Deploy Plist data to existing plist

[yarin]

hey guys.
im trying to deploy safari extension inside the network.
for that i need to:
A) deploy the "Safariextz" file to the safari extension directory
B) to insert the extension dictionary to the file extension.plist. (or else safari wont recognize it) the idea is to deploy the extension without any user interaction .
from what i can see , i need to add to "extension.plist" two dict in keys:
1) "Apple-Hosted Update List"
2) "Installed Extensions"
can someonehelp?

[sdagley]

@yarin This should be helpful: DEPLOYING & INSTALLING SAFARI EXTENSIONS ON SAFARI 6.1+ & 7.2+

[yarin]

correct me if im wrong.
the guide provide a way to let the user choose press install without the need for searching the extension and downloading it.
what i need is it to be already installed and for the user to enjoy the extension without any action being made by him.

[mm2270]

Hi @yarin & also @sdagley, You both might want to read thru @bentoms' follow up blog post here. The short story is, deploying or updating Safari Extensions in an already installed/enabled state is no longer possible. Apparently someone at Apple felt it was too much of a security risk to allow that in an automated/scripted fashion.

[yarin]

lol i just read that!
and Jamf pro have no solution for that?
like alternative VPP service that can deploy extensions in user behalf?
if i use a snapshot method will it work? and will that erase rewrite the user plist settings?

thank you very much for your help guys !! i was stuck on that for quite some time !

[sdagley]

@yarin As @mm2270 pointed out, with Sierra there's no automation for this, and trying to install Composer captured settings to replace a user's is not a good idea. For El Capitan and earlier, you could do it, but that's a solution with a limited lifespan. Here's a recent post with an example script: Script to enable extension in Safari 10.X if you want to pursue that.

[yarin]

thank you.

i get that its not possible to automate the process but isnt that what VPP service suppose to do?
we dont have VPP service here but i still want to understand the use of it.
now if it is possible to deploy via vpp doesnt Jamf offer an alternative solution for that? i hope its my last question on the subject.

[mm2270]

No, VPP has to do with App Store and Mac App Store applications, not Safari extensions. To my knowledge Apple doesn't offer those extensions on the stores and so are not part of the VPP program.