Skip to content

Instantly share code, notes, and snippets.

@mingxingren
Forked from nstrauss/macOS System Extensions
Created November 14, 2024 12:32
Show Gist options
  • Save mingxingren/97efb521f025b76832daa9785348c4a2 to your computer and use it in GitHub Desktop.
Save mingxingren/97efb521f025b76832daa9785348c4a2 to your computer and use it in GitHub Desktop.
## Where to find info and how to report on system extensions in macOS Catalina+
# Staged system extensions location in folder based on unique ID
/Library/SystemExtensions/
# Info on each
/Library/SystemExtensions/db.plist
Includes...
- state (enabled, activated, etc.)
- associated launchd plists
- category (network, driver, etc.)
- original path within app bundle
- staged path
- version
- identifier
- unique ID
- MDM enforced system extension policies via profile
# CLI tools
systemextensionsctl
systemextensionsctl: usage:
systemextensionsctl developer [on|off]
systemextensionsctl list [category]
systemextensionsctl reset - reset all System Extensions state
systemextensionsctl uninstall <teamId> <bundleId>; can also accept '-' for teamID
systemextensionsctl list
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled]
systemextensionsctl list com.apple.system_extension.network_extension
Category: com.apple.system_extension.network_extension
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment