Question

Safari 12 Deployed despite having a 30 Day Update Deferall

+7

Hi Guys,

We have a 30 Day software update deferral on our production machines set by a config profile.
Most of our macs are running 10.13.4 or higher.

Yet today it looks like Safari 12 went out to a good portion of our Macs.

Is any one else seeing this? The 10.13.6 update was definitely deferred.

+36

Late response, but Apple/Jamf recommended providing the "Install macOS High Sierra.app" installer as a (the only) way to "roll back" Safari to 11.x.

--https://donmontalvo.com

+13

Some Security updates can contain the safari updates
While Don M is correct on the "Apple" recommended way, I found a machine booted into recovery and grabbed version 11 of safari for a BYOD user that really needed it .

+36

Guessing you've got SIP disabled? :)

#cringes

--https://donmontalvo.com

+13

Oh wow I didn't know SIP was enabled in recovery mode

"#youknowmorenow"

How its deployed to the end user is up to OP
`

+36

Safari is an SIP protected app. Not sure it's a good idea to advise tampering a core macOS app.

In any case, not my pig or farm, I was just responding to a post that didn't get any responses. Lazy day. LOL

¯_(ツ)_/¯

--https://donmontalvo.com

Sign up