From dc0c4defba6a232a5506b574831e5ee897bdb079 Mon Sep 17 00:00:00 2001 From: Kunal Agarwal Date: Thu, 4 Jan 2024 17:08:36 -0800 Subject: [PATCH] Added Dope-Security-MDM-Profile.mobileconfig Added this MDM profile for dope security, documented here: https://inflight.dope.security/dope.endpoint/installing-using-mdm-on-mac --- .../Dope-Security-MDM-Profile.mobileconfig | 160 ++++++++++++++++++ 1 file changed, 160 insertions(+) create mode 100644 Configuration Profiles/Dope-Security-MDM-Profile.mobileconfig diff --git a/Configuration Profiles/Dope-Security-MDM-Profile.mobileconfig b/Configuration Profiles/Dope-Security-MDM-Profile.mobileconfig new file mode 100644 index 0000000..4530874 --- /dev/null +++ b/Configuration Profiles/Dope-Security-MDM-Profile.mobileconfig @@ -0,0 +1,160 @@ + + + + + PayloadContent + + + PayloadDisplayName + DopeSecurityApp + PayloadIdentifier + com.apple.vpn.managed.3FC862E3-0F98-45DA-9BA0-B00D74C6E82E + PayloadType + com.apple.vpn.managed + PayloadUUID + 798346BB-9A01-40B3-8EA6-377B26B0018B + PayloadVersion + 1 + UserDefinedName + DopeSecurityApp + VPN + + AuthenticationMethod + Password + ProviderBundleIdentifier + security.dope.DopeSecurityApp.Redirector + ProviderDesignatedRequirement + anchor apple generic and identifier "security.dope.DopeSecurityApp.Redirector" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = 63JU25B8Q7) + RemoteAddress + localhost + + VPNSubType + security.dope.DopeSecurityApp + VPNType + VPN + VendorConfig + + Group + 63JU25B8Q7.security.dope.DopeSecurityApp + + + + AllowedTeamIdentifiers + + 63JU25B8Q7 + + PayloadDisplayName + System Extension Policy + PayloadIdentifier + com.apple.system-extension-policy.190E1DB5-015F-4CAF-8AD5-9F0C293663DE + PayloadType + com.apple.system-extension-policy + PayloadUUID + 1CAA9256-333E-4F53-BF59-F54984275562 + PayloadVersion + 1 + RemovableSystemExtensions + + 63JU25B8Q7 + + security.dope.DopeSecurityApp.Redirector + + + + + PayloadCertificateFileName + dope.security.root + PayloadContent + + LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUR1RENDQXFD + Z0F3SUJBZ0lVZHlRUUc3eFoyUUFFVEZncVhQZHptbGVCUlNBd0RR + WUpLb1pJaHZjTkFRRUwKQlFBd2RERUxNQWtHQTFVRUJoTUNWVk14 + RXpBUkJnTlZCQWdNQ2tOaGJHbG1iM0p1YVdFeEZqQVVCZ05WQkFj + TQpEVTF2ZFc1MFlXbHVJRlpwWlhjeEZqQVVCZ05WQkFvTURXUnZj + R1V1YzJWamRYSnBkSGt4SURBZUJnTlZCQU1NCkYyUnZjR1V1YzJW + amRYSnBkSGxmY205dmRGOWpZU0F4TUI0WERURTVNRFV3TWpBd01E + QXdNRm9YRFRNNU1EVXcKTVRBd01EQXdNRm93ZERFTE1Ba0dBMVVF + QmhNQ1ZWTXhFekFSQmdOVkJBZ01Da05oYkdsbWIzSnVhV0V4RmpB + VQpCZ05WQkFjTURVMXZkVzUwWVdsdUlGWnBaWGN4RmpBVUJnTlZC + QW9NRFdSdmNHVXVjMlZqZFhKcGRIa3hJREFlCkJnTlZCQU1NRjJS + dmNHVXVjMlZqZFhKcGRIbGZjbTl2ZEY5allTQXhNSUlCSWpBTkJn + a3Foa2lHOXcwQkFRRUYKQUFPQ0FROEFNSUlCQ2dLQ0FRRUF2MC9D + eEREUXZWaCttRzJ5aDNTOUZWdEp2RytDVzBPYjY4K2Jpck14Z2Vq + NQpUNVhMV1ZxUldSYURoaUIrUGRKRXBab21JakUvNXI4UWRrWlB5 + cHNacVZOakJ6ejJNOGZsb1lJeHM1MW5VZ3U0ClkrUU1wOEFEamli + NWN1a2p0N2hUSTdaUU5nZmRVaVk3MGloTzhGOUh4Q09kM0Mzd25J + TVhGN0FyTXlCTDVIRisKbm1DT2psRzMxbE90Yjg3WUJsa3B0WmlY + VzlOV3dmcWVCaHlhWlJRcmxURGQ5VDJkRWhLdzBsTjMrelprbU4v + WQp0QkNkbSs0bWU4WHBVV05Bc0NCTVJYRStqajVjbXZ5SlJHNmxh + UTZJVi92T08xNjNrSUF4UkhTYyt3M0NjY1lXCklua2pJdnJhcEoy + UWNjWnJEcnEreEhISnFLZEJ1b2FwTTBpN0o4dExSUUlEQVFBQm8w + SXdRREFkQmdOVkhRNEUKRmdRVXJBWGZFTnk4Nlh0TFZxRUF1REJh + alNvL1J6d3dFZ1lEVlIwVEFRSC9CQWd3QmdFQi93SUJBakFMQmdO + VgpIUThFQkFNQ0FRWXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJB + RUFiRWRLeUFUdzB0KzB6QUJENlM3NzVoa2ozCmNMU2JwSXNjLzFt + T0ZpdE1Jck4wTjFCSFFrZ0FlaHJsK2F0anVpM2dXQktGZCtJYWpO + MWZqUTRRdG9BUVQyUWMKTVFzajVZWlNWeURlUjdQaTF3UHdtUG01 + YmlFaFFER0RVSG42RWd0RDF0MWNMWnlmNnRuUE9meFZ3VDlQZ0dP + QQpGRWNVS3BNNjlMRzNJMWtFa0ljOTI5cTNUZXFXbGZGZi9kWnUy + eWg4SDhBUUttcXh1dno1K3A0Q2ZHT0U0QzdjCmIzUEFZclJlQmY1 + aXptdlNxREFjSjNpRTdON0ZRaG5lR3ZNK1NNbWJnUy83ZndYaVpP + clZvY2JvdCtSM2N1eXAKd2hIUmxaa2pXK1ZJQWsvNkJBeStZQ0x4 + MXZiVGZtd3J6M3Eva3p4cU5pMURydk5WWXByVU9KK2dZOU09Ci0t + LS0tRU5EIENFUlRJRklDQVRFLS0tLS0K + + PayloadDisplayName + Certificate + PayloadIdentifier + com.apple.security.pem.16D10826-5C9D-4C3E-968C-BE5792B1AAF2 + PayloadType + com.apple.security.pem + PayloadUUID + 16D10826-5C9D-4C3E-968C-BE5792B1AAF2 + PayloadVersion + 1 + + + PayloadDisplayName + Privacy Preferences Policy Control #1 + PayloadIdentifier + com.apple.TCC.configuration-profile-policy.979E8021-9009-488A-9387-BFD0A394B1CC + PayloadType + com.apple.TCC.configuration-profile-policy + PayloadUUID + 979E8021-9009-488A-9387-BFD0A394B1CC + PayloadVersion + 1 + Services + + SystemPolicyAllFiles + + + Allowed + + CodeRequirement + anchor apple generic and identifier "security.dope.DopeSecurityApp" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "63JU25B8Q7") + Identifier + security.dope.DopeSecurityApp + IdentifierType + bundleID + StaticCode + + + + + + + PayloadDisplayName + DopeSecurityApp + PayloadIdentifier + DOPE.D66FA254-FEC6-4BBD-80CC-7CFB4A93CF8E + PayloadScope + System + PayloadType + Configuration + PayloadUUID + FFC74072-37BC-46C4-B376-81547F290B9F + PayloadVersion + 1 + +