Last active
January 23, 2025 20:30
-
-
Save nstrauss/ebca31a8110f6429ea4f2f91f4a7257b to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
## Where to find info and how to report on system extensions in macOS Catalina+ | |
# Staged system extensions location in folder based on unique ID | |
/Library/SystemExtensions/ | |
# Info on each | |
/Library/SystemExtensions/db.plist | |
Includes... | |
- state (enabled, activated, etc.) | |
- associated launchd plists | |
- category (network, driver, etc.) | |
- original path within app bundle | |
- staged path | |
- version | |
- identifier | |
- unique ID | |
- MDM enforced system extension policies via profile | |
# CLI tools | |
systemextensionsctl | |
systemextensionsctl: usage: | |
systemextensionsctl developer [on|off] | |
systemextensionsctl list [category] | |
systemextensionsctl reset - reset all System Extensions state | |
systemextensionsctl uninstall <teamId> <bundleId>; can also accept '-' for teamID | |
systemextensionsctl list | |
1 extension(s) | |
--- com.apple.system_extension.network_extension | |
enabled active teamID bundleID (version) name [state] | |
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled] | |
systemextensionsctl list com.apple.system_extension.network_extension | |
Category: com.apple.system_extension.network_extension | |
1 extension(s) | |
--- com.apple.system_extension.network_extension | |
enabled active teamID bundleID (version) name [state] | |
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment