mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 08:58:41 +00:00
035d4f4839
Added reference to FDA requirement along with links to enable FDA and a
pre-created mobileconfig per discussion in product office hours
(9/16/25). ~Josh 🖖🏻
22 lines
1.1 KiB
YAML
22 lines
1.1 KiB
YAML
name: safari_extensions
|
|
description: Safari extensions add functionality to Safari.app, the native web browser in macOS. The `safari_extensions` table collects all Safari extensions installed on a Mac.
|
|
columns:
|
|
- name: uid
|
|
examples: |-
|
|
Collect Safari extensions for all Mac users:
|
|
|
|
```
|
|
SELECT * FROM users CROSS JOIN safari_extensions USING (uid);
|
|
```
|
|
notes: |-
|
|
Because Safari data is intentionally isolated for each macOS user to maintain privacy, this query requires [giving osquery full disk access](https://fleetdm.com/guides/enroll-hosts#grant-full-disk-access-to-osquery-on-macos) and a [`JOIN` against the `users` table](https://fleetdm.com/guides/osquery-consider-joining-against-the-users-table).
|
|
|
|
Query explanation:
|
|
|
|
- The `safari_extensions` table has a row for each installed extension
|
|
- Each row has a column with the `uid` of the user who installed the extension
|
|
- Each `uid` from the `safari_extensions` table is matched in the `users` table to collect Safari extensions in the output data for all user accounts on the Mac by the `JOIN`
|
|
|
|
Links:
|
|
|
|
- [Apple documentation on Safari Extensions](https://support.apple.com/en-us/102343)
|