Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 08:58:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 111

Add dontAllowFDEDisable to FileVault config profile template (#10941)

Browse source
This commit is contained in:
gillespi314 2023-04-03 14:22:41 -05:00 committed by GitHub
parent 4c4891a711
commit 750d64ccca
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changes/issue-10788-dont-allow-fde-disable Normal file
View file

@ -0,0 +1 @@
- Updated FileVault configuration profile to disallow device user from disabling full-disk encryption.

12
ee/server/service/mdm_profiles.go
View file

@ -63,6 +63,18 @@ var fileVaultProfileTemplate = template.Must(template.New("").Option("missingkey
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>dontAllowFDEDisable</key>
<true/>
<key>PayloadIdentifier</key>
<string>com.apple.MCX.62024f29-105E-497A-A724-1D5BA4D9E854</string>
<key>PayloadType</key>
<string>com.apple.MCX</string>
<key>PayloadUUID</key>
<string>62024f29-105E-497A-A724-1D5BA4D9E854</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>Disk encryption</string>