_UUID | awk '/Size \(Converted\)/ {{print $5,$6;exit}'` - fi - - if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 9 ]]; then - CONVERTED=`diskutil cs list $LV_UUID | awk '/Conversion Progress/ {{print $3;exit}'` - fi - - ENCRYPTIONEXTENTS=`diskutil cs list $LV_FAMILY_UUID | awk '/Has Encrypted Extents/ {{print $4;exit}'` - ENCRYPTION=`diskutil cs list $LV_FAMILY_UUID | awk '/Encryption Type/ {{print $3;exit}'` - SIZE=`diskutil cs list $LV_UUID | awk '/Size \(Total\)/ {{print $5,$6;exit}'` - - # This section does 10.7-specific checking of the Mac's - # FileVault 2 status - - if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -eq 7 ]]; then - if [ "$CONTEXT" = "Present" ]; then - if [ "$ENCRYPTION" = "AES-XTS" ]; then - diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {{print $3;exit}' > "$ENCRYPTSTATUS" - if grep -iE 'Complete' "$ENCRYPTSTATUS" 1>/dev/null; then - echo "FileVault 2 Encryption Complete" - else - if grep -iE 'Converting' "$ENCRYPTSTATUS" 1>/dev/null; then - diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" - if grep -iE 'Forward' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" - else - echo "FileVault 2 Encryption Status Unknown. Please check." - fi - fi - fi - else - if [ "$ENCRYPTION" = "None" ]; then - diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" - if grep -iE 'Backward' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" - elif grep -iE '-none-' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Decryption Completed" - fi - fi - fi - fi - fi - fi - - - - # This section does checking of the Mac's FileVault 2 status - # on 10.8.x through 10.10.x - - if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 8 ]] && [[ ${{osvers_minor} -lt 11 ]]; then - if [[ "$ENCRYPTIONEXTENTS" = "No" ]]; then - echo "FileVault 2 Encryption Not Enabled" - elif [[ "$ENCRYPTIONEXTENTS" = "Yes" ]]; then - diskutil cs list $LV_FAMILY_UUID | awk '/Fully Secure/ {{print $3;exit}' > "$ENCRYPTSTATUS" - if grep -iE 'Yes' "$ENCRYPTSTATUS" 1>/dev/null; then - echo "FileVault 2 Encryption Complete" - else - if grep -iE 'No' "$ENCRYPTSTATUS" 1>/dev/null; then - diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" - if grep -iE 'forward' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" - else - if grep -iE 'backward' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" - elif grep -iE 'none' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Decryption Completed" - fi - fi - fi - fi - fi - fi - - # This section does checking of the Mac's FileVault 2 status - # on 10.11.x and higher - - if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 11 ]]; then - if [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {{print $3;exit}') == "" ]]; then - echo "FileVault 2 Encryption Not Enabled" - elif [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {{print $3;exit}') == "Complete" ]]; then - echo "FileVault 2 Decryption Completed" - elif [[ "$ENCRYPTION" = "AES-XTS" ]]; then - diskutil cs list $LV_FAMILY_UUID | awk '/High Level Queries/ {{print $4,$5;exit}' > "$ENCRYPTSTATUS" - if grep -iE 'Fully Secure' "$ENCRYPTSTATUS" 1>/dev/null; then - echo "FileVault 2 Encryption Complete" - else - if grep -iE 'Not Fully' "$ENCRYPTSTATUS" 1>/dev/null; then - if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $4;exit}') != "" ]]; then - diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {{print $4;exit}' > "$ENCRYPTDIRECTION" - if grep -iE 'forward' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" - elif grep -iE 'backward' "$ENCRYPTDIRECTION" 1>/dev/null; then - echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" - fi - elif [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $4;exit}') == "" ]]; then - if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $3;exit}') == "Complete" ]]; then - echo "FileVault 2 Decryption Completed" - fi - fi - fi - fi - fi -fi - -# Remove the temp files created during the script - -#if [ -f "$CORESTORAGESTATUS" ]; then -# rm -f "$CORESTORAGESTATUS" -#fi - -#if [ -f "$ENCRYPTSTATUS" ]; then -# rm -f "$ENCRYPTSTATUS" -#fi - -#if [ -f "$ENCRYPTDIRECTION" ]; then -# rm -f "$ENCRYPTDIRECTION" -#fi - -exit 0 - -_end_ - -move __createfile run.sh - - - -wait bash run.sh 2>&1 "/Library/Application Support/Bigfix/BES Agent/__BESData/__Global/FileVault/StatusProbe.txt"]]> - - - - + + + + + Invoke - FileVault 2 Encryption Status Probe - Mac + This fixlet probes the FileVault provider for the current status of FileVault encryption on the system

+

This fixlet is always applicable on a Mac computer. Recommended usage is to have it apply at whatever frequency you would like FireVault information updated -- preferably waiting at least a couple of hours between applications.

+

It might make sense to have two actions for this fixlet -- one that applies infrequently on all computers and one that applies frequently on computers that are less than a couple of days old.

+

Information on using this content is availabe here: https://github.com/strawgate/C3-Protect/wiki/FileVault-2

+

For general information or to report issues with C3 Protect content please visit GitHub here: https://github.com/strawgate/C3-Protect

]]> + = "10.7" as version]]> + uptime of operating system) of folder "FileVault" of folder "__Global" of data folder of client)) */]]> + Disk Encryption + Internal + 2016-04-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + to deploy this action. + + "$CORESTORAGESTATUS" 2>&1 + + # If the Mac is running 10.7 or higher, but the boot volume + # is not a CoreStorage volume, the following message is + # displayed without quotes: + # + # "FileVault 2 Encryption Not Enabled" + + if grep -iE '/ is not a CoreStorage disk' "$CORESTORAGESTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Not Enabled" + rm -f "$CORESTORAGESTATUS" + exit 0 + fi + + # If the Mac is running 10.7 or higher and the boot volume + # is a CoreStorage volume, the script then checks to see if + # the machine is encrypted, encrypting, or decrypting. + # + # If encrypted, the following message is + # displayed without quotes: + # "FileVault 2 Encryption Complete" + # + # If encrypting, the following message is + # displayed without quotes: + # "FileVault 2 Encryption Proceeding." + # How much has been encrypted of of the total + # amount of space is also displayed. If the + # amount of encryption is for some reason not + # known, the following message is + # displayed without quotes: + # "FileVault 2 Encryption Status Unknown. Please check." + # + # If decrypting, the following message is + # displayed without quotes: + # "FileVault 2 Decryption Proceeding" + # How much has been decrypted of of the total + # amount of space is also displayed + # + # If fully decrypted, the following message is + # displayed without quotes: + # "FileVault 2 Decryption Complete" + # + + # Get the Logical Volume UUID (aka "UUID" in diskutil cs info) + # for the boot drive's CoreStorage volume. + + LV_UUID=`diskutil cs info / | awk '/UUID/ {{print $2;exit}'` + + # Get the Logical Volume Family UUID (aka "Parent LVF UUID" in diskutil cs info) + # for the boot drive's CoreStorage volume. + + LV_FAMILY_UUID=`diskutil cs info / | awk '/Parent LVF UUID/ {{print $4;exit}'` + + CONTEXT=`diskutil cs list $LV_FAMILY_UUID | awk '/Encryption Context/ {{print $3;exit}'` + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -eq 7 || ${{osvers_minor} -eq 8 ]]; then + CONVERTED=`diskutil cs list $LV_UUID | awk '/Size \(Converted\)/ {{print $5,$6;exit}'` + fi + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 9 ]]; then + CONVERTED=`diskutil cs list $LV_UUID | awk '/Conversion Progress/ {{print $3;exit}'` + fi + + ENCRYPTIONEXTENTS=`diskutil cs list $LV_FAMILY_UUID | awk '/Has Encrypted Extents/ {{print $4;exit}'` + ENCRYPTION=`diskutil cs list $LV_FAMILY_UUID | awk '/Encryption Type/ {{print $3;exit}'` + SIZE=`diskutil cs list $LV_UUID | awk '/Size \(Total\)/ {{print $5,$6;exit}'` + + # This section does 10.7-specific checking of the Mac's + # FileVault 2 status + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -eq 7 ]]; then + if [ "$CONTEXT" = "Present" ]; then + if [ "$ENCRYPTION" = "AES-XTS" ]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {{print $3;exit}' > "$ENCRYPTSTATUS" + if grep -iE 'Complete' "$ENCRYPTSTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Complete" + else + if grep -iE 'Converting' "$ENCRYPTSTATUS" 1>/dev/null; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'Forward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" + else + echo "FileVault 2 Encryption Status Unknown. Please check." + fi + fi + fi + else + if [ "$ENCRYPTION" = "None" ]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'Backward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" + elif grep -iE '-none-' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Completed" + fi + fi + fi + fi + fi + fi + + + + # This section does checking of the Mac's FileVault 2 status + # on 10.8.x through 10.10.x + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 8 ]] && [[ ${{osvers_minor} -lt 11 ]]; then + if [[ "$ENCRYPTIONEXTENTS" = "No" ]]; then + echo "FileVault 2 Encryption Not Enabled" + elif [[ "$ENCRYPTIONEXTENTS" = "Yes" ]]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Fully Secure/ {{print $3;exit}' > "$ENCRYPTSTATUS" + if grep -iE 'Yes' "$ENCRYPTSTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Complete" + else + if grep -iE 'No' "$ENCRYPTSTATUS" 1>/dev/null; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {{print $3;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'forward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" + else + if grep -iE 'backward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" + elif grep -iE 'none' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Completed" + fi + fi + fi + fi + fi + fi + + # This section does checking of the Mac's FileVault 2 status + # on 10.11.x and higher + + if [[ ${{osvers_major} -eq 10 ]] && [[ ${{osvers_minor} -ge 11 ]]; then + if [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {{print $3;exit}') == "" ]]; then + echo "FileVault 2 Encryption Not Enabled" + elif [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {{print $3;exit}') == "Complete" ]]; then + echo "FileVault 2 Decryption Completed" + elif [[ "$ENCRYPTION" = "AES-XTS" ]]; then + diskutil cs list $LV_FAMILY_UUID | awk '/High Level Queries/ {{print $4,$5;exit}' > "$ENCRYPTSTATUS" + if grep -iE 'Fully Secure' "$ENCRYPTSTATUS" 1>/dev/null; then + echo "FileVault 2 Encryption Complete" + else + if grep -iE 'Not Fully' "$ENCRYPTSTATUS" 1>/dev/null; then + if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $4;exit}') != "" ]]; then + diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {{print $4;exit}' > "$ENCRYPTDIRECTION" + if grep -iE 'forward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted" + elif grep -iE 'backward' "$ENCRYPTDIRECTION" 1>/dev/null; then + echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted" + fi + elif [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $4;exit}') == "" ]]; then + if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {{print $3;exit}') == "Complete" ]]; then + echo "FileVault 2 Decryption Completed" + fi + fi + fi + fi + fi +fi + +# Remove the temp files created during the script + +#if [ -f "$CORESTORAGESTATUS" ]; then +# rm -f "$CORESTORAGESTATUS" +#fi + +#if [ -f "$ENCRYPTSTATUS" ]; then +# rm -f "$ENCRYPTSTATUS" +#fi + +#if [ -f "$ENCRYPTDIRECTION" ]; then +# rm -f "$ENCRYPTDIRECTION" +#fi + +exit 0 + +_end_ + +move __createfile run.sh + + + +wait bash run.sh 2>&1 "/Library/Application Support/Bigfix/BES Agent/__BESData/__Global/FileVault/StatusProbe.txt"]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes b/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes index 306ddfa88..d2726dacf 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Reset a user's password on macOS (10.13 and up) (26652).bes @@ -1,82 +1,82 @@ - - - - - Reset a user's password on macOS (10.13 and up) -

-
-

-

-

-
-


-

-

Important Notes

-
    -
  • -
    You must enter a password in order to take an action
    -
  • -
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> - mac of operating system - = "10.13.0"]]> - = number of local users whose (user id of it >= 501)]]> - 2019-10-01 - - bigfixme-added-time - Fri, 06 Dec 2013 04:16:50 GMT - - - bigfixme-modification-time - Fri, 06 Dec 2013 04:16:50 GMT - - - bigfixme-keywords - user, net.exe, secure parameter, password - - - x-fixlet-modification-time - Tue, 01 Oct 2019 19:12:08 +0000 - - BESC - - - - Change - &nbsp;user's password - - action parameter query "username" with description "Please specify the name of an existing admin account" -action parameter query "username2" with description "Please specify the name of the user whose password you'd like to change." - -delete __createfile -delete resetpw.sh -createfile until EOF - -sysadminctl -resetPasswordFor {parameter "username2"} -newPassword {parameter "secret2"} -adminUser {parameter "username"} -adminPassword {parameter "secret"} - -EOF - -move __createfile resetpw.sh -wait bash resetpw.sh - - - - + + + + + Reset a user's password on macOS (10.13 and up) +

+
+

+

+

+
+


+

+

Important Notes

+
    +
  • +
    You must enter a password in order to take an action
    +
  • +
    Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.
]]> + mac of operating system + = "10.13.0"]]> + = number of local users whose (user id of it >= 501)]]> + 2019-10-01 + + bigfixme-added-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-modification-time + Fri, 06 Dec 2013 04:16:50 GMT + + + bigfixme-keywords + user, net.exe, secure parameter, password + + + x-fixlet-modification-time + Tue, 01 Oct 2019 19:12:08 +0000 + + BESC + + + + Change + &nbsp;user's password + + action parameter query "username" with description "Please specify the name of an existing admin account" +action parameter query "username2" with description "Please specify the name of the user whose password you'd like to change." + +delete __createfile +delete resetpw.sh +createfile until EOF + +sysadminctl -resetPasswordFor {parameter "username2"} -newPassword {parameter "secret2"} -adminUser {parameter "username"} -adminPassword {parameter "secret"} + +EOF + +move __createfile resetpw.sh +wait bash resetpw.sh + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes b/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes index 505f5f7b2..a7544a817 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Run softwareupdate (Mac) (27345).bes @@ -1,121 +1,121 @@ - - - - - Run softwareupdate (Mac) - -
-

This action runs softwareupdate on target macOS machine. Supplied username and password _must_ be for a user with a secure token.

-

If supplied account does not have a secure token, fixlet will exit with exit code 30.

-
]]> - mac of operating system - Internal - 2024-05-14 - - parametermetadatatag - { "username": { "Name": "adminUser", "Title": "User:", "Description": "Enter a username that has a secure token", "UIType": "Textbox", "Required":"1" }, "oPassword": { "Name": "adminUserPassword", "Title": "Password:", "Description": "Enter the password of a user with a secure token", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password" }, "flags": { "Name": "commands", "Title": "Arguments: ", "Description": "Specify arguments for softwareupdate", "UIType": "Select", "ValueType": "specified", "Required":"1", "Values": ["--download", "--install"] }, "subFlags": { "Name": "subcommands", "Title": "Additional arguments: ", "Description": "Modify the behavior of the selected action", "UIType": "select", "ValueType": "specified", "Parent": "commands", "Values":[ {"key":"--all", "value":"--all", "parentValue":"--install"}, {"key":"--recommended", "value":"--recommended", "parentValue":"--install"}, {"key":"--os-only", "value":"--os-only", "parentValue":"--install"}, {"key":"--safari-only", "value":"--safari-only", "parentValue":"--install"}, {"key":"--all", "value":"--all", "parentValue":"--download"}, {"key":"--recommended", "value":"--recommended", "parentValue":"--download"}, {"key":"--os-only", "value":"--os-only", "parentValue":"--download"}, {"key":"--safari-only", "value":"--safari-only", "parentValue":"--download"} ] }, "scan": { "Name": "scan", "Title": "Scan: ", "Description": "Specify if softwareupdate should scan for updates before running", "UIType": "Select", "ValueType": "specified", "Values":[ {"key":"Yes", "value":""}, {"key":"No", "value":"--no-scan"} ] }, "reboot": { "Name": "restart", "Title": "Restart automatically: ", "Description": "Select whether or not to automatically restart once action is complete", "UIType": "select", "ValueType": "specified", "Parent": "commands", "Values":[ {"key":"Yes", "value":"--restart", "parentValue":"--install"}, {"key":"No", "value":"", "parentValue":"--install"}, {"key":"<No reboot options for --download>", "value":"", "parentValue":"--download"} ] } } - - - x-fixlet-modification-time - Mon, 03 Jun 2024 19:04:30 +0000 - - BESC - - - Click - here - to deploy this action. - - > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" - -parameter "updateCommand" = "softwareupdate {parameter "commands"} {parameter "subcommands"} {parameter "restart"} {parameter "scan"} --user {parameter "adminUser"} --stdinpass --agree-to-license --force" - -delete __createfile -delete "__Download/{parameter "scriptName"}" -createfile until _end_ -#!/bin/zsh -echo "Running: {parameter "updateCommand"}" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' -adminUser="{parameter "adminUser" of action}" -precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) -if [[ "$precheck" == *"ENABLED"* ]]; then - echo "Provided user $adminUser has a secure token. Continuing..." >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 0 -elif [[ "$precheck" == *"DISABLED"* ]]; then - echo "Provided user $adminUser does not have a secure token" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 30 -else - echo "Error checking $adminUser secure token status" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' - exit 31 -fi -_end_ -copy "__createfile" "__Download/{parameter "scriptName"}" -wait chmod +x "__Download/{parameter "scriptName"}" -wait /bin/zsh "__Download/{parameter "scriptName"}" -parameter "error" = "{exit code of action}" -delete __createfile -delete "__Download/{parameter "scriptName"}" - -if {parameter "error" is "0"} -run bash -c "echo '{parameter "adminUserPassword"}' | {parameter "updateCommand"} 2>&1 | awk '!/Downloading:/{{print}' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -parameter "error2" = "{exit code of action}" -wait sh -c "echo Return Code: {parameter "error2"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -endif - -if {parameter "error" != "0"} -wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" -exit {parameter "error"} -endif - -exit {parameter "error2"} -]]> - - - - + + + + + Run softwareupdate (Mac) + +
+

This action runs softwareupdate on target macOS machine. Supplied username and password _must_ be for a user with a secure token.

+

If supplied account does not have a secure token, fixlet will exit with exit code 30.

