Mojave 10.14 and the new Privacy Preferences Policy Control payload

sshort
Building a reputation

Mojave 10.14 and the new Privacy Preferences Policy Control payload

Hey everyone! If you've been testing the Mojave betas you might have encountered these new privacy permission alerts in Mojave (example screenshot below). Until Meraki releases an update with a payload template, check out this awesome tool that a kind soul at Jamf made. You don't need Jamf for this to work, just export a .mobileconfig and upload to your Meraki dashboard.

 

https://github.com/jamf/PPPC-Utility

 

 

Screen Shot 2018-09-20 at 3.11.00 PM.png

 

 

 

7 REPLIES 7
BlakeRichardson
Kind of a big deal
Kind of a big deal

Awesome thanks for sharing this

jared_f
Kind of a big deal

Thanks for sharing!

Find this helpful? Click the kudos button. Thanks!
sshort
Building a reputation

I created some app whitelist profiles if anyone wants to be lazy 🙂

 

https://github.com/ducksrfr/mac_admin/tree/master/Privacy%20Preferences%20Policy%20Control%20Profile...

Could this be the reason for why installing apps with the meraki agent fails in Mojave? Do we need pppc profiles both for the meraki agent and the app it is trying to install?

 

Regards,


Thomas

sshort
Building a reputation

@eritho It's definitely possible that m_agent needs to be added to the profile, but not necessarily each app it's trying to install. I recently started a new gig (that doesn't use Meraki) so I don't have immediate access to the Meraki dashboard any more to test.

 

I would recommend starting with allowing m_agent access to SystemPolicyAllFiles, as well as 3 AppleEvents that whitelist control of Finder, SystemUIServer, and System Events.

 

https://help.apple.com/deployment/mdm/#/mdm38df53c2a

Thanks for the reply @sshort.

Have you been able to locate the m_agent app and create a PPPC with the PPPC-Utility? I can´t find the application on my computer, the only thing i can find is some safari.webkit-somthing that is connecting to meraki but my lack of skills stops me from doing anything usefull.

sshort
Building a reputation

@eritho I would start with the binaries you find in the locations below. just drag into the PPPC Utility

/usr/local/sbin/m_agent

/usr/local/sbin/m_agent_upgrade
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels