Authorisation DB and MDM

Originator:richard
Number:rdar://29022355 Date Originated:31st October 2016
Status:Open Resolved:
Product: Product Version:
Classification: Reproducible:
 
The authorisation database is a bit of an anachronism. It’s poorly documented and functions are uncertain, however there are useful things in it such as swapping the screensaver to use the security agent instead of the loginwindow for authentication. It’s only manageable via the security command at present. However with the rumoured removal of system level access, as well as going MDM only in two years time … maybe some/most/ALL of this handy functionality could be moved into configuration profiles?

It would certainly make the macOS admin’s job a lot easier too from a usability point of view. We would know for sure what we’re actually setting!

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!