+
]]> + mac of operating system + Internal + 2024-05-14 + + parametermetadatatag + { "username": { "Name": "adminUser", "Title": "User:", "Description": "Enter a username that has a secure token", "UIType": "Textbox", "Required":"1" }, "oPassword": { "Name": "adminUserPassword", "Title": "Password:", "Description": "Enter the password of a user with a secure token", "UIType": "Textbox", "Required":"1", "Encrypt" : "true", "SubUIType" : "Password" }, "flags": { "Name": "commands", "Title": "Arguments: ", "Description": "Specify arguments for softwareupdate", "UIType": "Select", "ValueType": "specified", "Required":"1", "Values": ["--download", "--install"] }, "subFlags": { "Name": "subcommands", "Title": "Additional arguments: ", "Description": "Modify the behavior of the selected action", "UIType": "select", "ValueType": "specified", "Parent": "commands", "Values":[ {"key":"--all", "value":"--all", "parentValue":"--install"}, {"key":"--recommended", "value":"--recommended", "parentValue":"--install"}, {"key":"--os-only", "value":"--os-only", "parentValue":"--install"}, {"key":"--safari-only", "value":"--safari-only", "parentValue":"--install"}, {"key":"--all", "value":"--all", "parentValue":"--download"}, {"key":"--recommended", "value":"--recommended", "parentValue":"--download"}, {"key":"--os-only", "value":"--os-only", "parentValue":"--download"}, {"key":"--safari-only", "value":"--safari-only", "parentValue":"--download"} ] }, "scan": { "Name": "scan", "Title": "Scan: ", "Description": "Specify if softwareupdate should scan for updates before running", "UIType": "Select", "ValueType": "specified", "Values":[ {"key":"Yes", "value":""}, {"key":"No", "value":"--no-scan"} ] }, "reboot": { "Name": "restart", "Title": "Restart automatically: ", "Description": "Select whether or not to automatically restart once action is complete", "UIType": "select", "ValueType": "specified", "Parent": "commands", "Values":[ {"key":"Yes", "value":"--restart", "parentValue":"--install"}, {"key":"No", "value":"", "parentValue":"--install"}, {"key":"<No reboot options for --download>", "value":"", "parentValue":"--download"} ] } } + + + x-fixlet-modification-time + Mon, 03 Jun 2024 19:04:30 +0000 + + BESC + + + Click + here + to deploy this action. + + > '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" + +parameter "updateCommand" = "softwareupdate {parameter "commands"} {parameter "subcommands"} {parameter "restart"} {parameter "scan"} --user {parameter "adminUser"} --stdinpass --agree-to-license --force" + +delete __createfile +delete "__Download/{parameter "scriptName"}" +createfile until _end_ +#!/bin/zsh +echo "Running: {parameter "updateCommand"}" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' +adminUser="{parameter "adminUser" of action}" +precheck=$(sysadminctl -secureTokenStatus $adminUser 2>&1) +if [[ "$precheck" == *"ENABLED"* ]]; then + echo "Provided user $adminUser has a secure token. Continuing..." >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 0 +elif [[ "$precheck" == *"DISABLED"* ]]; then + echo "Provided user $adminUser does not have a secure token" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 30 +else + echo "Error checking $adminUser secure token status" >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}' + exit 31 +fi +_end_ +copy "__createfile" "__Download/{parameter "scriptName"}" +wait chmod +x "__Download/{parameter "scriptName"}" +wait /bin/zsh "__Download/{parameter "scriptName"}" +parameter "error" = "{exit code of action}" +delete __createfile +delete "__Download/{parameter "scriptName"}" + +if {parameter "error" is "0"} +run bash -c "echo '{parameter "adminUserPassword"}' | {parameter "updateCommand"} 2>&1 | awk '!/Downloading:/{{print}' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +parameter "error2" = "{exit code of action}" +wait sh -c "echo Return Code: {parameter "error2"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +endif + +if {parameter "error" != "0"} +wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +exit {parameter "error"} +endif + +exit {parameter "error2"} +]]> + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes index 31294ba18..889955a4d 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Add IT Admin to Local Admin Group (MAC) (23265).bes @@ -1,39 +1,39 @@ - - - - - SECURITY - Add IT Admin to Local Admin Group (MAC) - This fixlet will allow AD users to be administrators on the local machine for OSX. - mac of operating system - Internal - 2016-12-29 - - x-fixlet-modification-time - Mon, 16 Jan 2017 20:02:15 +0000 - - BESC - - - Click - here - to deploy this action. - - #!/bin/sh -# Enter your action script here -sudo dseditgroup -o edit -a "domain\group" -t group admin -sudo dseditgroup -o edit -a "domain\group" -t group admin -sudo dseditgroup -o edit -a "domain\group" -t group admin -sudo dseditgroup -o edit -a "domain\group" -t group admin - - - - + + + + + SECURITY - Add IT Admin to Local Admin Group (MAC) + This fixlet will allow AD users to be administrators on the local machine for OSX. + mac of operating system + Internal + 2016-12-29 + + x-fixlet-modification-time + Mon, 16 Jan 2017 20:02:15 +0000 + + BESC + + + Click + here + to deploy this action. + + #!/bin/sh +# Enter your action script here +sudo dseditgroup -o edit -a "domain\group" -t group admin +sudo dseditgroup -o edit -a "domain\group" -t group admin +sudo dseditgroup -o edit -a "domain\group" -t group admin +sudo dseditgroup -o edit -a "domain\group" -t group admin + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes index 13b102e81..4491c81db 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/SECURITY - Allow Password Changes (MAC) (23263).bes @@ -1,37 +1,37 @@ - - - - - SECURITY - Allow Password Changes (MAC) - Activates Keychain Sync with AD password - mac of operating system - Internal - 2017-01-10 - - x-fixlet-modification-time - Tue, 10 Jan 2017 22:34:21 +0000 - - BESC - - - Click - here - to deploy this action. - - #!/bin/sh -# Enter your action script here -sudo defaults write "/Users/*/Library/Preferences/com.apple.keychainaccess.plist" SyncLoginPassword - bool true - - - - - + + + + + SECURITY - Allow Password Changes (MAC) + Activates Keychain Sync with AD password + mac of operating system + Internal + 2017-01-10 + + x-fixlet-modification-time + Tue, 10 Jan 2017 22:34:21 +0000 + + BESC + + + Click + here + to deploy this action. + + #!/bin/sh +# Enter your action script here +sudo defaults write "/Users/*/Library/Preferences/com.apple.keychainaccess.plist" SyncLoginPassword - bool true + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes b/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes index 1b8302011..8b802c2e9 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Safari 6.1 - Update (3636).bes @@ -1,68 +1,68 @@ - - - - - Safari 6.1 - Update - - - - -
-

This update is recommended for all Safari users and includes several improvements to performance, usability, compatibility and security.

-
This fixlet will use the built in Apple Software Update tools to update Safari to version 6.1 on Mac OS X 10.7.5 and 10.8.5 based machines.  Access to the public Internet by each client is required for this fixlet to function.
-
-

CVE:

CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-2848, CVE-2013-5129, CVE-2013-5130, CVE-2013-5131
]]> - (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) - = "10.7.5" AND it as version < "10.8") OR (it as version >= "10.8.5" AND it as version < "10.9")) of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> - - Security Update - Apple - APPLE-SA-2013-10-22-2 - 2013-10-22 - CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-2848, CVE-2013-5129, CVE-2013-5130, CVE-2013-5131 - - x-fixlet-first-propagation - Thu, 18 Apr 2013 22:42:40 +0000 - - - x-fixlet-domain_attributes - PTCH Patch Apple Safari Application - - - x-fixlet-modification-time - Thu, 24 Oct 2013 13:20:38 +0000 - - BESC - - - Click - here - to deploy this action. - - = "10.7" as version AND system version < "10.8" as version} - wait sh -c "softwareupdate -i Safari6.1Lion-6.1" -endif - -if {system version >= "10.8" as version} - wait sh -c "softwareupdate -i Safari6.1MountainLion-6.1" -endif]]> - - - - Click - here - to view more information from Apple on this update. - - http://support.apple.com/kb/HT5701 - - - + + + + + Safari 6.1 - Update + + + + +
+

This update is recommended for all Safari users and includes several improvements to performance, usability, compatibility and security.

+
This fixlet will use the built in Apple Software Update tools to update Safari to version 6.1 on Mac OS X 10.7.5 and 10.8.5 based machines.  Access to the public Internet by each client is required for this fixlet to function.
+
+

CVE:

CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-2848, CVE-2013-5129, CVE-2013-5130, CVE-2013-5131
]]> + (name of operating system = "Mac OS X") AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) + = "10.7.5" AND it as version < "10.8") OR (it as version >= "10.8.5" AND it as version < "10.9")) of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> + + Security Update + Apple + APPLE-SA-2013-10-22-2 + 2013-10-22 + CVE-2013-1036, CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128, CVE-2013-2848, CVE-2013-5129, CVE-2013-5130, CVE-2013-5131 + + x-fixlet-first-propagation + Thu, 18 Apr 2013 22:42:40 +0000 + + + x-fixlet-domain_attributes + PTCH Patch Apple Safari Application + + + x-fixlet-modification-time + Thu, 24 Oct 2013 13:20:38 +0000 + + BESC + + + Click + here + to deploy this action. + + = "10.7" as version AND system version < "10.8" as version} + wait sh -c "softwareupdate -i Safari6.1Lion-6.1" +endif + +if {system version >= "10.8" as version} + wait sh -c "softwareupdate -i Safari6.1MountainLion-6.1" +endif]]> + + + + Click + here + to view more information from Apple on this update. + + http://support.apple.com/kb/HT5701 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes index b4da3345e..e6dd47a8c 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) (3986).bes @@ -1,82 +1,82 @@ - - - - - Security Update 2015-002 (10.10.2 Client) -

Security Update 2015-002 is recommended for all users and improves the security of Mac OS X.

-

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

-

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

-

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

-

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

-
-

File Size:

5.18 MB
-
-

CVE:

CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067
]]> - (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" - - Security Update - Apple - APPLE-SA-2015-03-09-3 - 2015-03-09 - Unspecified - CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067 - - x-fixlet-domain_attributes - PTCH Patch Apple OSUpdate - - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. - - prefetch SecUpd2015-002Yosemite.dmg sha1:d37cdab99470650043fd479ed0bfc27181b260fe size:5433396 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-18425.20150309.B6D35/SecUpd2015-002Yosemite.dmg sha256:e213db40947392a046148d466b27105281b76f182eaee1ac116694824e3c4aa8 - -wait cp "{posix path of file "SecUpd2015-002Yosemite.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" - -wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/SecUpd2015-002Yosemite" "/private/tmp/SecUpd2015-002Yosemite.dmg" - -wait rm -rf "/private/tmp/SecUpd2015-002Yosemite.dmg" - -wait cp -r "/Volumes/SecUpd2015-002Yosemite/SecUpd2015-002Yosemite.pkg" "/private/tmp/SecUpd2015-002Yosemite.pkg" - -wait /bin/bash -c "devname=`df | grep SecUpd2015-002Yosemite | awk '{{print $1}'`; hdiutil detach -force $devname;" - -wait installer -pkg "/private/tmp/SecUpd2015-002Yosemite.pkg" -target / - -action requires restart - - - - Click - here - &nbsp;to initiate the deployment process through the Apple Software Update tool. - - wait softwareupdate -i "Security Update 2015-002-1.0" - -action requires restart - - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + Security Update 2015-002 (10.10.2 Client) +

Security Update 2015-002 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

5.18 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + + Security Update + Apple + APPLE-SA-2015-03-09-3 + 2015-03-09 + Unspecified + CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + prefetch SecUpd2015-002Yosemite.dmg sha1:d37cdab99470650043fd479ed0bfc27181b260fe size:5433396 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-18425.20150309.B6D35/SecUpd2015-002Yosemite.dmg sha256:e213db40947392a046148d466b27105281b76f182eaee1ac116694824e3c4aa8 + +wait cp "{posix path of file "SecUpd2015-002Yosemite.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/SecUpd2015-002Yosemite" "/private/tmp/SecUpd2015-002Yosemite.dmg" + +wait rm -rf "/private/tmp/SecUpd2015-002Yosemite.dmg" + +wait cp -r "/Volumes/SecUpd2015-002Yosemite/SecUpd2015-002Yosemite.pkg" "/private/tmp/SecUpd2015-002Yosemite.pkg" + +wait /bin/bash -c "devname=`df | grep SecUpd2015-002Yosemite | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/SecUpd2015-002Yosemite.pkg" -target / + +action requires restart + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + wait softwareupdate -i "Security Update 2015-002-1.0" + +action requires restart + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes index 9d00f3f89..36d3b0fdb 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-002 (10.10.2 Client) - Audit (3985).bes @@ -1,50 +1,50 @@ - - - - - Security Update 2015-002 (10.10.2 Client) - Audit -

Security Update 2015-002 is recommended for all users and improves the security of Mac OS X.

-

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

-

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

-

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

-

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

-
-

File Size:

5.18 MB
-
-

CVE:

CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067
]]> - (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" - - Security Update - Apple - APPLE-SA-2015-03-09-3 - 2015-03-09 - Unspecified - CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067 - - x-fixlet-domain_attributes - PTCH Patch Apple OSUpdate - - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + Security Update 2015-002 (10.10.2 Client) - Audit +

Security Update 2015-002 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

5.18 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + + Security Update + Apple + APPLE-SA-2015-03-09-3 + 2015-03-09 + Unspecified + CVE-2015-1065, CVE-2015-1066, CVE-2015-1061, CVE-2014-4496, CVE-2015-1067 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes index 35a402df7..3e4425c62 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client) - Audit (4002).bes @@ -1,50 +1,50 @@ - - - - - Security Update 2015-003 (10.10.2 Client) - Audit -

Security Update 2015-003 is recommended for all users and improves the security of Mac OS X.

-

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

-

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

-

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

-

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

-
-

File Size:

5.29 MB
-
-

CVE:

CVE-2015-1065, CVE-2015-1061
]]> - (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" - - Security Update - Apple - N/A - 2015-03-19 - Unspecified - CVE-2015-1065, CVE-2015-1061 - - x-fixlet-domain_attributes - PTCH Patch Apple OSUpdate - - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + Security Update 2015-003 (10.10.2 Client) - Audit +

Security Update 2015-003 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

5.29 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1061
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + + Security Update + Apple + N/A + 2015-03-19 + Unspecified + CVE-2015-1065, CVE-2015-1061 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes index 54a8df919..a201dbb58 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) (4018).bes @@ -1,87 +1,87 @@ - - - - - Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) -

Security Update 2015-003 is recommended for all users and improves the security of Mac OS X.

-

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

-

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

-

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

-

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

-
-

File Size:

4.95 MB
-
-

CVE:

CVE-2015-1065, CVE-2015-1061
]]> - (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" - ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as integer) then false else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) < ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as string) then true else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) > ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as string) then false else if ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") as integer)) < ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513") as integer)) then true else false) AND (if ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as integer) > ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as integer) then true else if ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as integer) < ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as integer) then false else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) > ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as string) then true else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) < ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as string) then false else if ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") as integer)) > ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000") as integer)) then true else false)]]> - - Security Update - Apple - N/A - 2015-03-19 - Unspecified - CVE-2015-1065, CVE-2015-1061 - - x-fixlet-domain_attributes - PTCH Patch Apple OSUpdate - - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. - - = "9.2.4.2" as version)} - -prefetch SecUpd2015-003YosemiteCPU.dmg sha1:7226993d49b5393eeccb3226ddbd1b71599b2963 size:5190131 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-19686-20150319-5F671036-CDA1-11E4-81AB-C077A153B4CE/SecUpd2015-003YosemiteCPU.dmg sha256:1408845eed7bffad51413227e8bce87e863bd994b658c993c76846a23f69597a - -wait cp "{posix path of file "SecUpd2015-003YosemiteCPU.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" - -wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/SecUpd2015-003YosemiteCPU" "/private/tmp/SecUpd2015-003YosemiteCPU.dmg" - -wait rm -rf "/private/tmp/SecUpd2015-003YosemiteCPU.dmg" - -wait cp -r "/Volumes/SecUpd2015-003YosemiteCPU/SecUpd2015-003YosemiteCPU.pkg" "/private/tmp/SecUpd2015-003YosemiteCPU.pkg" - -wait /bin/bash -c "devname=`df | grep SecUpd2015-003YosemiteCPU | awk '{{print $1}'`; hdiutil detach -force $devname;" - -wait installer -pkg "/private/tmp/SecUpd2015-003YosemiteCPU.pkg" -target / - -action requires restart]]> - - - - Click - here - &nbsp;to initiate the deployment process through the Apple Software Update tool. - - = "9.2.4.2" as version)} - -wait softwareupdate -i "Security Update 2015-003-1.0" - -action requires restart]]> - - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + Security Update 2015-003 (10.10.2 Client, Early 2015 Mac) (Superseded) +

Security Update 2015-003 is recommended for all users and improves the security of Mac OS X.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

4.95 MB
+
+

CVE:

CVE-2015-1065, CVE-2015-1061
]]> + (exists string "ProductVersion" whose (it as string = "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as integer) then false else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) < ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as string) then true else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) > ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513")) as string) then false else if ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") as integer)) < ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2513") as integer)) then true else false) AND (if ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as integer) > ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as integer) then true else if ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as integer) < ((parenthesized part 1 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as integer) then false else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) > ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as string) then true else if ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist")) as string) < ((parenthesized part 2 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000")) as string) then false else if ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of string "ProductBuildVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") as integer)) > ((parenthesized part 3 of (first match (regex "([0-9]+)([A-Z])([0-9]+)") of "14C2000") as integer)) then true else false)]]> + + Security Update + Apple + N/A + 2015-03-19 + Unspecified + CVE-2015-1065, CVE-2015-1061 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + = "9.2.4.2" as version)} + +prefetch SecUpd2015-003YosemiteCPU.dmg sha1:7226993d49b5393eeccb3226ddbd1b71599b2963 size:5190131 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-19686-20150319-5F671036-CDA1-11E4-81AB-C077A153B4CE/SecUpd2015-003YosemiteCPU.dmg sha256:1408845eed7bffad51413227e8bce87e863bd994b658c993c76846a23f69597a + +wait cp "{posix path of file "SecUpd2015-003YosemiteCPU.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/SecUpd2015-003YosemiteCPU" "/private/tmp/SecUpd2015-003YosemiteCPU.dmg" + +wait rm -rf "/private/tmp/SecUpd2015-003YosemiteCPU.dmg" + +wait cp -r "/Volumes/SecUpd2015-003YosemiteCPU/SecUpd2015-003YosemiteCPU.pkg" "/private/tmp/SecUpd2015-003YosemiteCPU.pkg" + +wait /bin/bash -c "devname=`df | grep SecUpd2015-003YosemiteCPU | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/SecUpd2015-003YosemiteCPU.pkg" -target / + +action requires restart]]> + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + = "9.2.4.2" as version)} + +wait softwareupdate -i "Security Update 2015-003-1.0" + +action requires restart]]> + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes b/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes index 325bfe6b6..957ab70e1 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Set Root Password to resolve vuln in High Sierra - Apple Mac OS X (24858).bes @@ -1,54 +1,54 @@ - - - - - Set Root Password to resolve vuln in High Sierra - Apple Mac OS X -  

-

This should resolve a discovered issue with Apple Mac OS High Sierra.

-

 

]]> - mac of operating system - = "10.13"]]> - not exists strings 0 whose(length of it = 8) of arrays "passwd" of dictionaries of files "/var/db/dslocal/nodes/Default/users/root.plist" - TRUE /* not exists settings "_RootPasswordSetRandom" of client */ - Internal - jgstew - 2017-11-28 - - x-fixlet-modification-time - Wed, 29 Nov 2017 04:58:53 +0000 - - BESC - - - Click - here - to deploy this action. - - - - - + + + + + Set Root Password to resolve vuln in High Sierra - Apple Mac OS X +  

+

This should resolve a discovered issue with Apple Mac OS High Sierra.

+

 

]]> + mac of operating system + = "10.13"]]> + not exists strings 0 whose(length of it = 8) of arrays "passwd" of dictionaries of files "/var/db/dslocal/nodes/Default/users/root.plist" + TRUE /* not exists settings "_RootPasswordSetRandom" of client */ + Internal + jgstew + 2017-11-28 + + x-fixlet-modification-time + Wed, 29 Nov 2017 04:58:53 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes b/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes index 2a6c9265d..9fca90aca 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac (3648).bes @@ -1,53 +1,53 @@ - - - - - Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac - This Fixlet prompts the TEM console for a Prefix and Suffix to use in the computer name.  It then sets the sharing, host and local subnet names to [Prefix]-serialnumber-[Suffix]. If you leave the Prefix or Suffix blank it will skip the related hyphen.

-

By making these names all match computers should appear in SEP and Secunia using their Sharing Name.

]]> - name of operating system = "Mac OS X" - = "10.5" as version]]> - Internal - 2012-04-06 - - x-fixlet-modification-time - Thu, 24 Oct 2013 14:23:02 +0000 - - BESC - - - Click - here - to deploy this action. - - action parameter query "Prefix_Name" with description "Please enter the name Prefix (optional)" -action parameter query "Suffix_Name" with description "Please enter the name Suffix (optional)" - -parameter "compName" = "{string "IOPlatformSerialNumber" of dictionary of service plane of iokit registry}" - -if {not (parameter "Prefix_Name" of action = "")} - parameter "compName2" = "{parameter "Prefix_Name" of action}-{parameter "compName"}" -else - parameter "compName2" = "{parameter "compName"}" -endif -if {not (parameter "Suffix_Name" of action = "")} - parameter "compName3" = "{parameter "compName3"}-{parameter "Suffix_Name" of action}" -else - parameter "compName3" = "{parameter "compName2"}" -endif - -wait sh -c "scutil --set ComputerName {parameter "compName3"}" -wait sh -c "scutil --set HostName {parameter "compName3"}" -wait sh -c "scutil --set LocalHostName {parameter "compName3"}" - - - + + + + + Set Sharing Name, Hostname and Local Subnet Name To [PREFIX]-[SERIAL#]-[SUFFIX] - Mac + This Fixlet prompts the TEM console for a Prefix and Suffix to use in the computer name.  It then sets the sharing, host and local subnet names to [Prefix]-serialnumber-[Suffix]. If you leave the Prefix or Suffix blank it will skip the related hyphen.

+

By making these names all match computers should appear in SEP and Secunia using their Sharing Name.

]]> + name of operating system = "Mac OS X" + = "10.5" as version]]> + Internal + 2012-04-06 + + x-fixlet-modification-time + Thu, 24 Oct 2013 14:23:02 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "Prefix_Name" with description "Please enter the name Prefix (optional)" +action parameter query "Suffix_Name" with description "Please enter the name Suffix (optional)" + +parameter "compName" = "{string "IOPlatformSerialNumber" of dictionary of service plane of iokit registry}" + +if {not (parameter "Prefix_Name" of action = "")} + parameter "compName2" = "{parameter "Prefix_Name" of action}-{parameter "compName"}" +else + parameter "compName2" = "{parameter "compName"}" +endif +if {not (parameter "Suffix_Name" of action = "")} + parameter "compName3" = "{parameter "compName3"}-{parameter "Suffix_Name" of action}" +else + parameter "compName3" = "{parameter "compName2"}" +endif + +wait sh -c "scutil --set ComputerName {parameter "compName3"}" +wait sh -c "scutil --set HostName {parameter "compName3"}" +wait sh -c "scutil --set LocalHostName {parameter "compName3"}" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes index fb824fe33..14ed60378 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Application (Promts) to Application Level Firewall - Mac OS X (3877).bes @@ -1,44 +1,44 @@ - - - - - System Configuration: ALF Add Application (Promts) to Application Level Firewall - Mac OS X - This task adds a trusted application and turns on the Application Level Firewall included with Mac OS X.

-

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

-

The default firewall state is off for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 15:57:29 +0000 - - BESC - - - Click - here - to deploy this action. - - action parameter query "apppath" with description "Enter path of application" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "{parameter apppath}" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "{parameter apppath}" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on - - - + + + + + System Configuration: ALF Add Application (Promts) to Application Level Firewall - Mac OS X + This task adds a trusted application and turns on the Application Level Firewall included with Mac OS X.

+

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 15:57:29 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "apppath" with description "Enter path of application" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes index ed25d5cf7..612ce221d 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Add Pharos Popup to Application Level Firewall - Mac OS X (3878).bes @@ -1,43 +1,43 @@ - - - - - System Configuration: ALF Add Pharos Popup to Application Level Firewall - Mac OS X - This task adds the Pharos Popup to trusted applications and turns on the Application Level Firewall included with Mac OS X.

-

The relevance checks for the bundle identifier in the ALF preference file.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "state" of dictionaries whose (string "bundleid" of it = "com.pharos.popup") of values of array "applications" of dictionaries of it = 0) /*True if com.pharos.popup is not added as allowed app*/ - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:30:30 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "/Library/Application Support/Pharos/Popup.app" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "/Library/Application Support/Pharos/Popup.app" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on - - - + + + + + System Configuration: ALF Add Pharos Popup to Application Level Firewall - Mac OS X + This task adds the Pharos Popup to trusted applications and turns on the Application Level Firewall included with Mac OS X.

+

The relevance checks for the bundle identifier in the ALF preference file.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "state" of dictionaries whose (string "bundleid" of it = "com.pharos.popup") of values of array "applications" of dictionaries of it = 0) /*True if com.pharos.popup is not added as allowed app*/ + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:30:30 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes index 105ad18b0..b74e94b73 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Application (Promts) from Application Level Firewall - Mac OS X (3879).bes @@ -1,44 +1,44 @@ - - - - - System Configuration: ALF Block Application (Promts) from Application Level Firewall - Mac OS X - This task blocks an application and turns on the Application Level Firewall included with Mac OS X.

-

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

-

The default firewall state is off for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:32:52 +0000 - - BESC - - - Click - here - to deploy this action. - - action parameter query "apppath" with description "Enter path of application" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "{parameter apppath}" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp "{parameter apppath}" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on - - - + + + + + System Configuration: ALF Block Application (Promts) from Application Level Firewall - Mac OS X + This task blocks an application and turns on the Application Level Firewall included with Mac OS X.

+

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:32:52 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "apppath" with description "Enter path of application" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes index c9dbf7e00..d56ebf4cf 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Block Pharos Popup with Application Level Firewall - Mac OS X (3880).bes @@ -1,43 +1,43 @@ - - - - - System Configuration: ALF Block Pharos Popup with Application Level Firewall - Mac OS X - This task adds the Pharos Popup to blocked applications and turns on the Application Level Firewall included with Mac OS X.

-

The relevance checks for the bundle identifier in the ALF preference file.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "state" of dictionaries whose (string "bundleid" of it = "com.pharos.popup") of values of array "applications" of dictionaries of it = 2) /*True for systems that are not blocking (2) com.pharos.popup*/ - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:28:39 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "/Library/Application Support/Pharos/Popup.app" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp "/Library/Application Support/Pharos/Popup.app" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on - - - + + + + + System Configuration: ALF Block Pharos Popup with Application Level Firewall - Mac OS X + This task adds the Pharos Popup to blocked applications and turns on the Application Level Firewall included with Mac OS X.

+

The relevance checks for the bundle identifier in the ALF preference file.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "state" of dictionaries whose (string "bundleid" of it = "com.pharos.popup") of values of array "applications" of dictionaries of it = 2) /*True for systems that are not blocking (2) com.pharos.popup*/ + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:28:39 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --add "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes index 84edae86e..d720eefc0 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Application Level Firewall - Mac OS X (3881).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Disable Application Level Firewall - Mac OS X - This task turns off the Application Level Firewall included with Mac OS X.

-

The default firewall state is off for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "globalstate" of dictionary of it = 0) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 15:27:42 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate off - - - + + + + + System Configuration: ALF Disable Application Level Firewall - Mac OS X + This task turns off the Application Level Firewall included with Mac OS X.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "globalstate" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 15:27:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes index 612ff30f3..3503403df 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Logging for Application Level Firewall - Mac OS X (3882).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Disable Logging for Application Level Firewall - Mac OS X - This task turns off the logging for the Application Level Firewall included with Mac OS X.

-

By default logging is enabled for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingenabled" of dictionary of it = 0) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:55:22 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode off - - - + + + + + System Configuration: ALF Disable Logging for Application Level Firewall - Mac OS X + This task turns off the logging for the Application Level Firewall included with Mac OS X.

+

By default logging is enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingenabled" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:55:22 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes index 2631d9c02..165d6bbbc 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Signed Apps in Application Level Firewall - Mac OS X (3883).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Disable Signed Apps in Application Level Firewall - Mac OS X - This task blocks Signed Apps from opening listening ports for the Application Level Firewall included with Mac OS X.

-

The default mode for Signed Apps is Enabled for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 0) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:11:59 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off - - - + + + + + System Configuration: ALF Disable Signed Apps in Application Level Firewall - Mac OS X + This task blocks Signed Apps from opening listening ports for the Application Level Firewall included with Mac OS X.

+

The default mode for Signed Apps is Enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:11:59 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes index a462e7e5d..f37e03be4 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Disable Stealth Mode for Application Level Firewall - Mac OS X (3884).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Disable Stealth Mode for Application Level Firewall - Mac OS X - This task turns off the Stealth Mode for the Application Level Firewall included with Mac OS X.

-

The default stealth mode is off for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "stealthenabled" of dictionary of it = 0) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:37:29 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off - - - + + + + + System Configuration: ALF Disable Stealth Mode for Application Level Firewall - Mac OS X + This task turns off the Stealth Mode for the Application Level Firewall included with Mac OS X.

+

The default stealth mode is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "stealthenabled" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:37:29 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes index 808eeb075..1e3f8b3cf 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Logging for Application Level Firewall - Mac OS X (3885).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Enable Logging for Application Level Firewall - Mac OS X - This task turns on the logging for the Application Level Firewall included with Mac OS X.

-

By default logging is enabled for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingenabled" of dictionary of it = 1) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:54:10 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on - - - + + + + + System Configuration: ALF Enable Logging for Application Level Firewall - Mac OS X + This task turns on the logging for the Application Level Firewall included with Mac OS X.

+

By default logging is enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:54:10 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes index d5b9e5969..198f41032 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3886).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Enable Signed Apps in Application Level Firewall - Mac OS X - This task enables Signed Apps to open listening ports for the Application Level Firewall included with Mac OS X.

-

The default mode for Signed Apps is Enabled for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 1) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:11:42 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on - - - + + + + + System Configuration: ALF Enable Signed Apps in Application Level Firewall - Mac OS X + This task enables Signed Apps to open listening ports for the Application Level Firewall included with Mac OS X.

+

The default mode for Signed Apps is Enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:11:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes index abf0e9309..c6baf9eb5 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Signed Apps in Application Level Firewall - Mac OS X (3887).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Enable Signed Apps in Application Level Firewall - Mac OS X - This task enables Signed Apps to open listening ports for the Application Level Firewall included with Mac OS X.

-

The default mode for Signed Apps is Enabled for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 1) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:11:42 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on - - - + + + + + System Configuration: ALF Enable Signed Apps in Application Level Firewall - Mac OS X + This task enables Signed Apps to open listening ports for the Application Level Firewall included with Mac OS X.

+

The default mode for Signed Apps is Enabled for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "allowsignedenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:11:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes index 8ec20738b..53acdbfd4 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Enable Stealth Mode for Application Level Firewall - Mac OS X (3888).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Enable Stealth Mode for Application Level Firewall - Mac OS X - This task turns on the Stealth Mode for the Application Level Firewall included with Mac OS X.

-

The default stealth mode is off for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "stealthenabled" of dictionary of it = 1) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 16:36:55 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on - - - + + + + + System Configuration: ALF Enable Stealth Mode for Application Level Firewall - Mac OS X + This task turns on the Stealth Mode for the Application Level Firewall included with Mac OS X.

+

The default stealth mode is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "stealthenabled" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 16:36:55 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes index 392492bdc..5a7fbab7d 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Application (Promts) from Application Level Firewall - Mac OS X (3889).bes @@ -1,43 +1,43 @@ - - - - - System Configuration: ALF Remove Application (Promts) from Application Level Firewall - Mac OS X - This task removes an application and turns on the Application Level Firewall included with Mac OS X.

-

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

-

The default firewall state is off for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 15:57:10 +0000 - - BESC - - - Click - here - to deploy this action. - - action parameter query "apppath" with description "Enter path of application" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --remove "{parameter apppath}" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on - - - + + + + + System Configuration: ALF Remove Application (Promts) from Application Level Firewall - Mac OS X + This task removes an application and turns on the Application Level Firewall included with Mac OS X.

+

The path to the application is requested when starting the action.
WARNING: This task suffers from lack of relevance because of action parameter. Running it multiple times may cause unexpected results, including multiple entries for the same application.

+

The default firewall state is off for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 15:57:10 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "apppath" with description "Enter path of application" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --remove "{parameter apppath}" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes index 6a11ecc40..3ce71f587 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Remove Pharos Popup from Application Level Firewall - Mac OS X (3890).bes @@ -1,42 +1,42 @@ - - - - - System Configuration: ALF Remove Pharos Popup from Application Level Firewall - Mac OS X - This task removes the Pharos Popup from trusted applications and turns on the Application Level Firewall included with Mac OS X.

-

The relevance checks for the bundle identifier in the ALF preference file.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.6" as version]]> - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" contains "com.pharos.popup" - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:22:47 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --remove "/Library/Application Support/Pharos/Popup.app" -wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on - - - + + + + + System Configuration: ALF Remove Pharos Popup from Application Level Firewall - Mac OS X + This task removes the Pharos Popup from trusted applications and turns on the Application Level Firewall included with Mac OS X.

+

The relevance checks for the bundle identifier in the ALF preference file.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.6" as version]]> + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + concatenation "; " of strings "bundleid" of dictionaries of values of array "applications" of dictionaries of file "/Library/Preferences/com.apple.alf.plist" contains "com.pharos.popup" + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:22:47 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --remove "/Library/Application Support/Pharos/Popup.app" +wait /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes index ec8175d75..001f1a49a 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _brief_ for Application Level Firewall - Mac OS X (3891).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Set Log Level to "brief" for Application Level Firewall - Mac OS X - This task sets logging to "brief" for the Application Level Firewall included with Mac OS X.

-

By default logging is set to "throttled" for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - = "10.9" as version]]> - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 1) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:37:13 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt brief - - - + + + + + System Configuration: ALF Set Log Level to "brief" for Application Level Firewall - Mac OS X + This task sets logging to "brief" for the Application Level Firewall included with Mac OS X.

+

By default logging is set to "throttled" for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + = "10.9" as version]]> + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 1) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:37:13 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt brief + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes index 83a80c5e3..be513b728 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _detail_ for Application Level Firewall - Mac OS X (3892).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Set Log Level to "detail" for Application Level Firewall - Mac OS X - This task sets logging to "detail" for the Application Level Firewall included with Mac OS X.

-

By default logging is set to "throttled" for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - = "10.9" as version]]> - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 2) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:36:54 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt detail - - - + + + + + System Configuration: ALF Set Log Level to "detail" for Application Level Firewall - Mac OS X + This task sets logging to "detail" for the Application Level Firewall included with Mac OS X.

+

By default logging is set to "throttled" for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + = "10.9" as version]]> + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 2) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:36:54 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt detail + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes index 64527e595..647e7399b 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ ALF Set Log Level to _throttled_ for Application Level Firewall - Mac OS X (3893).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: ALF Set Log Level to "throttled" for Application Level Firewall - Mac OS X - This task sets logging to "throttled" for the Application Level Firewall included with Mac OS X.

-

By default logging is set to "throttled" for Mac OS X.

-

This fixlet is applicable on Mac OS X 10.6 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" - = "10.9" as version]]> - not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 0) - System Configuration - SysMan - rzm102 - 2014-10-13 - - x-fixlet-modification-time - Mon, 13 Oct 2014 17:37:45 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt throttled - - - + + + + + System Configuration: ALF Set Log Level to "throttled" for Application Level Firewall - Mac OS X + This task sets logging to "throttled" for the Application Level Firewall included with Mac OS X.

+

By default logging is set to "throttled" for Mac OS X.

+

This fixlet is applicable on Mac OS X 10.6 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + exists file "/usr/libexec/ApplicationFirewall/socketfilterfw" + = "10.9" as version]]> + not exists file "/Library/Preferences/com.apple.alf.plist" whose (integer "loggingoption" of dictionary of it = 0) + System Configuration + SysMan + rzm102 + 2014-10-13 + + x-fixlet-modification-time + Mon, 13 Oct 2014 17:37:45 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingopt throttled + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes index 35ca7fadd..5074690c9 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Accept EULA for Installed Version of Xcode - Mac OS X (3770).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Accept EULA for Installed Version of Xcode - Mac OS X - Perform the function of `sudo xcodebuild -license` to accept the license for the currently installed version of Xcode and the current license agreement.

]]> - mac of operating system - exists file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist" whose(exists string "licenseID" of dictionary of it) - exists file "/Applications/Xcode.app/Contents/version.plist" whose(exists string "CFBundleShortVersionString" of dictionary of it) - not exists file "/Library/Preferences/com.apple.dt.Xcode.plist" whose(((string "IDELastGMLicenseAgreedTo" of dictionary of it) = (string "licenseID" of dictionary of file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist")) AND ((string "IDEXcodeVersionForAgreedToGMLicense" of dictionary of it) = (string "CFBundleShortVersionString" of dictionary of file "/Applications/Xcode.app/Contents/version.plist"))) - = "5.0" as version)]]> - Software Configuration - Internal - mah60 - 2014-04-08 - - x-fixlet-modification-time - Mon, 14 Apr 2014 22:40:39 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/bin/defaults write "/Library/Preferences/com.apple.dt.Xcode.plist" IDELastGMLicenseAgreedTo -string "{string "licenseID" of dictionary of file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist"}" -wait /usr/bin/defaults write "/Library/Preferences/com.apple.dt.Xcode.plist" IDEXcodeVersionForAgreedToGMLicense -string "{string "CFBundleShortVersionString" of dictionary of file "/Applications/Xcode.app/Contents/version.plist"}" - - - + + + + + System Configuration: Accept EULA for Installed Version of Xcode - Mac OS X + Perform the function of `sudo xcodebuild -license` to accept the license for the currently installed version of Xcode and the current license agreement.

