Safari 12 Deployed despite having a 30 Day Update Deferall

[a_stonham]

Hi Guys,

We have a 30 Day software update deferral on our production machines set by a config profile.
Most of our macs are running 10.13.4 or higher.

Yet today it looks like Safari 12 went out to a good portion of our Macs.

Is any one else seeing this? The 10.13.6 update was definitely deferred.

[donmontalvo]

Late response, but Apple/Jamf recommended providing the "Install macOS High Sierra.app" installer as a (the only) way to "roll back" Safari to 11.x.

[Nix4Life]

1. Some Security updates can contain the safari updates

2. While Don M is correct on the "Apple" recommended way, I found a machine booted into recovery and grabbed version 11 of safari for a BYOD user that really needed it .

[donmontalvo]

Guessing you've got SIP disabled? :)

#cringes

[Nix4Life]

@donmontalvo

Oh wow I didn't know SIP was enabled in recovery mode

"#youknowmorenow"

How its deployed to the end user is up to OP
`

[donmontalvo]

Safari is an SIP protected app. Not sure it's a good idea to advise tampering a core macOS app.

In any case, not my pig or farm, I was just responding to a post that didn't get any responses. Lazy day. LOL

¯_(ツ)_/¯