Add MDM-enforced OS autoupdate query (#8927)

Necessary for Vanta integration, since currently, we do not store autoupdate information.
This commit is contained in:
Mo Zhu 2022-12-06 14:08:13 -08:00 committed by GitHub
parent cde9877ecb
commit 61f2d5fe58
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1034,3 +1034,19 @@ spec:
purpose: inventory
tags: inventory
contributors: zwass
---
apiVersion: v1
kind: query
spec:
name: macOS Auto-updates enforced by MDM
platform: darwin
description: Finds all hosts where a mobile device management (MDM) solution enforces macOS auto-updates.
query: >-
SELECT *
FROM managed_policies AS mp
WHERE mp.domain = "com.apple.SoftwareUpdate"
AND mp.name = "AutomaticallyInstallMacOSUpdates"
AND mp.value = "0";
purpose: compliance
tags: compliance
contributors: zhumo