Skip to main content
Question

Extension attribute for reading preferences

  • February 22, 2024
  • 1 reply
  • 8 views
_aDiedericks
Forum|alt.badge.img+8

Hi there,

I've been trying to get an extension attribute read to push the the following changes using a policy:

/usr/bin/security authorizationdb write system.preferences.network allow /usr/bin/security authorizationdb write system.services.systemconfiguration.network allow /usr/bin/security authorizationdb write com.apple.wifi allow

For example how would I read 'system.preferences.network' and report if it is not in 'allow' state? This is to scope a policy that will push the above to devices reporting 'system.preferences.network' to not be in 'allow' state.

    1 reply

    mm2270
    Forum|alt.badge.img+24
    • mm2270
    • Legendary Contributor
    • February 23, 2024

    For starters, change write to read.

    /usr/bin/security authorizationdb read system.preferences.network

    Drop the allow from the first command when reading back the preferences. 

    There will need to be some additional scripting to read back the values. You could also send the results out to a plist file for easier parsing.

    /usr/bin/security -q authorizationdb read system.preferences.network > /tmp/system.preferences.network.plist

    Note the addition of -q to the security command (quiet), which suppresses some output that doesn't belong in a plist file. Then you can easily read back the settings using defaults.

    /usr/bin/defaults read /tmp/system.preferences.network.plist

    From there, use grep or something to see if the setting you're interested in is present in the plist. If it's there in the plist, then the setting is applied to that preference.

    _aDiedericks
    Terms & ConditionsCookie settingsAccessibility statement