]]> + mac of operating system + exists file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist" whose(exists string "licenseID" of dictionary of it) + exists file "/Applications/Xcode.app/Contents/version.plist" whose(exists string "CFBundleShortVersionString" of dictionary of it) + not exists file "/Library/Preferences/com.apple.dt.Xcode.plist" whose(((string "IDELastGMLicenseAgreedTo" of dictionary of it) = (string "licenseID" of dictionary of file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist")) AND ((string "IDEXcodeVersionForAgreedToGMLicense" of dictionary of it) = (string "CFBundleShortVersionString" of dictionary of file "/Applications/Xcode.app/Contents/version.plist"))) + = "5.0" as version)]]> + Software Configuration + Internal + mah60 + 2014-04-08 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:40:39 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/bin/defaults write "/Library/Preferences/com.apple.dt.Xcode.plist" IDELastGMLicenseAgreedTo -string "{string "licenseID" of dictionary of file "/Applications/Xcode.app/Contents/Resources/LicenseInfo.plist"}" +wait /usr/bin/defaults write "/Library/Preferences/com.apple.dt.Xcode.plist" IDEXcodeVersionForAgreedToGMLicense -string "{string "CFBundleShortVersionString" of dictionary of file "/Applications/Xcode.app/Contents/version.plist"}" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes index a1f3c77d6..42a49e6fe 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Add Everyone to the Xcode Developer Group - Mac OS X (3771).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Add Everyone to the Xcode Developer Group - Mac OS X - This fixlet adds the _everyone group, of which all users are a member of, as a nested group of the _developer group.

-

This grants access for all users of the system to fully utilize the Xcode Developer Tools without the need to be an admin on the system.

]]> - mac of operating system - exists file "/usr/sbin/dseditgroup" - not exists file "/var/db/dslocal/nodes/Default/groups/_developer.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) - System Configuration - SysMan - mah60 - 2014-04-14 - - x-fixlet-modification-time - Mon, 14 Apr 2014 22:38:13 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group developer - -wait /usr/sbin/DevToolsSecurity -enable - - - + + + + + System Configuration: Add Everyone to the Xcode Developer Group - Mac OS X + This fixlet adds the _everyone group, of which all users are a member of, as a nested group of the _developer group.

+

This grants access for all users of the system to fully utilize the Xcode Developer Tools without the need to be an admin on the system.

]]> + mac of operating system + exists file "/usr/sbin/dseditgroup" + not exists file "/var/db/dslocal/nodes/Default/groups/_developer.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + System Configuration + SysMan + mah60 + 2014-04-14 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:38:13 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group developer + +wait /usr/sbin/DevToolsSecurity -enable + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes index 66d948529..70267b56f 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (20448).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: Allow Managed Users to Add or Delete Printers - Mac OS X - In Mac OS X 10.5.7 or later, access to add or delete network printers on a client computer is controlled by membership in the lpadmin group. You can control the ability of managed user accounts to add and delete printers by controlling the membership of this group.

-

This fixlet adds the "everyone" group, of which all users are a member of, as a nested group of the "_lpadmin" group. This grants access for all users of the system to add, edit, and delete printers as well as manage other aspects of the CUPS printing system.

-

Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers - http://support.apple.com/kb/HT3511

-

This task is applicable on Mac OS X 10.5.7 or later.

]]> - mac of operating system - exists file "/usr/sbin/dseditgroup" - not exists file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) - = "10.5.7"]]> - System Configuration - SysMan - rzm102; mah60 - 2014-04-14 - - x-fixlet-modification-time - Wed, 16 Apr 2014 19:30:36 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin - - - + + + + + System Configuration: Allow Managed Users to Add or Delete Printers - Mac OS X + In Mac OS X 10.5.7 or later, access to add or delete network printers on a client computer is controlled by membership in the lpadmin group. You can control the ability of managed user accounts to add and delete printers by controlling the membership of this group.

+

This fixlet adds the "everyone" group, of which all users are a member of, as a nested group of the "_lpadmin" group. This grants access for all users of the system to add, edit, and delete printers as well as manage other aspects of the CUPS printing system.

+

Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers - http://support.apple.com/kb/HT3511

+

This task is applicable on Mac OS X 10.5.7 or later.

]]> + mac of operating system + exists file "/usr/sbin/dseditgroup" + not exists file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + = "10.5.7"]]> + System Configuration + SysMan + rzm102; mah60 + 2014-04-14 + + x-fixlet-modification-time + Wed, 16 Apr 2014 19:30:36 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes index cceb1e930..1efcc0b94 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Allow Managed Users to Add or Delete Printers - Mac OS X (3772).bes @@ -1,39 +1,39 @@ - - - - - System Configuration: Allow Managed Users to Add or Delete Printers - Mac OS X - In Mac OS X 10.5.7 or later, access to add or delete network printers on a client computer is controlled by membership in the lpadmin group. You can control the ability of managed user accounts to add and delete printers by controlling the membership of this group.

-

This fixlet adds the _everyone group, of which all users are a member of, as a nested group of the _lpadmin group. This grants access for all users of the system to add, edit, and delete local printers as well as manage other aspects of the CUPS printing system.

-

Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers - http://support.apple.com/kb/HT3511

]]> - mac of operating system - exists file "/usr/sbin/dseditgroup" - not exists file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) - System Configuration - SysMan - rzm102; mah60 - 2014-04-14 - - x-fixlet-modification-time - Mon, 14 Apr 2014 22:43:38 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin - - - + + + + + System Configuration: Allow Managed Users to Add or Delete Printers - Mac OS X + In Mac OS X 10.5.7 or later, access to add or delete network printers on a client computer is controlled by membership in the lpadmin group. You can control the ability of managed user accounts to add and delete printers by controlling the membership of this group.

+

This fixlet adds the _everyone group, of which all users are a member of, as a nested group of the _lpadmin group. This grants access for all users of the system to add, edit, and delete local printers as well as manage other aspects of the CUPS printing system.

+

Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers - http://support.apple.com/kb/HT3511

]]> + mac of operating system + exists file "/usr/sbin/dseditgroup" + not exists file "/var/db/dslocal/nodes/Default/groups/_lpadmin.plist" whose ((concatenation ", " of strings of values of array "nestedgroups" of dictionary of it) contains (string of value of array "generateduid" of dictionary of file "/var/db/dslocal/nodes/Default/groups/everyone.plist")) + System Configuration + SysMan + rzm102; mah60 + 2014-04-14 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:43:38 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes index 75e5ea495..c4bf94947 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Always Show Scroll Bars (3816).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: Always Show Scroll Bars - This task will enable OS X applications to always show their scroll bars (Always).

-

This changes the default behavior of only showing scroll bars while scrolling (WhenScrolling or Automatic)

-

This task is applicable on Mac OS X 10.8 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.8"]]> - not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (string "AppleShowScrollBars" of dictionary of it = "Always") - System Configuration - Internal - rzm102 - 2014-07-30 - - x-fixlet-modification-time - Wed, 30 Jul 2014 14:15:58 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here -wait /usr/bin/defaults write "/Library/Preferences/.GlobalPreferences.plist" AppleShowScrollBars -string "Always" - - - + + + + + System Configuration: Always Show Scroll Bars + This task will enable OS X applications to always show their scroll bars (Always).

+

This changes the default behavior of only showing scroll bars while scrolling (WhenScrolling or Automatic)

+

This task is applicable on Mac OS X 10.8 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.8"]]> + not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (string "AppleShowScrollBars" of dictionary of it = "Always") + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 14:15:58 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here +wait /usr/bin/defaults write "/Library/Preferences/.GlobalPreferences.plist" AppleShowScrollBars -string "Always" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes index 297a1b97c..85dea77ec 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable BlueTooth Radio (21296).bes @@ -1,43 +1,43 @@ - - - - - System Configuration: Disable BlueTooth Radio - Disable the BlueTooth radio on OS X.

-

This fixlet is applicable on Mac OS X 10.9 or later

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - not exists file "/Library/Preferences/com.apple.Bluetooth.plist" whose (boolean "ControllerPowerState" of dictionary of it = False) - System Configuration - Internal - rzm102 - 2016-08-19 - - x-fixlet-modification-time - Fri, 19 Aug 2016 13:41:03 +0000 - - BESC - - - Click - here - to deploy this action. - - // Disable power -wait defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -bool false -// Reload the daemon -wait launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist -wait launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist - - - - + + + + + System Configuration: Disable BlueTooth Radio + Disable the BlueTooth radio on OS X.

+

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + not exists file "/Library/Preferences/com.apple.Bluetooth.plist" whose (boolean "ControllerPowerState" of dictionary of it = False) + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 13:41:03 +0000 + + BESC + + + Click + here + to deploy this action. + + // Disable power +wait defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -bool false +// Reload the daemon +wait launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist +wait launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes index 925d95509..85ad42a4d 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable PF Firewall (4017).bes @@ -1,43 +1,43 @@ - - - - - System Configuration: Disable PF Firewall - This fixlet removes the "-e" flag in the ProgramArguments of the /System/Library/LaunchDaemons/com.apple.pfctl.plist and runs the command to disable the pf firewall. -

This disables the pf firewall to start at system boot.

-

This fixlet is applicable on Mac OS X 10.9 or later.

]]> - mac of operating system - = "10.9"]]> - (exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist") - System Configuration - Internal - rzm102 - 2014-06-13 - - x-fixlet-modification-time - Fri, 13 Jun 2014 19:19:57 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here -wait bash -c "defaults write /System/Library/LaunchDaemons/com.apple.pfctl ProgramArguments '(pfctl, -f, /etc/pf.conf)'" -wait chmod 644 /System/Library/LaunchDaemons/com.apple.pfctl.plist -wait plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.pfctl.plist - - - - + + + + + System Configuration: Disable PF Firewall + This fixlet removes the "-e" flag in the ProgramArguments of the /System/Library/LaunchDaemons/com.apple.pfctl.plist and runs the command to disable the pf firewall. +

This disables the pf firewall to start at system boot.

+

This fixlet is applicable on Mac OS X 10.9 or later.

]]> + mac of operating system + = "10.9"]]> + (exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist") + System Configuration + Internal + rzm102 + 2014-06-13 + + x-fixlet-modification-time + Fri, 13 Jun 2014 19:19:57 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here +wait bash -c "defaults write /System/Library/LaunchDaemons/com.apple.pfctl ProgramArguments '(pfctl, -f, /etc/pf.conf)'" +wait chmod 644 /System/Library/LaunchDaemons/com.apple.pfctl.plist +wait plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.pfctl.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes index bad8a4905..cdfe61a68 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Printer Sharing - Mac OS X (20449).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Disable Printer Sharing - Mac OS X - This fixlet will be relevant if printer sharing is enabled, and running this action will disable printer sharing.

-

System Preferences > Sharing > Printer Sharing

-

This fixlet is applicable on Mac OS X 10.6 or later.

]]> - mac of operating system - = "10.6"]]> - exists file "/etc/cups/cupsd.conf" whose (exists line whose (it contains "# Allow shared printing...") of it) - System Configuration - SysMan - mah60 - 2014-06-25 - - x-fixlet-modification-time - Fri, 14 Nov 2014 13:43:15 +0000 - - BESC - - - Click - here - to deploy this action. - - // Turn Off CUPS Printer Sharing Service -wait /usr/sbin/cupsctl --no-share-printers - - - + + + + + System Configuration: Disable Printer Sharing - Mac OS X + This fixlet will be relevant if printer sharing is enabled, and running this action will disable printer sharing.

+

System Preferences > Sharing > Printer Sharing

+

This fixlet is applicable on Mac OS X 10.6 or later.

]]> + mac of operating system + = "10.6"]]> + exists file "/etc/cups/cupsd.conf" whose (exists line whose (it contains "# Allow shared printing...") of it) + System Configuration + SysMan + mah60 + 2014-06-25 + + x-fixlet-modification-time + Fri, 14 Nov 2014 13:43:15 +0000 + + BESC + + + Click + here + to deploy this action. + + // Turn Off CUPS Printer Sharing Service +wait /usr/sbin/cupsctl --no-share-printers + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes index 4be8d173a..4bded57a1 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Disable Wireless (Airport) Adapter (21298).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Disable Wireless (Airport) Adapter - Disable the Wireless (Airport) radio on OS X. -

This fixlet is applicable on Mac OS X 10.9 or later

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.10"]]> - boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = True - System Configuration - Internal - rzm102 - 2016-08-19 - - x-fixlet-modification-time - Fri, 19 Aug 2016 14:00:24 +0000 - - BESC - - - Click - here - to deploy this action. - - // disable airport radio -wait networksetup -setairportpower airport off - - - + + + + + System Configuration: Disable Wireless (Airport) Adapter + Disable the Wireless (Airport) radio on OS X. +

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.10"]]> + boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = True + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 14:00:24 +0000 + + BESC + + + Click + here + to deploy this action. + + // disable airport radio +wait networksetup -setairportpower airport off + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes index 5e3162f6e..235cfe900 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable AirDrop over Ethernet (3821).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Enable AirDrop over Ethernet - This fixlet configures OS X to use AirDrop over Ethernet. -

The default behavior is to only allow AirDrop over Wi-Fi. This allows machines to also use Etherenet.

-

This fixlet is applicable on Mac OS X 10.8 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.8"]]> - not exists file "/Library/Preferences/com.apple.NetworkBrowser.plist" whose (boolean "BrowseAllInterfaces" of dictionary of it = True) - System Configuration - Internal - rzm102 - 2014-07-31 - - x-fixlet-modification-time - Thu, 31 Jul 2014 14:26:02 +0000 - - BESC - - - Click - here - to deploy this action. - - wait defaults write "/Library/Preferences/com.apple.NetworkBrowser" BrowseAllInterfaces -bool true - - - + + + + + System Configuration: Enable AirDrop over Ethernet + This fixlet configures OS X to use AirDrop over Ethernet. +

The default behavior is to only allow AirDrop over Wi-Fi. This allows machines to also use Etherenet.

+

This fixlet is applicable on Mac OS X 10.8 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.8"]]> + not exists file "/Library/Preferences/com.apple.NetworkBrowser.plist" whose (boolean "BrowseAllInterfaces" of dictionary of it = True) + System Configuration + Internal + rzm102 + 2014-07-31 + + x-fixlet-modification-time + Thu, 31 Jul 2014 14:26:02 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/com.apple.NetworkBrowser" BrowseAllInterfaces -bool true + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes index 9a6e2a07c..04a0ed5ba 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for Admin Users - Mac OS X (3923).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Enable Apple Remote Desktop/Remote Management with Full Access for Admin Users - Mac OS X - This fixlet will ensure that the Remote Management (Apple Remote Desktop) service is enabled and that all local admin accounts on the system have full privileges.

-

System Preferences > Sharing > Remote Management

-

This fixlet is applicable on Mac OS X 10.7 or later.

]]> - mac of operating system - = "10.7"]]> - (not exists file "/private/etc/RemoteManagement.launchd") OR (exists items 0 whose (not exists strings whose (it = "-1073741569") of values of arrays "naprivs" of dictionary of it) of (it, strings of values of array "users" of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist", name of it) whose (preceding text of firsts "." of item 2 of it = item 1 of it) of files whose (name of it does not start with "_" AND name of it is not "root.plist") of folder "/var/db/dslocal/nodes/Default/users") OR (not exists file "/Library/Preferences/com.apple.RemoteManagement.plist" whose (exists boolean "ARD_AllLocalUsers" whose (it = False) of dictionary of it)) - Software Sharing - SysMan - mah60 - 2014-11-13 - - x-fixlet-modification-time - Fri, 14 Nov 2014 14:44:42 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -specifiedUsers -wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users {concatenation "," of strings whose (it is not "root") of values of array "users" of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist"} -privs -all -restart -agent -menu - - - + + + + + System Configuration: Enable Apple Remote Desktop/Remote Management with Full Access for Admin Users - Mac OS X + This fixlet will ensure that the Remote Management (Apple Remote Desktop) service is enabled and that all local admin accounts on the system have full privileges.

+

System Preferences > Sharing > Remote Management

+

This fixlet is applicable on Mac OS X 10.7 or later.

]]> + mac of operating system + = "10.7"]]> + (not exists file "/private/etc/RemoteManagement.launchd") OR (exists items 0 whose (not exists strings whose (it = "-1073741569") of values of arrays "naprivs" of dictionary of it) of (it, strings of values of array "users" of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist", name of it) whose (preceding text of firsts "." of item 2 of it = item 1 of it) of files whose (name of it does not start with "_" AND name of it is not "root.plist") of folder "/var/db/dslocal/nodes/Default/users") OR (not exists file "/Library/Preferences/com.apple.RemoteManagement.plist" whose (exists boolean "ARD_AllLocalUsers" whose (it = False) of dictionary of it)) + Software Sharing + SysMan + mah60 + 2014-11-13 + + x-fixlet-modification-time + Fri, 14 Nov 2014 14:44:42 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -specifiedUsers +wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users {concatenation "," of strings whose (it is not "root") of values of array "users" of dictionary of file "/var/db/dslocal/nodes/Default/groups/admin.plist"} -privs -all -restart -agent -menu + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes index e53d91f07..9233320e7 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Apple Remote Desktop_Remote Management with Full Access for All Local Users - Mac OS X (3921).bes @@ -1,39 +1,39 @@ - - - - - System Configuration: Enable Apple Remote Desktop/Remote Management with Full Access for All Local Users - Mac OS X - This fixlet will ensure that the Remote Management (Apple Remote Desktop) service is enabled and that all local accounts on the system have full access and privileges.

-

System Preferences > Sharing > Remote Management

-

This fixlet is applicable on Mac OS X 10.7 or later.

]]> - mac of operating system - = "10.7"]]> - (not exists file "/private/etc/RemoteManagement.launchd") OR (not exists file "/Library/Preferences/com.apple.RemoteManagement.plist" whose (exists dictionary whose (exists boolean "ARD_AllLocalUsers" whose (it = True) of it AND exists integer "ARD_AllLocalUsersPrivs" whose (it = -1073741569) of it) of it)) - Software Sharing - SysMan - mah60 - 2014-11-13 - - x-fixlet-modification-time - Fri, 14 Nov 2014 13:50:15 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -allUsers -privs -all - - - + + + + + System Configuration: Enable Apple Remote Desktop/Remote Management with Full Access for All Local Users - Mac OS X + This fixlet will ensure that the Remote Management (Apple Remote Desktop) service is enabled and that all local accounts on the system have full access and privileges.

+

System Preferences > Sharing > Remote Management

+

This fixlet is applicable on Mac OS X 10.7 or later.

]]> + mac of operating system + = "10.7"]]> + (not exists file "/private/etc/RemoteManagement.launchd") OR (not exists file "/Library/Preferences/com.apple.RemoteManagement.plist" whose (exists dictionary whose (exists boolean "ARD_AllLocalUsers" whose (it = True) of it AND exists integer "ARD_AllLocalUsersPrivs" whose (it = -1073741569) of it) of it)) + Software Sharing + SysMan + mah60 + 2014-11-13 + + x-fixlet-modification-time + Fri, 14 Nov 2014 13:50:15 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -allUsers -privs -all + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes index 1beed4596..6c66277cf 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Automatic Restart on Power Loss - Mac OS X (3773).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Enable Automatic Restart on Power Loss - Mac OS X - This fixlet enables the option for automatically restarting on power loss using the `systemsetup` utility.

-

System Preferences > Energy Saver > "Startup automatically after power failure"

]]> - mac of operating system - = "10.6"]]> - exists file "/usr/sbin/systemsetup" - not ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry - exists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" whose (exists dictionary "Custom Profile" of it whose (exists dictionary "AC Power" of it whose (exists boolean "Automatic Restart On Power Loss" whose ( it = True)))) - System Configuration - SysMan - mah60 - 2014-04-14 - - x-fixlet-modification-time - Mon, 14 Apr 2014 22:37:39 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/systemsetup -setrestartpowerfailure on - - - + + + + + System Configuration: Enable Automatic Restart on Power Loss - Mac OS X + This fixlet enables the option for automatically restarting on power loss using the `systemsetup` utility.

+

System Preferences > Energy Saver > "Startup automatically after power failure"

]]> + mac of operating system + = "10.6"]]> + exists file "/usr/sbin/systemsetup" + not ((exists key whose (it as string as lowercase contains "battery") of entries of dictionaries of nodes of it) or (exists node "AppleACPIPlatformExpert/SMB0/AppleECSMBusController/AppleSmartBatteryManager" of service plane of iokit registry) of it) of service plane of iokit registry + exists file "/Library/Preferences/SystemConfiguration/com.apple.PowerManagement.plist" whose (exists dictionary "Custom Profile" of it whose (exists dictionary "AC Power" of it whose (exists boolean "Automatic Restart On Power Loss" whose ( it = True)))) + System Configuration + SysMan + mah60 + 2014-04-14 + + x-fixlet-modification-time + Mon, 14 Apr 2014 22:37:39 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/systemsetup -setrestartpowerfailure on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes index 819b3d8e5..f8dd95605 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable BlueTooth Radio (21297).bes @@ -1,43 +1,43 @@ - - - - - System Configuration: Enable BlueTooth Radio - Enable the BlueTooth radio on OS X.

-

This fixlet is applicable on Mac OS X 10.9 or later

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - not exists file "/Library/Preferences/com.apple.Bluetooth.plist" whose (boolean "ControllerPowerState" of dictionary of it = True) - System Configuration - Internal - rzm102 - 2016-08-19 - - x-fixlet-modification-time - Fri, 19 Aug 2016 13:40:39 +0000 - - BESC - - - Click - here - to deploy this action. - - // Disable power -wait defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -bool true -// Reload the daemon -wait launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist -wait launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist - - - - + + + + + System Configuration: Enable BlueTooth Radio + Enable the BlueTooth radio on OS X.

+

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + not exists file "/Library/Preferences/com.apple.Bluetooth.plist" whose (boolean "ControllerPowerState" of dictionary of it = True) + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 13:40:39 +0000 + + BESC + + + Click + here + to deploy this action. + + // Disable power +wait defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -bool true +// Reload the daemon +wait launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist +wait launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes index be490bcae..081fbd8c0 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable PF Firewall (4016).bes @@ -1,44 +1,44 @@ - - - - - System Configuration: Enable PF Firewall - This fixlet adds the "-e" flag to the ProgramArguments of the /System/Library/LaunchDaemons/com.apple.pfctl.plist. -

This  enables the pf firewall to start at system boot.

-

This fixlet is applicable on Mac OS X 10.9 or later.

-
WARNING: Enabling the pf firewall can lock you out of your system if it's not properly configured! Make sure you test this!
]]> - mac of operating system - = "10.9"]]> - not (exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist") - System Configuration - Internal - rzm102 - 2014-06-13 - - x-fixlet-modification-time - Fri, 13 Jun 2014 19:20:26 +0000 - - BESC - - - Click - here - to deploy this action. - - // Enter your action script here -wait bash -c "defaults write /System/Library/LaunchDaemons/com.apple.pfctl ProgramArguments '(pfctl, -f, /etc/pf.conf, -e)'" -wait chmod 644 /System/Library/LaunchDaemons/com.apple.pfctl.plist -wait plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.pfctl.plist - - - - + + + + + System Configuration: Enable PF Firewall + This fixlet adds the "-e" flag to the ProgramArguments of the /System/Library/LaunchDaemons/com.apple.pfctl.plist. +

This  enables the pf firewall to start at system boot.

+

This fixlet is applicable on Mac OS X 10.9 or later.

+
WARNING: Enabling the pf firewall can lock you out of your system if it's not properly configured! Make sure you test this!
]]> + mac of operating system + = "10.9"]]> + not (exists strings whose (it as lowercase = "-e") of values of array of values of entries whose (key of it = "ProgramArguments") of dictionary of file "/System/Library/LaunchDaemons/com.apple.pfctl.plist") + System Configuration + Internal + rzm102 + 2014-06-13 + + x-fixlet-modification-time + Fri, 13 Jun 2014 19:20:26 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here +wait bash -c "defaults write /System/Library/LaunchDaemons/com.apple.pfctl ProgramArguments '(pfctl, -f, /etc/pf.conf, -e)'" +wait chmod 644 /System/Library/LaunchDaemons/com.apple.pfctl.plist +wait plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.pfctl.plist + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes index 45396b02f..330740514 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Remote Login (SSH) for Admins - Mac OS X (3980).bes @@ -1,46 +1,46 @@ - - - - - System Configuration: Enable Remote Login (SSH) for Admins - Mac OS X - This task will enable remote login (SSH) and grant access for all members of the "admin" group on the local system.

-

This task is applicable on Mac OS X 10.5 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.5"]]> - exists file "/usr/sbin/dseditgroup" - exists file "/usr/sbin/systemsetup" - - System Configuration - SysMan - mah60 - 2014-04-16 - - x-fixlet-modification-time - Tue, 02 Dec 2014 13:36:25 +0000 - - BESC - - - Click - here - to deploy this action. - - // Modify SSH Access Group -wait /usr/sbin/dseditgroup -o create -r "Remote Login ACL" com.apple.access_ssh -wait /usr/sbin/dseditgroup -o edit -t group -a admin com.apple.access_ssh - -// Start SSH Service -wait /usr/sbin/systemsetup -setremotelogin on - - - + + + + + System Configuration: Enable Remote Login (SSH) for Admins - Mac OS X + This task will enable remote login (SSH) and grant access for all members of the "admin" group on the local system.

+

This task is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + exists file "/usr/sbin/dseditgroup" + exists file "/usr/sbin/systemsetup" + + System Configuration + SysMan + mah60 + 2014-04-16 + + x-fixlet-modification-time + Tue, 02 Dec 2014 13:36:25 +0000 + + BESC + + + Click + here + to deploy this action. + + // Modify SSH Access Group +wait /usr/sbin/dseditgroup -o create -r "Remote Login ACL" com.apple.access_ssh +wait /usr/sbin/dseditgroup -o edit -t group -a admin com.apple.access_ssh + +// Start SSH Service +wait /usr/sbin/systemsetup -setremotelogin on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes index 9956eeebd..e3ada99a0 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable USB SuperDrive on All Macs (3822).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Enable USB SuperDrive on All Macs - This fixlet configures OS X nvram to allow the USB Superdrive to work on all hardware systems. -

This setting configures the nvram boot-args. Please be sure this does not overwrite other settings.

-

This fixlet is applicable on Mac OS X 10.7 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.7"]]> - not ((string of value of it whose ( key of it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry) = "mbasd=1") - System Configuration - Internal - rzm102 - 2014-07-31 - - x-fixlet-modification-time - Thu, 31 Jul 2014 14:43:13 +0000 - - BESC - - - Click - here - to deploy this action. - - wait nvram boot-args="mbasd=1" - - - + + + + + System Configuration: Enable USB SuperDrive on All Macs + This fixlet configures OS X nvram to allow the USB Superdrive to work on all hardware systems. +

This setting configures the nvram boot-args. Please be sure this does not overwrite other settings.

+

This fixlet is applicable on Mac OS X 10.7 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.7"]]> + not ((string of value of it whose ( key of it = "boot-args") of entries of dictionary of node "AppleEFINVRAM" of node "AppleEFIRuntime" of node "AppleACPIPlatformExpert" of service plane of iokit registry) = "mbasd=1") + System Configuration + Internal + rzm102 + 2014-07-31 + + x-fixlet-modification-time + Thu, 31 Jul 2014 14:43:13 +0000 + + BESC + + + Click + here + to deploy this action. + + wait nvram boot-args="mbasd=1" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes index eaef16759..a00889aa0 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Enable Wireless (Airport) Adapter (21299).bes @@ -1,40 +1,40 @@ - - - - - System Configuration: Enable Wireless (Airport) Adapter - Enable the Wireless (Airport) radio on OS X. -

This fixlet is applicable on Mac OS X 10.9 or later

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.10"]]> - boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = False - System Configuration - Internal - rzm102 - 2016-08-19 - - x-fixlet-modification-time - Fri, 19 Aug 2016 14:00:46 +0000 - - BESC - - - Click - here - to deploy this action. - - // enable airport radio -wait networksetup -setairportpower airport on - - - + + + + + System Configuration: Enable Wireless (Airport) Adapter + Enable the Wireless (Airport) radio on OS X. +

This fixlet is applicable on Mac OS X 10.9 or later

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.10"]]> + boolean "PowerEnabled" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Interface" of dictionaries of values of entries of dictionaries of values of entries of dictionary "Sets" of dictionaries of file "/Library/Preferences/SystemConfiguration/preferences.plist" = False + System Configuration + Internal + rzm102 + 2016-08-19 + + x-fixlet-modification-time + Fri, 19 Aug 2016 14:00:46 +0000 + + BESC + + + Click + here + to deploy this action. + + // enable airport radio +wait networksetup -setairportpower airport on + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes index c2d1d046b..d337cb5e0 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Print Dialog Boxes (3819).bes @@ -1,42 +1,42 @@ - - - - - System Configuration: Expand Print Dialog Boxes - This fixlet expands the Print dialog boxes for OS X.

-

The expanded dialog boxes allow for additional options to be specified while printing.

-

This fixlet is applicable on Mac OS X 10.5 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.5"]]> - (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "PMPrintingExpandedStateForPrint" of dictionary of it = True)) OR (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "PMPrintingExpandedStateForPrint2" of dictionary of it = True)) - System Configuration - Internal - rzm102 - 2014-07-30 - - x-fixlet-modification-time - Wed, 30 Jul 2014 17:42:32 +0000 - - BESC - - - Click - here - to deploy this action. - - wait defaults write "/Library/Preferences/.GlobalPreferences.plist" PMPrintingExpandedStateForPrint -bool true -wait defaults write "/Library/Preferences/.GlobalPreferences.plist" PMPrintingExpandedStateForPrint2 -bool true - - - - + + + + + System Configuration: Expand Print Dialog Boxes + This fixlet expands the Print dialog boxes for OS X.

+

The expanded dialog boxes allow for additional options to be specified while printing.

+

This fixlet is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "PMPrintingExpandedStateForPrint" of dictionary of it = True)) OR (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "PMPrintingExpandedStateForPrint2" of dictionary of it = True)) + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 17:42:32 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/.GlobalPreferences.plist" PMPrintingExpandedStateForPrint -bool true +wait defaults write "/Library/Preferences/.GlobalPreferences.plist" PMPrintingExpandedStateForPrint2 -bool true + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes index bf2edcb33..a0ddcae3e 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Expand Save Dialog Boxes (3818).bes @@ -1,42 +1,42 @@ - - - - - System Configuration: Expand Save Dialog Boxes - This fixlet expands the Save dialog boxes for OS X.

-

The expanded dialog boxes allow for additional options to be specified while saving.

-

This fixlet is applicable on Mac OS X 10.5 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.5"]]> - (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "NSNavPanelExpandedStateForSaveMode" of dictionary of it = True)) OR (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "NSNavPanelExpandedStateForSaveMode2" of dictionary of it = True)) - System Configuration - Internal - rzm102 - 2014-07-30 - - x-fixlet-modification-time - Wed, 30 Jul 2014 17:28:45 +0000 - - BESC - - - Click - here - to deploy this action. - - wait defaults write "/Library/Preferences/.GlobalPreferences.plist" NSNavPanelExpandedStateForSaveMode -bool true -wait defaults write "/Library/Preferences/.GlobalPreferences.plist" NSNavPanelExpandedStateForSaveMode2 -bool true - - - - + + + + + System Configuration: Expand Save Dialog Boxes + This fixlet expands the Save dialog boxes for OS X.

+

The expanded dialog boxes allow for additional options to be specified while saving.

+

This fixlet is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "NSNavPanelExpandedStateForSaveMode" of dictionary of it = True)) OR (not exists file "/Library/Preferences/.GlobalPreferences.plist" whose (boolean "NSNavPanelExpandedStateForSaveMode2" of dictionary of it = True)) + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 17:28:45 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/.GlobalPreferences.plist" NSNavPanelExpandedStateForSaveMode -bool true +wait defaults write "/Library/Preferences/.GlobalPreferences.plist" NSNavPanelExpandedStateForSaveMode2 -bool true + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes index adc7a441e..7b9e67b5c 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Grant Temporary Admin Rights - macOS (26654).bes @@ -1,178 +1,178 @@ - - - - - System Configuration: Grant Temporary Admin Rights - macOS - This fixlet gives admin rights to a local user. After 30 minutes, a file is touched on the system to trigger a fixlet to remove admin rights. To allow users to elevate admin rights as needed, action this task against an automatic group. There is no end date on the task and it will be reapplicable and re-offered while the action is open.

-

To remove admin rights after 30 minutes, you must run the "System Configuration: Remove Temporary Admin Rights - macOS"

-

The status of the admin rights are reported through the analysis "Temporary Admin Privliges Report - macOS".

]]> - mac of operating system - not exists file "/Library/PSU/removeadmins" - Utilities - Internal - rzm102 - 2018-10-08 - - x-fixlet-modification-time - Tue, 09 Oct 2018 18:24:04 +0000 - - BESC - - - Click - here - to deploy this action. - - - - - - + + + + + System Configuration: Grant Temporary Admin Rights - macOS + This fixlet gives admin rights to a local user. After 30 minutes, a file is touched on the system to trigger a fixlet to remove admin rights. To allow users to elevate admin rights as needed, action this task against an automatic group. There is no end date on the task and it will be reapplicable and re-offered while the action is open.

+

To remove admin rights after 30 minutes, you must run the "System Configuration: Remove Temporary Admin Rights - macOS"

+

The status of the admin rights are reported through the analysis "Temporary Admin Privliges Report - macOS".

]]> + mac of operating system + not exists file "/Library/PSU/removeadmins" + Utilities + Internal + rzm102 + 2018-10-08 + + x-fixlet-modification-time + Tue, 09 Oct 2018 18:24:04 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes index 5dd992e30..eade6e58e 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Quit Printer When Finished (3820).bes @@ -1,41 +1,41 @@ - - - - - System Configuration: Quit Printer When Finished - This fixlet configures printers to auto-quit after printing.

-

The default behavior is to leave the printer window open when finished printing. This changes the default to quit the printer after finished. 

-

This fixlet is applicable on Mac OS X 10.5 or later.

-

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> - mac of operating system - = "10.5"]]> - not exists file "/Library/Preferences/com.apple.print.PrintingPrefs.plist" whose (boolean "Quit When Finished" of dictionary of it = True) - System Configuration - Internal - rzm102 - 2014-07-30 - - x-fixlet-modification-time - Wed, 30 Jul 2014 18:06:48 +0000 - - BESC - - - Click - here - to deploy this action. - - wait defaults write "/Library/Preferences/com.apple.print.PrintingPrefs.plist" "Quit When Finished" -bool true - - - - + + + + + System Configuration: Quit Printer When Finished + This fixlet configures printers to auto-quit after printing.

+

The default behavior is to leave the printer window open when finished printing. This changes the default to quit the printer after finished. 

+

This fixlet is applicable on Mac OS X 10.5 or later.

+

If you have questions or concerns please visit http://clc.its.psu.edu/help to submit a SysMan Help Request.

]]> + mac of operating system + = "10.5"]]> + not exists file "/Library/Preferences/com.apple.print.PrintingPrefs.plist" whose (boolean "Quit When Finished" of dictionary of it = True) + System Configuration + Internal + rzm102 + 2014-07-30 + + x-fixlet-modification-time + Wed, 30 Jul 2014 18:06:48 +0000 + + BESC + + + Click + here + to deploy this action. + + wait defaults write "/Library/Preferences/com.apple.print.PrintingPrefs.plist" "Quit When Finished" -bool true + + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes index ad742d7c1..76e9262e6 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Remove Temporary Admin Rights - macOS (26655).bes @@ -1,249 +1,249 @@ - - - - - System Configuration: Remove Temporary Admin Rights - macOS - This fixlet removes admin rights to a local user. It is relevant after 30 minutes when a file is touched on the system.

-

This task should remain open and running against the same automatic computer group as the Grant Temporary Admin Rights fixlet. Admin rights will only be removed after 30 minutes if this task is running.

-

When started, the task will ask for the username and encrypted password to ensure the local admin maintains the correct password.
Passwords need to be encrupted using the following code: https://github.com/brysontyrrell/EncryptedStrings

-

To offer admin rights, you must run the "System Configuration: Grant Temporary Admin Rights - macOS"

-

The status of the admin rights are reported through the analysis "Temporary Admin Privliges Report - macOS".

