cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Mojave 10.14 and the new Privacy Preferences Policy Control payload

Building a reputation

Mojave 10.14 and the new Privacy Preferences Policy Control payload

Hey everyone! If you've been testing the Mojave betas you might have encountered these new privacy permission alerts in Mojave (example screenshot below). Until Meraki releases an update with a payload template, check out this awesome tool that a kind soul at Jamf made. You don't need Jamf for this to work, just export a .mobileconfig and upload to your Meraki dashboard.

 

https://github.com/jamf/PPPC-Utility

 

 

Screen Shot 2018-09-20 at 3.11.00 PM.png

 

 

 

7 REPLIES 7
Kind of a big deal

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

Awesome thanks for sharing this

Meraki CMNO, Ruckus WISE, Sonicwall CSSA, Allied Telesis CASE & CAI
Highlighted
Kind of a big deal

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

Thanks for sharing!

Find this helpful? Click the kudos button. Thanks!
Building a reputation

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

I created some app whitelist profiles if anyone wants to be lazy 🙂

 

https://github.com/ducksrfr/mac_admin/tree/master/Privacy%20Preferences%20Policy%20Control%20Profile...

Here to help

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

Could this be the reason for why installing apps with the meraki agent fails in Mojave? Do we need pppc profiles both for the meraki agent and the app it is trying to install?

 

Regards,


Thomas

Building a reputation

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

@eritho It's definitely possible that m_agent needs to be added to the profile, but not necessarily each app it's trying to install. I recently started a new gig (that doesn't use Meraki) so I don't have immediate access to the Meraki dashboard any more to test.

 

I would recommend starting with allowing m_agent access to SystemPolicyAllFiles, as well as 3 AppleEvents that whitelist control of Finder, SystemUIServer, and System Events.

 

https://help.apple.com/deployment/mdm/#/mdm38df53c2a

Here to help

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

Thanks for the reply @sshort.

Have you been able to locate the m_agent app and create a PPPC with the PPPC-Utility? I can´t find the application on my computer, the only thing i can find is some safari.webkit-somthing that is connecting to meraki but my lack of skills stops me from doing anything usefull.

Building a reputation

Re: Mojave 10.14 and the new Privacy Preferences Policy Control payload

@eritho I would start with the binaries you find in the locations below. just drag into the PPPC Utility

/usr/local/sbin/m_agent

/usr/local/sbin/m_agent_upgrade
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels