usnistgov / macos_security

macOS Security Compliance Project

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

feat: support `syspolicy_check` a new feature in Sonoma to determine if the provided macOS application will pass the current running configurations’ system policy.

sambacha opened this issue · comments

Problem to solve

Sonoma introduces a new command line tool, from their release notes:

https://developer.apple.com/documentation/macos-release-notes/macos-14-release-notes#Trusted-Execution

/usr/bin/syspolicy:

check is a new command line tool to help determine if the provided macOS application will pass the current running configurations’ system policy.
This includes the same checks performed by the Apple notary service and other macOS Trusted Execution layers such as codesign, Gatekeeper, XProtect, and more. Please see the main page for additional details. (108737781)

This isn't an issue with the project. This seems more useful as a discussion. Moving to that