]]> - mac of operating system - exists file "/Library/PSU/removeadmins" - Utilities - Internal - rzm102 - 2018-10-08 - - x-fixlet-modification-time - Tue, 09 Oct 2018 18:23:18 +0000 - - BESC - - - Click - here - to deploy this action. - - >> DecryptString("Encrypted String", "Salt", "Passphrase")''' - p = subprocess.Popen(['/usr/bin/openssl', 'enc', '-aes256', '-d', '-a', '-A', '-S', salt, '-k', passphrase], stdin = subprocess.PIPE, stdout = subprocess.PIPE) - return p.communicate(inputString)[0] - -# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # -# APPLICATION -# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # - -if os.path.exists(workingDir + plistFile): - # remove user admin rights - user2Remove = plistlib.readPlist(workingDir + plistFile).User2Remove - subprocess.call(["dseditgroup", "-o", "edit", "-d", user2Remove, "-t", "user", "admin"]) - # add log entry - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - MakeMeAdmin Removed Admin Rights for {{}\r\n".format(datetime.now(), user2Remove)) - log.close() - print 'Revoked Admin Rights for ' + user2Remove - # compre prior to current admin lists - print 'Checking for newly created admin accounts...' - priorAdmins = plistlib.readPlist(workingDir + plistFile).CurrentAdminUsers - currentAdmins = grp.getgrnam('admin').gr_mem - newAdmins = set(currentAdmins).difference(set(priorAdmins)) - newAdm = '' - if not newAdmins: - print ' No New Accounts Found!' - # update compliancy plist - status = {{ 'Status':'Compliant'} - plistlib.writePlist(status, workingDir + statusFile) - else: - print ' New Admin Accounts Found!' - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - MakeMeAdmin Discovered New Admin Accounts: {{}\r\n".format(datetime.now(), list(newAdmins))) - log.close() - # update status plist - status = {{ 'Status':'Remediated', - 'newAdmins':'newAdmin Created', - 'orgAdmin':'orgAdmin OK'} - plistlib.writePlist(status, workingDir + statusFile) - newAdm = plistlib.readPlist(workingDir + statusFile).newAdmins - # loop through new admin accounts and remove admin rights - print ' Removing Admin Rights for New Admin Accounts...' - for user in newAdmins: - subprocess.call(["dseditgroup", "-o", "edit", "-d", user, "-t", "user", "admin"]) - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - MakeMeAdmin Removed Admin Rights for: {{}\r\n".format(datetime.now(), user)) - log.close() - print ' Removed Admin Rights for ' + user - time.sleep(1) - # check if organization admin(s) are valid - print 'Checking organizational admin passwords...' - for admin, admpass in orgAdmins.iteritems(): - # decrypt password - admpassDecrypted = DecryptString(admpass, salt, passphrase) - time.sleep(1) - valid = subprocess.call(["dscl", "/Local/Default", "-authonly", admin, admpassDecrypted]) - time.sleep(1) - if valid == 0: - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - orgAdmin Password is Valid \r\n".format(datetime.now())) - log.close() - print 'Password for orgAdmin: ' + admin + ' is valid!' - else: - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - orgAdmin Password is Invalid! \r\n".format(datetime.now())) - log.close() - result = subprocess.call(["dscl", ".", "passwd", "/Users/" + admin, admpassDecrypted]) - time.sleep(3) - print 'Password for orgAdmin: ' + admin + ' was invalid!' - if result == 0: - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - orgAdmin Password Successfully Reset! \r\n".format(datetime.now())) - log.close() - print 'Password Successfully Reset for ' + admin + "!" - if not newAdm: - # update status plist - status = {{ 'Status':'Remediated', - 'newAdmins':'No newAdmins', - 'orgAdmin':'orgAdmin OK'} - plistlib.writePlist(status, workingDir + statusFile) - else: - # update status plist - status = {{ 'Status':'Remediated', - 'newAdmins':'newAdmin Created', - 'orgAdmin':'orgAdmin OK'} - plistlib.writePlist(status, workingDir + statusFile) - else: - log = open(workingDir + tempAdminLog, "a+") - log.write("{{} - Error Resetting orgAdmin Password! \r\n".format(datetime.now())) - log.close() - print 'Error Resetting Password for ' + admin + "!" - if not newAdm: - # update status plist - status = {{ 'Status':'Violation', - 'newAdmins':'No newAdmins', - 'orgAdmin':'orgAdmin ERROR'} - plistlib.writePlist(status, workingDir + statusFile) - else: - # update status plist - status = {{ 'Status':'Violation', - 'newAdmins':'newAdmin Created', - 'orgAdmin':'orgAdmin ERROR'} - plistlib.writePlist(status, workingDir + statusFile) - os.remove(workingDir + plistFile) - -if os.path.exists('/Library/LaunchDaemons/' + launchdFile): - print 'Removing LaunchDaemon...' - os.remove('/Library/LaunchDaemons/' + launchdFile) -os.remove(workingDir + "removeadmins") -EOF - -folder create "/Library/PSU" -delete "/Library/PSU/removeAdmin.py" -move __createfile "/Library/PSU/removeAdmin.py" - -wait /usr/bin/python "/Library/PSU/removeAdmin.py" -delete "/Library/PSU/removeAdmin.py" -]]> - - - + + + + + System Configuration: Remove Temporary Admin Rights - macOS + This fixlet removes admin rights to a local user. It is relevant after 30 minutes when a file is touched on the system.

+

This task should remain open and running against the same automatic computer group as the Grant Temporary Admin Rights fixlet. Admin rights will only be removed after 30 minutes if this task is running.

+

When started, the task will ask for the username and encrypted password to ensure the local admin maintains the correct password.
Passwords need to be encrupted using the following code: https://github.com/brysontyrrell/EncryptedStrings

+

To offer admin rights, you must run the "System Configuration: Grant Temporary Admin Rights - macOS"

+

The status of the admin rights are reported through the analysis "Temporary Admin Privliges Report - macOS".

]]> + mac of operating system + exists file "/Library/PSU/removeadmins" + Utilities + Internal + rzm102 + 2018-10-08 + + x-fixlet-modification-time + Tue, 09 Oct 2018 18:23:18 +0000 + + BESC + + + Click + here + to deploy this action. + + >> DecryptString("Encrypted String", "Salt", "Passphrase")''' + p = subprocess.Popen(['/usr/bin/openssl', 'enc', '-aes256', '-d', '-a', '-A', '-S', salt, '-k', passphrase], stdin = subprocess.PIPE, stdout = subprocess.PIPE) + return p.communicate(inputString)[0] + +# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # +# APPLICATION +# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # + +if os.path.exists(workingDir + plistFile): + # remove user admin rights + user2Remove = plistlib.readPlist(workingDir + plistFile).User2Remove + subprocess.call(["dseditgroup", "-o", "edit", "-d", user2Remove, "-t", "user", "admin"]) + # add log entry + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - MakeMeAdmin Removed Admin Rights for {{}\r\n".format(datetime.now(), user2Remove)) + log.close() + print 'Revoked Admin Rights for ' + user2Remove + # compre prior to current admin lists + print 'Checking for newly created admin accounts...' + priorAdmins = plistlib.readPlist(workingDir + plistFile).CurrentAdminUsers + currentAdmins = grp.getgrnam('admin').gr_mem + newAdmins = set(currentAdmins).difference(set(priorAdmins)) + newAdm = '' + if not newAdmins: + print ' No New Accounts Found!' + # update compliancy plist + status = {{ 'Status':'Compliant'} + plistlib.writePlist(status, workingDir + statusFile) + else: + print ' New Admin Accounts Found!' + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - MakeMeAdmin Discovered New Admin Accounts: {{}\r\n".format(datetime.now(), list(newAdmins))) + log.close() + # update status plist + status = {{ 'Status':'Remediated', + 'newAdmins':'newAdmin Created', + 'orgAdmin':'orgAdmin OK'} + plistlib.writePlist(status, workingDir + statusFile) + newAdm = plistlib.readPlist(workingDir + statusFile).newAdmins + # loop through new admin accounts and remove admin rights + print ' Removing Admin Rights for New Admin Accounts...' + for user in newAdmins: + subprocess.call(["dseditgroup", "-o", "edit", "-d", user, "-t", "user", "admin"]) + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - MakeMeAdmin Removed Admin Rights for: {{}\r\n".format(datetime.now(), user)) + log.close() + print ' Removed Admin Rights for ' + user + time.sleep(1) + # check if organization admin(s) are valid + print 'Checking organizational admin passwords...' + for admin, admpass in orgAdmins.iteritems(): + # decrypt password + admpassDecrypted = DecryptString(admpass, salt, passphrase) + time.sleep(1) + valid = subprocess.call(["dscl", "/Local/Default", "-authonly", admin, admpassDecrypted]) + time.sleep(1) + if valid == 0: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - orgAdmin Password is Valid \r\n".format(datetime.now())) + log.close() + print 'Password for orgAdmin: ' + admin + ' is valid!' + else: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - orgAdmin Password is Invalid! \r\n".format(datetime.now())) + log.close() + result = subprocess.call(["dscl", ".", "passwd", "/Users/" + admin, admpassDecrypted]) + time.sleep(3) + print 'Password for orgAdmin: ' + admin + ' was invalid!' + if result == 0: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - orgAdmin Password Successfully Reset! \r\n".format(datetime.now())) + log.close() + print 'Password Successfully Reset for ' + admin + "!" + if not newAdm: + # update status plist + status = {{ 'Status':'Remediated', + 'newAdmins':'No newAdmins', + 'orgAdmin':'orgAdmin OK'} + plistlib.writePlist(status, workingDir + statusFile) + else: + # update status plist + status = {{ 'Status':'Remediated', + 'newAdmins':'newAdmin Created', + 'orgAdmin':'orgAdmin OK'} + plistlib.writePlist(status, workingDir + statusFile) + else: + log = open(workingDir + tempAdminLog, "a+") + log.write("{{} - Error Resetting orgAdmin Password! \r\n".format(datetime.now())) + log.close() + print 'Error Resetting Password for ' + admin + "!" + if not newAdm: + # update status plist + status = {{ 'Status':'Violation', + 'newAdmins':'No newAdmins', + 'orgAdmin':'orgAdmin ERROR'} + plistlib.writePlist(status, workingDir + statusFile) + else: + # update status plist + status = {{ 'Status':'Violation', + 'newAdmins':'newAdmin Created', + 'orgAdmin':'orgAdmin ERROR'} + plistlib.writePlist(status, workingDir + statusFile) + os.remove(workingDir + plistFile) + +if os.path.exists('/Library/LaunchDaemons/' + launchdFile): + print 'Removing LaunchDaemon...' + os.remove('/Library/LaunchDaemons/' + launchdFile) +os.remove(workingDir + "removeadmins") +EOF + +folder create "/Library/PSU" +delete "/Library/PSU/removeAdmin.py" +move __createfile "/Library/PSU/removeAdmin.py" + +wait /usr/bin/python "/Library/PSU/removeAdmin.py" +delete "/Library/PSU/removeAdmin.py" +]]> + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes index 3b7ded496..60e7d2985 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/System Configuration_ Set Time Zone to America_New_York - Mac OS X (10606).bes @@ -1,38 +1,38 @@ - - - - - System Configuration: Set Time Zone to America/New_York - Mac OS X - This task will set the the system time zone to 'America/New_York' using the "systemsetup" utility.

-

System Preferences > Date & Time > Time Zone

]]> - mac of operating system - exists file "/usr/sbin/systemsetup" - not exists file "/etc/localtime" whose (sha1 of it = sha1 of file "/usr/share/zoneinfo/America/New_York") - System Configuration - SysMan - mah60 - 2014-04-22 - - x-fixlet-modification-time - Wed, 23 Apr 2014 13:31:21 +0000 - - BESC - - - Click - here - to deploy this action. - - wait /usr/sbin/systemsetup -settimezone "America/New_York" - - - + + + + + System Configuration: Set Time Zone to America/New_York - Mac OS X + This task will set the the system time zone to 'America/New_York' using the "systemsetup" utility.

+

System Preferences > Date & Time > Time Zone

]]> + mac of operating system + exists file "/usr/sbin/systemsetup" + not exists file "/etc/localtime" whose (sha1 of it = sha1 of file "/usr/share/zoneinfo/America/New_York") + System Configuration + SysMan + mah60 + 2014-04-22 + + x-fixlet-modification-time + Wed, 23 Apr 2014 13:31:21 +0000 + + BESC + + + Click + here + to deploy this action. + + wait /usr/sbin/systemsetup -settimezone "America/New_York" + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes index b7e26ed16..f191a9f13 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (3958).bes @@ -1,72 +1,72 @@ - - - - - UPDATE: Mac OS X 10.10.2 Available -

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

-

File Size:

528.65 MB
-
-

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> - = "10.10.1" and it as version < "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> - Security Update - Apple - APPLE-SA-2015-01-27-3 - 2015-01-27 - Unspecified - CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:23 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. - - prefetch OSXUpd10.10.2-10.10.2.dmg sha1:8b5b07e3ac81b101fb4cb89b0a9c6d8fe551d598 size:554331370 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-17158.20150127.ilntx/osxupd10.10.2.dmg sha256:08f02e87adfb06b73dcec6dc55e07e2e88cb661cfb5869d6664a93d2935ebef5 - -wait cp "{posix path of file "OSXUpd10.10.2-10.10.2.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" - -wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/OSXUpd10.10.2" "/private/tmp/OSXUpd10.10.2-10.10.2.dmg" - -wait rm -rf "/private/tmp/OSXUpd10.10.2-10.10.2.dmg" - -wait cp -r "/Volumes/OSXUpd10.10.2/OSXUpd10.10.2.pkg" "/private/tmp/OSXUpd10.10.2.pkg" - -wait /bin/bash -c "devname=`df | grep OSXUpd10.10.2 | awk '{{print $1}'`; hdiutil detach -force $devname;" - -wait installer -pkg "/private/tmp/OSXUpd10.10.2.pkg" -target / - -action requires restart - - - - Click - here - &nbsp;to initiate the deployment process through the Apple Software Update tool. - - wait softwareupdate -i OSXUpd10.10.2-10.10.2 - -action requires restart - - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + UPDATE: Mac OS X 10.10.2 Available +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+

File Size:

528.65 MB
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + = "10.10.1" and it as version < "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> + Security Update + Apple + APPLE-SA-2015-01-27-3 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:23 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + prefetch OSXUpd10.10.2-10.10.2.dmg sha1:8b5b07e3ac81b101fb4cb89b0a9c6d8fe551d598 size:554331370 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-17158.20150127.ilntx/osxupd10.10.2.dmg sha256:08f02e87adfb06b73dcec6dc55e07e2e88cb661cfb5869d6664a93d2935ebef5 + +wait cp "{posix path of file "OSXUpd10.10.2-10.10.2.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/OSXUpd10.10.2" "/private/tmp/OSXUpd10.10.2-10.10.2.dmg" + +wait rm -rf "/private/tmp/OSXUpd10.10.2-10.10.2.dmg" + +wait cp -r "/Volumes/OSXUpd10.10.2/OSXUpd10.10.2.pkg" "/private/tmp/OSXUpd10.10.2.pkg" + +wait /bin/bash -c "devname=`df | grep OSXUpd10.10.2 | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/OSXUpd10.10.2.pkg" -target / + +action requires restart + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + wait softwareupdate -i OSXUpd10.10.2-10.10.2 + +action requires restart + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes index dd6cc6a1d..8569d627f 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) (3972).bes @@ -1,85 +1,85 @@ - - - - - UPDATE: Mac OS X 10.10.2 Available (Combo) -

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

-

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

-

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

-

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

-

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

-
-

File Size:

801.35 MB
-
-

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> - (exists string "ProductVersion" whose (it as string = "10.10") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" - Security Update - Apple - APPLE-SA-2015-01-27-4 - 2015-01-27 - Unspecified - CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 - - x-fixlet-domain_attributes - PTCH Patch Apple OSUpdate - - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. - - prefetch OSXUpdCombo10.10.2.dmg sha1:6B2465514B16FFD89D625A17C06F05D04760C130 size:840280237 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-17315.20150128.Cxx4r/OSXUpdCombo10.10.2.dmg sha256:DC5B256D4711FC54999EA050EF37D551071BB0322F79602E9576DF80F0C1C5B4 - -wait cp "{posix path of file "OSXUpdCombo10.10.2.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" - -wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/OSXUpdCombo10.10.2" "/private/tmp/OSXUpdCombo10.10.2.dmg" - -wait rm -rf "/private/tmp/OSXUpdCombo10.10.2.dmg" - -wait cp -r "/Volumes/OSXUpdCombo10.10.2/OSXUpdCombo10.10.2.pkg" "/private/tmp/OSXUpdCombo10.10.2.pkg" - -wait /bin/bash -c "devname=`df | grep OSXUpdCombo10.10.2 | awk '{{print $1}'`; hdiutil detach -force $devname;" - -wait installer -pkg "/private/tmp/OSXUpdCombo10.10.2.pkg" -target / - -action requires restart - - - - Click - here - &nbsp;to initiate the deployment process through the Apple Software Update tool. - - if{(string "ProductVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") = "10.10.1"} - wait softwareupdate -i OSXUpd10.10.2-10.10.2 -else - wait softwareupdate -i OSXUpdCombo10.10.2-10.10.2 -endif - -action requires restart - - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + UPDATE: Mac OS X 10.10.2 Available (Combo) +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

+

This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint.

+

The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints.

+

Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully.

+

Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted.

+
+

File Size:

801.35 MB
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + (exists string "ProductVersion" whose (it as string = "10.10") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + Security Update + Apple + APPLE-SA-2015-01-27-4 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the IBM Endpoint Manager server. + + prefetch OSXUpdCombo10.10.2.dmg sha1:6B2465514B16FFD89D625A17C06F05D04760C130 size:840280237 http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Apple_Software_Updates/Mac_OS_X/downloads/031-17315.20150128.Cxx4r/OSXUpdCombo10.10.2.dmg sha256:DC5B256D4711FC54999EA050EF37D551071BB0322F79602E9576DF80F0C1C5B4 + +wait cp "{posix path of file "OSXUpdCombo10.10.2.dmg" of folder "__Download" of client folder of current site}" "/private/tmp/" + +wait hdiutil attach -quiet -noautoopen -nobrowse -private -mountpoint "/Volumes/OSXUpdCombo10.10.2" "/private/tmp/OSXUpdCombo10.10.2.dmg" + +wait rm -rf "/private/tmp/OSXUpdCombo10.10.2.dmg" + +wait cp -r "/Volumes/OSXUpdCombo10.10.2/OSXUpdCombo10.10.2.pkg" "/private/tmp/OSXUpdCombo10.10.2.pkg" + +wait /bin/bash -c "devname=`df | grep OSXUpdCombo10.10.2 | awk '{{print $1}'`; hdiutil detach -force $devname;" + +wait installer -pkg "/private/tmp/OSXUpdCombo10.10.2.pkg" -target / + +action requires restart + + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + if{(string "ProductVersion" of dictionary of file "/System/Library/CoreServices/SystemVersion.plist") = "10.10.1"} + wait softwareupdate -i OSXUpd10.10.2-10.10.2 +else + wait softwareupdate -i OSXUpdCombo10.10.2-10.10.2 +endif + +action requires restart + + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes index a10016055..008faace7 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available (Combo) - Audit (3970).bes @@ -1,45 +1,45 @@ - - - - - UPDATE: Mac OS X 10.10.2 Available (Combo) - Audit -

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

-
-

File Size:

N/A
-
-

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> - (exists string "ProductVersion" whose (it as string = "10.10") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" - Security Update - Apple - APPLE-SA-2015-01-27-4 - 2015-01-27 - Unspecified - CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 - - x-fixlet-domain_attributes - PTCH Patch Apple OSUpdate - - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + UPDATE: Mac OS X 10.10.2 Available (Combo) - Audit +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

+
+

File Size:

N/A
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + (exists string "ProductVersion" whose (it as string = "10.10") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist" + Security Update + Apple + APPLE-SA-2015-01-27-4 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-domain_attributes + PTCH Patch Apple OSUpdate + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes index de5bb051a..cd32f9c37 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ Mac OS X 10.10.2 Available - Audit (3955).bes @@ -1,40 +1,40 @@ - - - - - UPDATE: Mac OS X 10.10.2 Available - Audit -

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

-

File Size:

N/A
-
-

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> - = "10.10.1" and it as version < "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> - Security Update - Apple - APPLE-SA-2015-01-27-3 - 2015-01-27 - Unspecified - CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - - Click - here - &nbsp;to view more information from Apple on this update. - - http://support.apple.com/kb/HT1222 - - - + + + + + UPDATE: Mac OS X 10.10.2 Available - Audit +

The 10.10.2 Update is recommended for all users running Mac OS X Yosemite. It includes general operating system fixes that enhance the stability, compatibility, and security of your Mac.

