search

jamf / PPPC-Utility

Privacy Preferences Policy Control (PPPC) Utility
MIT License
735 stars 46 forks source link

Big Sur compatibility mode- incorrect other values #86

Closed PhantomPhixer closed 3 years ago

PhantomPhixer commented 3 years ago

Testing out the Big Sur compatibility setting gives a result that setting allow on a setting that doesn't have the allow standard users setting uploads to jamf with that value set. I noticed this setting a profile up that had the screen capture setting in it as well.

PPPC Utility Jamf

watkyn commented 3 years ago

I believe the PPPC Utility has the correct value in this case. The downloads folder should have the Allow/Deny options and should not have the "Allow standard users to approve".

From the MDM spec only the ListenEvent and the ScreenCapture keys support the "Allow standard users to approve".

I'm going to close this one out but feel free to add more context if I misunderstood the issue.

PhantomPhixer commented 3 years ago

I think you have missed the point. in the PPPC utility window it does indeed show the correct value, however when uploaded to jamf it shows the incorrect value as shown in the screen shot. This only happened when Big Sur compatibility was on.

watkyn commented 3 years ago

Thanks for the clarification!

ty-wilson commented 3 years ago

This is a known issue with Jamf Pro (PI-009068) where the Authorization value is being changed to 'AllowStandardUserToSetSystemService' when the .mobileconfig is uploaded to Configuration Profiles. The PPPC Utility is still creating the profile with the correct value as 'Allow'. The workaround in Jamf Pro is to set the value manually back to 'Allow' after upload for now.

watkyn commented 3 years ago

Thanks @ty-wilson, closing this out again.