Skip to main content
Question

Software Updates - Security Updates Only

  • October 24, 2018
  • 2 replies
  • 25 views
M
Forum|alt.badge.img+6

What's up Everybody!

We had to turn off Auto Updates because of Safari 12. Unfortunately for us, we cannot install nor run Safari 12 because of Java. We have an internal application that requires the use of Java, and it's a Safari only app. Don't ask me why...

In any hoot, we are trying to search out to our machines to see what updates are pending and available to them, and only install the security related ones. Only problem is, Safari 12 keeps jamming itself in the mix.

Is there a way to ONLY get the security related updates, and exclude Safari till we move past Java?

Just curious as to what everyone else is doing when it comes to security updates in Sierra and High Sierra.

Thanks as always!!!

2 replies

mark_mahabir
Forum|alt.badge.img+15
  • mark_mahabir
  • Jamf Heroes
  • October 24, 2018

We use NetSUS for that sort of thing.

It means we can pick and choose exactly which updates to make available to our users.

M
D
Forum|alt.badge.img+18
  • dgreening
  • Honored Contributor
  • October 24, 2018

This will also block the auto-download and pestering from major OS updates:

#!/bin/bash

# Locate Caching Servers

/usr/bin/AssetCacheLocatorUtil

# Reset ignored updates
/usr/sbin/softwareupdate --reset-ignored

# Ignore High Sierra Nag Updates
/usr/sbin/softwareupdate --ignore "macOSInstallerNotification_GM"

# Ignore Safari 12 Sierra
/usr/sbin/softwareupdate --ignore "Safari12.0Sierra"

# Ignore Safari 12 High Sierra
/usr/sbin/softwareupdate --ignore "Safari12.0HighSierraAuto"
M
Terms & ConditionsCookie settingsAccessibility statement