+

File Size:

N/A
+
+

CVE:

CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834
]]> + = "10.10.1" and it as version < "10.10.2") of dictionary of it) of file "/System/Library/CoreServices/SystemVersion.plist"]]> + Security Update + Apple + APPLE-SA-2015-01-27-3 + 2015-01-27 + Unspecified + CVE-2014-6277, CVE-2014-7186, CVE-2014-7187, CVE-2014-8836, CVE-2014-8837, CVE-2014-4460, CVE-2014-4481, CVE-2014-4498, CVE-2014-4499, CVE-2014-1595, CVE-2014-8817, CVE-2014-4484, CVE-2014-4483, CVE-2014-4485, CVE-2014-8819, CVE-2014-8820, CVE-2014-8821, CVE-2014-4486, CVE-2014-4487, CVE-2014-4488, CVE-2014-4489, CVE-2014-8822, CVE-2014-8830, CVE-2014-8838, CVE-2014-8835, CVE-2014-4495, CVE-2014-8824, CVE-2014-4491, CVE-2014-4461, CVE-2014-8826, CVE-2014-4492, CVE-2014-8827, CVE-2014-8517, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-8832, CVE-2014-4389, CVE-2014-8823, CVE-2014-8825, CVE-2014-4371, CVE-2014-4419, CVE-2014-4420, CVE-2014-4421, CVE-2014-8839, CVE-2014-8833, CVE-2014-8834 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + + Click + here + &nbsp;to view more information from Apple on this update. + + http://support.apple.com/kb/HT1222 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes index c8aca0bb9..b717fe0b4 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/UPDATE_ macOS High Sierra 10.13.1 root login bug CVE-2017-13872 (24859).bes @@ -1,55 +1,55 @@ - - - - - UPDATE: macOS High Sierra 10.13.1 root login bug CVE-2017-13872 - Not impacted: macOS Sierra 10.12.6 and earlier
Impact: An attacker may be able to bypass administrator authentication without supplying the administrator’s password
Description: A logic error existed in the validation of credentials. This was addressed with improved credential validation.
CVE-2017-13872 ]]> - true - Patch - LBNL - 2017-11-29 - Critical - CVE-2017-13872 - - x-fixlet-product - macOS High Sierra 10.13 - - - x-fixlet-first-propagation - Thu, 02 Nov 2017 15:25:23 +0000 - - - x-fixlet-modification-time - Thu, 30 Nov 2017 01:52:40 +0000 - - BESC - - - Click - here - &nbsp;to initiate the deployment process through the Apple Software Update tool. - - #!/bin/bash - -softwareupdate -l -softwareupdate -i 'Security Update 2017-001- ' - - - - Click - here - &nbsp;to view more information from Apple on this update. - - https://support.apple.com/en-us/HT208315 - - - + + + + + UPDATE: macOS High Sierra 10.13.1 root login bug CVE-2017-13872 + Not impacted: macOS Sierra 10.12.6 and earlier
Impact: An attacker may be able to bypass administrator authentication without supplying the administrator’s password
Description: A logic error existed in the validation of credentials. This was addressed with improved credential validation.
CVE-2017-13872 ]]> + true + Patch + LBNL + 2017-11-29 + Critical + CVE-2017-13872 + + x-fixlet-product + macOS High Sierra 10.13 + + + x-fixlet-first-propagation + Thu, 02 Nov 2017 15:25:23 +0000 + + + x-fixlet-modification-time + Thu, 30 Nov 2017 01:52:40 +0000 + + BESC + + + Click + here + &nbsp;to initiate the deployment process through the Apple Software Update tool. + + #!/bin/bash + +softwareupdate -l +softwareupdate -i 'Security Update 2017-001- ' + + + + Click + here + &nbsp;to view more information from Apple on this update. + + https://support.apple.com/en-us/HT208315 + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes b/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes index 4920ece3b..e1174a4ed 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/Warning - Hosts files contains manually defined hosts - Win_Mac (20536).bes @@ -1,27 +1,27 @@ - - - - - Warning - Hosts files contains manually defined hosts - Win\Mac - This fixlet is relevant if there are manually defined hosts in the system's hosts file.

-

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> - windows of operating system or mac of operating system - 0]]> - Internal - 2016-04-23 - - x-fixlet-modification-time - Thu, 17 Sep 2026 20:38:22 +0000 - - BESC - - + + + + + Warning - Hosts files contains manually defined hosts - Win\Mac + This fixlet is relevant if there are manually defined hosts in the system's hosts file.

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + windows of operating system or mac of operating system + 0]]> + Internal + 2016-04-23 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:38:22 +0000 + + BESC + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes b/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes index 855d3f70f..9e8d3b2b9 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation (26900).bes @@ -1,68 +1,68 @@ - - - - - set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation - This is a partial mitigation / workaround for CVE-2021-44228.

-

This will be relevant on ALL systems that do not have this environment variable set, regardless of presents of a vulnerable Log4J jar file or even an installed Java runtime. This fixlet doesn't mean that a system is vulnerable, only that it hasn't been mitigated from potential vulnerablity.

References:

-]]> - not exists unique values whose(it contains "true") of values of (variables ("LOG4J_FORMAT_MSG_NO_LOOKUPS") of it; (if (windows of operating system) then (x64 variables ("LOG4J_FORMAT_MSG_NO_LOOKUPS") of it) else NOTHINGS) ) of environments - Configuration - Internal - jgstew - 2021-12-14 - High - CVE-2021-44228 - - x-fixlet-modification-time - Tue, 14 Dec 2021 20:42:02 +0000 - - BESC - - - Click - here - to deploy this action. - - > /etc/profile' -endif - -endif - -if { unix of operating system } -if { exists folders "/etc/profile.d" AND not exists files "/etc/profile.d/CVE-2021-44228.sh" } - -wait /bin/sh -c 'echo -e "export LOG4J_FORMAT_MSG_NO_LOOKUPS=true" > /etc/profile.d/CVE-2021-44228.sh' - -endif -endif - -action requires restart]]> - - - + + + + + set LOG4J_FORMAT_MSG_NO_LOOKUPS env var to TRUE - Universal - CVE-2021-44228 mitigation + This is a partial mitigation / workaround for CVE-2021-44228.

+

This will be relevant on ALL systems that do not have this environment variable set, regardless of presents of a vulnerable Log4J jar file or even an installed Java runtime. This fixlet doesn't mean that a system is vulnerable, only that it hasn't been mitigated from potential vulnerablity.

References:

+]]> + not exists unique values whose(it contains "true") of values of (variables ("LOG4J_FORMAT_MSG_NO_LOOKUPS") of it; (if (windows of operating system) then (x64 variables ("LOG4J_FORMAT_MSG_NO_LOOKUPS") of it) else NOTHINGS) ) of environments + Configuration + Internal + jgstew + 2021-12-14 + High + CVE-2021-44228 + + x-fixlet-modification-time + Tue, 14 Dec 2021 20:42:02 +0000 + + BESC + + + Click + here + to deploy this action. + + > /etc/profile' +endif + +endif + +if { unix of operating system } +if { exists folders "/etc/profile.d" AND not exists files "/etc/profile.d/CVE-2021-44228.sh" } + +wait /bin/sh -c 'echo -e "export LOG4J_FORMAT_MSG_NO_LOOKUPS=true" > /etc/profile.d/CVE-2021-44228.sh' + +endif +endif + +action requires restart]]> + + + diff --git a/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes b/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes index d2a28b73c..18202d673 100644 --- a/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes +++ b/Sites/Apple Management/Fixlets/Fixlets/write System Profiler info - Mac (20446).bes @@ -1,53 +1,53 @@ - - - - - write System Profiler info - Mac - - mac of operating system - not exists folders "/tmp/system_profiler/" - Internal - 2016-05-02 - - x-fixlet-modification-time - Tue, 03 May 2016 20:41:06 +0000 - - BESC - - - Click - here - to deploy this action. - - {parameter "target_folder"}_spOut_listDataTypes.txt" - -// dump system_profiler data into separate .txt files -wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("system_profiler " & it & " > " & parameter "target_folder" & it & ".txt") of (it as trimmed string) whose(it as lowercase starts with "sp") of unique values of lines of files "_spOut_listDataTypes.txt" of folder ( parameter "target_folder" ) } -// dump system_profiler data into separate .xml files (plist format) -wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("system_profiler -xml " & it & " > " & parameter "target_folder" & it & ".spx") of (it as trimmed string) whose(it as lowercase starts with "sp") of unique values of lines of files "_spOut_listDataTypes.txt" of folder ( parameter "target_folder" ) } - -// Delete empty txt files -wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("rm -f '" & it & "'") of pathnames of files whose(0 = size of it AND name of it starts with "SP") of folder ( parameter "target_folder" ) } - -// Delete empty spx/xml/plist files -wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("rm -f '" & it & "'") of pathnames of files whose(name of it as lowercase ends with ".spx" AND name of it starts with "SP" AND 0 = (number of values of arrays "_items" of dictionaries of values of arrays of it) of it) of folder ( parameter "target_folder" ) } -]]> - - - - + + + + + write System Profiler info - Mac + + mac of operating system + not exists folders "/tmp/system_profiler/" + Internal + 2016-05-02 + + x-fixlet-modification-time + Tue, 03 May 2016 20:41:06 +0000 + + BESC + + + Click + here + to deploy this action. + + {parameter "target_folder"}_spOut_listDataTypes.txt" + +// dump system_profiler data into separate .txt files +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("system_profiler " & it & " > " & parameter "target_folder" & it & ".txt") of (it as trimmed string) whose(it as lowercase starts with "sp") of unique values of lines of files "_spOut_listDataTypes.txt" of folder ( parameter "target_folder" ) } +// dump system_profiler data into separate .xml files (plist format) +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("system_profiler -xml " & it & " > " & parameter "target_folder" & it & ".spx") of (it as trimmed string) whose(it as lowercase starts with "sp") of unique values of lines of files "_spOut_listDataTypes.txt" of folder ( parameter "target_folder" ) } + +// Delete empty txt files +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("rm -f '" & it & "'") of pathnames of files whose(0 = size of it AND name of it starts with "SP") of folder ( parameter "target_folder" ) } + +// Delete empty spx/xml/plist files +wait sh -c { ("%22" & it & "%22") of concatenations ";" of ("rm -f '" & it & "'") of pathnames of files whose(name of it as lowercase ends with ".spx" AND name of it starts with "SP" AND 0 = (number of values of arrays "_items" of dictionaries of values of arrays of it) of it) of folder ( parameter "target_folder" ) } +]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/545-BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes b/Sites/BigFix Management/Fixlets/Fixlets/545-BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes index 666aa623f..980f27b97 100644 --- a/Sites/BigFix Management/Fixlets/Fixlets/545-BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes +++ b/Sites/BigFix Management/Fixlets/Fixlets/545-BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes @@ -1,507 +1,507 @@ - - - - - BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) - .header { font-size: 14px; background-color: #990000; color: white; padding: 6px 40px 6px 10px; white-space: nowrap; } .row { font-size: 14px; padding: 6px 40px 6px 10px; border: 1px solid black; border-top: none; } .nowrap { white-space: nowrap; } - -
-
-
-
Description

-
This task will enable FillDB Performance logging.  Log files sizes and logging duration options are presented in the User Input and Parameters section.
-
 
-
Deployment Notes

-
    -
  • -
    This task can only be run by Master Operators.
    -
  • -
    This will only be relevant on BigFix root servers that do not already have FillDB Performance logging enabled.
    -
  • -
    Creates the Health Check folder structure on the same drive that the BigFix root server is installed on. Edit the actionscript parameters if you want something different.
    -
  • -
    Run this as a one time action.
    -
  • -
    -
    The FillDB service must be restarted to enable/disable logging. This task will restart the FillDB service.
    -
  • -
    -
    -
    More information about BigFix logging can be found here.
-
User Input and Parameters

-
- - - - - - - - - - - - - - - - - - - - - - -
-

Log Size

FillDB Performance logging will rotate log files automatically at a default file size of 100 MB and a cap of 10 files - giving us a total of 1 GB of logs. This is the recommended starting point for the total amount of log files needed for analysis. For situations where you want a different  maximum total for the FillDB Performance log files, use the field below.  The minimum total size being 500 MB (so enter "500") and the maximum total size being 4 GB (enter "4000"). 

-

Note: The maximum total size can be greater than 4 GB but for this automation we are using 4 GB as a guardrail.  A set of logs that size can take a while to analyze later on.

-


FillDB Performance Log Maximum Total Size (MB):

.

-

Do Not Modify the Default Maximum Total Log File Size

-


Log Duration

-

FillDB Performance logging adds some overhead and should not be enabled without a clear plan to disable it when logging is no longer needed. This task can generate a sub-task to disable FillDB Performance logging after a specified number of hours. 

-

Enter in the maxiumum duration for FillDB Performance logging to be run in the field below. 

-


FillDB Performance Logging Duration (Hours):

-

To run open ended logging, select the checkbox below. There is a companion task named "WARNING: BigFix Platform Health Check -- Disable FillDB Performance Logging" to disable logging at any time.

-


-

Credentials

-

Enter in the credentials for a master operator (MO) so this task can generate the action to disable FillDB Performance logging using the BigFix REST API after the duration specified above. These credentials will be protected by using the secure parameters feature.

-

Note: If SAML is enabled then please enter in a local BigFix MO account.

Specify API Username:

Specify API Password:

Confirm API Password:

