Skip to main content
Question

Enabling/Whitelisting Kernel Extensions -Catalina

  • March 13, 2020
  • 4 replies
  • 8 views

Forum|alt.badge.img+4

I am looking for a way to enable/allow a specific Kernel Extension. More specifically, VirtualBox. This is killing our use of VB on new machines and I have to basically do a remote session with every user and enable manually since they are not local admins.

4 replies

sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • March 13, 2020

@rmgmedia You will find a lot of discussions about creating PPPC Configuration Profiles (what you're looking for) on Jamf Nation. This would be a good start:
PPPC and every app known to IT


Forum|alt.badge.img+4
  • Author
  • Contributor
  • March 16, 2020

@sdagley Thanks. I found some helpful things, but I cannot figure out what to do if, when creating the PPPC, the only option I get is 'Deny'.
For example:
Zoom requires Screen Recording enabled, when I try to create a PPPC for it (using the Utility or from the JAMF server), I only get the 'Deny' option. What are my options?


sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • March 16, 2020

@rmgmedia In a word, nothing. Any access for camera, microphone, or screen recording requires explicit user permission to enable. As you've discovered the only thing you can set for those via with a PPPC profile is Deny. This is not a shortcoming of Jamf Pro, just how Apple designed the permissions system.


Forum|alt.badge.img+4
  • Author
  • Contributor
  • March 16, 2020

@sdagley Yeah. I've been reading about that. It's really getting in the way of new deployments.
I got the KEXT pretty much figured out (it's actually less complicated than I thought). Just have to deal with the PPPCs now.