-
Supported Platforms

-
Windows

-
Version and Release Notes
-
 
-
4.0.1 - Addressed scenario where log max size settings were already in place which caused unexpected log sizes. Clarified log rotation is enabled by default but can be changed to a higher value to produce more logs. Fixed typo with max log file size setting.
-
4.0 - Version sync. Service restart warning. 
-
3.0 - Added MO restriction. Dated backup folders. Moved FillDB Performance logs up 1 level and out of the main Logs folder to avoid back up issues/conflicts with other logging tasks. Version sync with other HC content.
-
2.0.1 - Changed file names.
-
2.0.0 - Re-branded.
-
1.0 - Initial version.
]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - /* IS A WINDOWS ROOT SERVER */ ((exists main gather service AND windows of operating system) AND /* LOGGING NOT SET */ (not exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry)) - BigFix Platform Health Check - HCL BigFix AVP and Professional Services - Data Collection - Day 1 - 2025-11-19 - Required - - x-fixlet-modification-time - Thu, 20 Nov 2025 15:45:27 +0000 - - BES - - - Click - here - to deploy this action. - - -//* -//* DESCRIPTION AND NOTES -//* -//* - This task will enable FillDB Performance logging and, if chosen, spawn a -//* BigFix action to disable FillDB Performance logging after a specified duration (hours). -//* -//* ====================================================================================================> - -//* ====================================================================================================> -//* -//* SET SOME PARAMETERS -//* -//* - These parameters can be used to control the location and naming of the various health check files -//* and folders. -//* -//* - Ideally, the only thing that would be changed here would be the driveLetter. Be careful about -//* adjusting anything else. -//* -//* ====================================================================================================> - - -action parameter query "restart" with description "To enable these changes you need to restart the FillDB Service. Enter 'Y' to confirm you are aware of the serivce restart for both the enablement of logging and the disabling of logging later, if chosen. Click Cancel to exit the task if you wish to do this at another time." with default "N" -parameter "res" = "{parameter "restart" of action as string as lowercase}" - -if {(parameter "res") is "y"} - -parameter "driveLetter" = "{preceding texts of firsts "\" of (value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of native registry as string)}" -parameter "checkType" = "Platform" -parameter "rootFolder" = "{parameter "driveLetter" & "\BigFix_Health_Check\" & parameter "checkType"}" -parameter "cliFolder" = "{value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of native registry as string & "IEM CLI"}" -parameter "apiPort" = "{value "Port" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of x32 registry}" -parameter "resultsFolder" = "{parameter "rootFolder" & "\Results"}" -parameter "backupFolder" = "{parameter "rootFolder" & "\Backup"}" -parameter "resultsBackupFolder" = "{parameter "backupFolder" & "\Results"}" -parameter "xmlFilesFolder" = "{parameter "rootFolder" & "\XML_Files"}" -parameter "logsFolder" = "{parameter "resultsFolder" & "\Logs"}" -parameter "fillDBPerfLogsFolder"="{parameter "logsFolder" & "\FillDB_Performance"}" -parameter "fillDBPerfLogsBackupFolder" = "{parameter "resultsBackupFolder" & "\Logs\FillDB_Performance" & "\" & (((month of it as two digits & "-" & day_of_month of it as two digits & "-" & year of it as string) of date(local time zone) of it & "_" & (two digit hour of it as string & two digit minute of it as string) of time (local time zone) of it) of now)}" -parameter "fillDBPerfLogsName"="{"FillDBperf.log"}" -parameter "fillDBPerfLogsFullName"="{parameter "fillDBPerfLogsFolder" & "\" & parameter "fillDBPerfLogsName"}" - -//* ====================================================================================================> -//* -//* BACKUP EXISTING FILES, IF PRESENT. THIS IS MORE FOR TROUBLESHOOTING. -//* -//* ====================================================================================================> - -if {if (exists folder (parameter "fillDBPerfLogsFolder")) then (exists files of folder (parameter "fillDBPerfLogsFolder")) else (false)} -folder create "{parameter "fillDBPerfLogsBackupFolder"}" -waithidden cmd.exe /C xcopy "{parameter "fillDBPerfLogsFolder" & "\*.log"}" "{parameter "fillDBPerfLogsBackupFolder" & "\*.log"}" /E /Y -waithidden cmd.exe /C del /F /Q "{parameter "fillDBPerfLogsFolder" & "\*.*"}" -endif - -//* ====================================================================================================> -//* -//* DELETE ANY EXISTING FOLDERS, SCRIPTS, ETC. SO WE CAN CREATE FRESH CONTENT -//* -//* ====================================================================================================> - -// Nothing to delete here... - -//* ====================================================================================================> -//* -//* BUILD OUT THE FOLDER STRUCTURE TO SUPPORT THE GLOBAL TASK -//* -//* ====================================================================================================> - -folder create "{parameter "xmlFilesFolder"}" -folder create "{parameter "rootFolder"}" -folder create "{parameter "fillDBPerfLogsFolder"}" - -//* ====================================================================================================> -//* -//* ENABLE FILLDB PERFORMANCE LOGGING AND RESTART THE SERVICE -//* -//* ====================================================================================================> - -//* -//* Save the existing log file setting value so we can set it back later to the original using the -//* disable debug logging task. -//* - -setting "__FillDB_Perf_Logs_Backup_Value"="{if (exists value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) then (value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry as string) else ("was not set")}" on "{parameter "action issue date" of action}" for client - -waithidden cmd.exe /C net stop filldb -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{escape of (parameter "fillDBPerfLogsFullName")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "EnablePerformanceLogging"="1" -//* -//* 4.0.1 -//* Log max size might be present already so we need to remove it to avoid unexpected behavior. -//* -regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit" - -//* -//* If a log file size limit was chosen then set the log sizes limit -//* - -if {parameter "fillDBPerfLogsSizeNoLimit" as integer != -1} -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit"=dword:{parameter "fillDBPerfLogsSizeByte" as integer as hexadecimal} -endif - -//* -//* Sleep 5 secs and start back up -//* - -waithidden cmd.exe /C ping 127.0.0.1 -n 10 -w 500> nul -waithidden cmd.exe /C net start filldb - -//* -//* If the log rotation and size limit is not selected (or not) then add a note about that to the readme file. -//* false = -1 -//* - -if {parameter "fillDBPerfLogsSizeNoLimit" as integer = -1} -waithidden cmd.exe /C echo The FillDB Performance log in this folder is *active* but it is not being capped at a maximum size. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -waithidden cmd.exe /C echo See the action 'BigFix Platform Health Check -- Enable FillDB Performance Logging' for details. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -elseif {parameter "fillDBPerfLogsSizeNoLimit" as integer != -1} -waithidden cmd.exe /C echo The FillDB Performance log in this folder is *active* and will be capped at a total file size of {parameter "fillDBPerfLogsSizeMB"} MB. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -waithidden cmd.exe /C echo See the action 'BigFix Platform Health Check -- Enable FillDB Performance Logging' for details. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -endif - -//* -//* If the logging duration is not open (or not) ended then add a note about that to the readme file. -//* false = -1 -//* - -if {parameter "fillDBPerfLogsNoDisable" as integer = -1} -waithidden cmd.exe /C echo Automatic disabling of logging was not chosen when logging was initiated. It is *highly* recommended that you disable FillDB Performance logging once your health check is completed. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -waithidden cmd.exe /C echo The companion task named 'WARNING: BigFix Platform Health Check - FillDB Performance Logging is Enabled' can be used to disable logging at any time. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -elseif {parameter "fillDBPerfLogsNoDisable" as integer != -1} -waithidden cmd.exe /C echo Automatic disabling of logging was chosen when logging was initiated. See the auto-generated action titled "BigFix Platform Health Check -- Disable FillDB Performance Logging on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))}" >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" - -//* -//* Drop a breadcrumb for the disable action to key off of. -//* - -setting "__FillDB_Perf_Logs_Expiration" = "{now + (parameter "fillDBPerfLogsDuration" as integer * hour)}" on "{parameter "action issue date" of action}" for client - - -//* ====================================================================================================> -//* -//* CREATE AND POST THE "DISABLE FILLDB PERFORMANCE LOGGING" TASK -//* -//* ====================================================================================================> - -delete "{parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"}" -delete __createfile - -createfile until _END_ - - - - BigFix Platform Health Check -- Disable FillDB Performance Logging (WILL RESTART FILLDB SERVICE) on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))} - /* IS A WINDOWS ROOT SERVER */ (exists main gather service and not exists relay service AND windows of operating system) AND /* FILLDB PERF LOGGING IS ENABLED */ ( exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) AND (exists setting "__FillDB_Perf_Logs_Expiration" whose (now > value of it as time) of client) - -//* ====================================================================================================> -//* -//* DESCRIPTION AND NOTES -//* -//* - This task will disable filldb performance logging and set the log file info back to whatever -//* it was before it was ebabled by the "BigFix Platform Health Check -- Enable FillDB Performance -//* Logging" action. -//* -//* ====================================================================================================> - -waithidden cmd.exe /C net stop "filldb" - -//* -//* Disable logging and set the log info back to whatever it was before we made the change to -//* centralized HC logging -//* - -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{if (exists setting "__FillDB_Perf_Logs_Backup_Value" of client) then (value of setting "__FillDB_Perf_Logs_Backup_Value" of client) else ("needs to be set")}" -regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "EnablePerformanceLogging"="0" -regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit" - -//* -//* Sleep 5 secs - without this sometimes the service does not come back up -//* - -waithidden cmd.exe /C ping 127.0.0.1 -n 10 -w 500> nul -waithidden cmd.exe /C net start filldb - -//* -//* Delete the expiration breadcrumb -//* - -setting delete "__FillDB_Performance_Logs_Backup_Value" on "{parameter "action issue date"}" for client - -//* -//* Write out / update a readme file. -//* - -waithidden cmd.exe /C echo The FillDB Performance log in this folder is no longer active and is ready for analysis. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" -waithidden cmd.exe /C echo Logging was automatically disabled by the auto-generated action titled "BigFix Platform Health Check -- Disable FillDB Performance Logging on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))}". >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" - - - - false - false - false - false - true - P2D - false - false - NoRequirement - AllUsers - false - false - false - false - 0 - false - false - false - true - - false - - - false - false - - false - false - false - false - false - false - - false - - false - - false - false - false - false - false - false - false - false - false - false - false - false - false - false - - false - false - false - false - false - - false - false - false - false - - false - - -_END_ - -move __createfile "{parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"}" - -//* -//* Login to the API and post the XML file to generate the action. -//* - -waithidden cmd.exe /C ""{parameter "cliFolder" & "\iem"}" login -q --server=https://{host name of root server}:{parameter "apiPort"} --user={parameter "apiUsername"} --password={parameter "apiPassword"} --masthead="{preceding text of last "\" of pathname of data folder of client & "\actionsite.afxm"}"" -waithidden cmd.exe /C "{parameter "cliFolder" & "\iem"}" POST {parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"} https://localhost:{parameter "apiPort"}/api/actions -endif - -elseif {(parameter "res") is "n"} - exit -1 -endif]]> - - - + + + + + BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) + .header { font-size: 14px; background-color: #990000; color: white; padding: 6px 40px 6px 10px; white-space: nowrap; } .row { font-size: 14px; padding: 6px 40px 6px 10px; border: 1px solid black; border-top: none; } .nowrap { white-space: nowrap; } + +
+
+
+
Description

+
This task will enable FillDB Performance logging.  Log files sizes and logging duration options are presented in the User Input and Parameters section.
+
 
+
Deployment Notes

+
    +
  • +
    This task can only be run by Master Operators.
    +
  • +
    This will only be relevant on BigFix root servers that do not already have FillDB Performance logging enabled.
    +
  • +
    Creates the Health Check folder structure on the same drive that the BigFix root server is installed on. Edit the actionscript parameters if you want something different.
    +
  • +
    Run this as a one time action.
    +
  • +
    +
    The FillDB service must be restarted to enable/disable logging. This task will restart the FillDB service.
    +
  • +
    +
    +
    More information about BigFix logging can be found here.
+
User Input and Parameters

+
+ + + + + + + + + + + + + + + + + + + + + + +
+

Log Size

FillDB Performance logging will rotate log files automatically at a default file size of 100 MB and a cap of 10 files - giving us a total of 1 GB of logs. This is the recommended starting point for the total amount of log files needed for analysis. For situations where you want a different  maximum total for the FillDB Performance log files, use the field below.  The minimum total size being 500 MB (so enter "500") and the maximum total size being 4 GB (enter "4000"). 

+

Note: The maximum total size can be greater than 4 GB but for this automation we are using 4 GB as a guardrail.  A set of logs that size can take a while to analyze later on.

+


FillDB Performance Log Maximum Total Size (MB):

.

+

Do Not Modify the Default Maximum Total Log File Size

+


Log Duration

+

FillDB Performance logging adds some overhead and should not be enabled without a clear plan to disable it when logging is no longer needed. This task can generate a sub-task to disable FillDB Performance logging after a specified number of hours. 

+

Enter in the maxiumum duration for FillDB Performance logging to be run in the field below. 

+


FillDB Performance Logging Duration (Hours):

+

To run open ended logging, select the checkbox below. There is a companion task named "WARNING: BigFix Platform Health Check -- Disable FillDB Performance Logging" to disable logging at any time.

+


+

Credentials

+

Enter in the credentials for a master operator (MO) so this task can generate the action to disable FillDB Performance logging using the BigFix REST API after the duration specified above. These credentials will be protected by using the secure parameters feature.

+

Note: If SAML is enabled then please enter in a local BigFix MO account.

Specify API Username:

Specify API Password:

Confirm API Password:

+
Supported Platforms

+
Windows

+
Version and Release Notes
+
 
+
4.0.1 - Addressed scenario where log max size settings were already in place which caused unexpected log sizes. Clarified log rotation is enabled by default but can be changed to a higher value to produce more logs. Fixed typo with max log file size setting.
+
4.0 - Version sync. Service restart warning. 
+
3.0 - Added MO restriction. Dated backup folders. Moved FillDB Performance logs up 1 level and out of the main Logs folder to avoid back up issues/conflicts with other logging tasks. Version sync with other HC content.
+
2.0.1 - Changed file names.
+
2.0.0 - Re-branded.
+
1.0 - Initial version.
]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + /* IS A WINDOWS ROOT SERVER */ ((exists main gather service AND windows of operating system) AND /* LOGGING NOT SET */ (not exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry)) + BigFix Platform Health Check + HCL BigFix AVP and Professional Services + Data Collection - Day 1 + 2025-11-19 + Required + + x-fixlet-modification-time + Thu, 20 Nov 2025 15:45:27 +0000 + + BES + + + Click + here + to deploy this action. + + +//* +//* DESCRIPTION AND NOTES +//* +//* - This task will enable FillDB Performance logging and, if chosen, spawn a +//* BigFix action to disable FillDB Performance logging after a specified duration (hours). +//* +//* ====================================================================================================> + +//* ====================================================================================================> +//* +//* SET SOME PARAMETERS +//* +//* - These parameters can be used to control the location and naming of the various health check files +//* and folders. +//* +//* - Ideally, the only thing that would be changed here would be the driveLetter. Be careful about +//* adjusting anything else. +//* +//* ====================================================================================================> + + +action parameter query "restart" with description "To enable these changes you need to restart the FillDB Service. Enter 'Y' to confirm you are aware of the serivce restart for both the enablement of logging and the disabling of logging later, if chosen. Click Cancel to exit the task if you wish to do this at another time." with default "N" +parameter "res" = "{parameter "restart" of action as string as lowercase}" + +if {(parameter "res") is "y"} + +parameter "driveLetter" = "{preceding texts of firsts "\" of (value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of native registry as string)}" +parameter "checkType" = "Platform" +parameter "rootFolder" = "{parameter "driveLetter" & "\BigFix_Health_Check\" & parameter "checkType"}" +parameter "cliFolder" = "{value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of native registry as string & "IEM CLI"}" +parameter "apiPort" = "{value "Port" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of x32 registry}" +parameter "resultsFolder" = "{parameter "rootFolder" & "\Results"}" +parameter "backupFolder" = "{parameter "rootFolder" & "\Backup"}" +parameter "resultsBackupFolder" = "{parameter "backupFolder" & "\Results"}" +parameter "xmlFilesFolder" = "{parameter "rootFolder" & "\XML_Files"}" +parameter "logsFolder" = "{parameter "resultsFolder" & "\Logs"}" +parameter "fillDBPerfLogsFolder"="{parameter "logsFolder" & "\FillDB_Performance"}" +parameter "fillDBPerfLogsBackupFolder" = "{parameter "resultsBackupFolder" & "\Logs\FillDB_Performance" & "\" & (((month of it as two digits & "-" & day_of_month of it as two digits & "-" & year of it as string) of date(local time zone) of it & "_" & (two digit hour of it as string & two digit minute of it as string) of time (local time zone) of it) of now)}" +parameter "fillDBPerfLogsName"="{"FillDBperf.log"}" +parameter "fillDBPerfLogsFullName"="{parameter "fillDBPerfLogsFolder" & "\" & parameter "fillDBPerfLogsName"}" + +//* ====================================================================================================> +//* +//* BACKUP EXISTING FILES, IF PRESENT. THIS IS MORE FOR TROUBLESHOOTING. +//* +//* ====================================================================================================> + +if {if (exists folder (parameter "fillDBPerfLogsFolder")) then (exists files of folder (parameter "fillDBPerfLogsFolder")) else (false)} +folder create "{parameter "fillDBPerfLogsBackupFolder"}" +waithidden cmd.exe /C xcopy "{parameter "fillDBPerfLogsFolder" & "\*.log"}" "{parameter "fillDBPerfLogsBackupFolder" & "\*.log"}" /E /Y +waithidden cmd.exe /C del /F /Q "{parameter "fillDBPerfLogsFolder" & "\*.*"}" +endif + +//* ====================================================================================================> +//* +//* DELETE ANY EXISTING FOLDERS, SCRIPTS, ETC. SO WE CAN CREATE FRESH CONTENT +//* +//* ====================================================================================================> + +// Nothing to delete here... + +//* ====================================================================================================> +//* +//* BUILD OUT THE FOLDER STRUCTURE TO SUPPORT THE GLOBAL TASK +//* +//* ====================================================================================================> + +folder create "{parameter "xmlFilesFolder"}" +folder create "{parameter "rootFolder"}" +folder create "{parameter "fillDBPerfLogsFolder"}" + +//* ====================================================================================================> +//* +//* ENABLE FILLDB PERFORMANCE LOGGING AND RESTART THE SERVICE +//* +//* ====================================================================================================> + +//* +//* Save the existing log file setting value so we can set it back later to the original using the +//* disable debug logging task. +//* + +setting "__FillDB_Perf_Logs_Backup_Value"="{if (exists value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) then (value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry as string) else ("was not set")}" on "{parameter "action issue date" of action}" for client + +waithidden cmd.exe /C net stop filldb +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{escape of (parameter "fillDBPerfLogsFullName")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "EnablePerformanceLogging"="1" +//* +//* 4.0.1 +//* Log max size might be present already so we need to remove it to avoid unexpected behavior. +//* +regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit" + +//* +//* If a log file size limit was chosen then set the log sizes limit +//* + +if {parameter "fillDBPerfLogsSizeNoLimit" as integer != -1} +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit"=dword:{parameter "fillDBPerfLogsSizeByte" as integer as hexadecimal} +endif + +//* +//* Sleep 5 secs and start back up +//* + +waithidden cmd.exe /C ping 127.0.0.1 -n 10 -w 500> nul +waithidden cmd.exe /C net start filldb + +//* +//* If the log rotation and size limit is not selected (or not) then add a note about that to the readme file. +//* false = -1 +//* + +if {parameter "fillDBPerfLogsSizeNoLimit" as integer = -1} +waithidden cmd.exe /C echo The FillDB Performance log in this folder is *active* but it is not being capped at a maximum size. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo See the action 'BigFix Platform Health Check -- Enable FillDB Performance Logging' for details. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +elseif {parameter "fillDBPerfLogsSizeNoLimit" as integer != -1} +waithidden cmd.exe /C echo The FillDB Performance log in this folder is *active* and will be capped at a total file size of {parameter "fillDBPerfLogsSizeMB"} MB. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo See the action 'BigFix Platform Health Check -- Enable FillDB Performance Logging' for details. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +endif + +//* +//* If the logging duration is not open (or not) ended then add a note about that to the readme file. +//* false = -1 +//* + +if {parameter "fillDBPerfLogsNoDisable" as integer = -1} +waithidden cmd.exe /C echo Automatic disabling of logging was not chosen when logging was initiated. It is *highly* recommended that you disable FillDB Performance logging once your health check is completed. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo The companion task named 'WARNING: BigFix Platform Health Check - FillDB Performance Logging is Enabled' can be used to disable logging at any time. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +elseif {parameter "fillDBPerfLogsNoDisable" as integer != -1} +waithidden cmd.exe /C echo Automatic disabling of logging was chosen when logging was initiated. See the auto-generated action titled "BigFix Platform Health Check -- Disable FillDB Performance Logging on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))}" >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" + +//* +//* Drop a breadcrumb for the disable action to key off of. +//* + +setting "__FillDB_Perf_Logs_Expiration" = "{now + (parameter "fillDBPerfLogsDuration" as integer * hour)}" on "{parameter "action issue date" of action}" for client + + +//* ====================================================================================================> +//* +//* CREATE AND POST THE "DISABLE FILLDB PERFORMANCE LOGGING" TASK +//* +//* ====================================================================================================> + +delete "{parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"}" +delete __createfile + +createfile until _END_ + + + + BigFix Platform Health Check -- Disable FillDB Performance Logging (WILL RESTART FILLDB SERVICE) on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))} + /* IS A WINDOWS ROOT SERVER */ (exists main gather service and not exists relay service AND windows of operating system) AND /* FILLDB PERF LOGGING IS ENABLED */ ( exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) AND (exists setting "__FillDB_Perf_Logs_Expiration" whose (now > value of it as time) of client) + +//* ====================================================================================================> +//* +//* DESCRIPTION AND NOTES +//* +//* - This task will disable filldb performance logging and set the log file info back to whatever +//* it was before it was ebabled by the "BigFix Platform Health Check -- Enable FillDB Performance +//* Logging" action. +//* +//* ====================================================================================================> + +waithidden cmd.exe /C net stop "filldb" + +//* +//* Disable logging and set the log info back to whatever it was before we made the change to +//* centralized HC logging +//* + +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{if (exists setting "__FillDB_Perf_Logs_Backup_Value" of client) then (value of setting "__FillDB_Perf_Logs_Backup_Value" of client) else ("needs to be set")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "EnablePerformanceLogging"="0" +regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit" + +//* +//* Sleep 5 secs - without this sometimes the service does not come back up +//* + +waithidden cmd.exe /C ping 127.0.0.1 -n 10 -w 500> nul +waithidden cmd.exe /C net start filldb + +//* +//* Delete the expiration breadcrumb +//* + +setting delete "__FillDB_Performance_Logs_Backup_Value" on "{parameter "action issue date"}" for client + +//* +//* Write out / update a readme file. +//* + +waithidden cmd.exe /C echo The FillDB Performance log in this folder is no longer active and is ready for analysis. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo Logging was automatically disabled by the auto-generated action titled "BigFix Platform Health Check -- Disable FillDB Performance Logging on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))}". >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" + + + + false + false + false + false + true + P2D + false + false + NoRequirement + AllUsers + false + false + false + false + 0 + false + false + false + true + + false + + + false + false + + false + false + false + false + false + false + + false + + false + + false + false + false + false + false + false + false + false + false + false + false + false + false + false + + false + false + false + false + false + + false + false + false + false + + false + + +_END_ + +move __createfile "{parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"}" + +//* +//* Login to the API and post the XML file to generate the action. +//* + +waithidden cmd.exe /C ""{parameter "cliFolder" & "\iem"}" login -q --server=https://{host name of root server}:{parameter "apiPort"} --user={parameter "apiUsername"} --password={parameter "apiPassword"} --masthead="{preceding text of last "\" of pathname of data folder of client & "\actionsite.afxm"}"" +waithidden cmd.exe /C "{parameter "cliFolder" & "\iem"}" POST {parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"} https://localhost:{parameter "apiPort"}/api/actions +endif + +elseif {(parameter "res") is "n"} + exit -1 +endif]]> + + +