- keychain autolocking/statuses
- password policies info
- ASL configurations
- applications install log
- power management details (pmset)
- gatekeeper configuration
✅sudo details/configuration and list of sudoers
✅SIP status, SIP whitelisted directories/applications (from sandbox config and etc)
- ntp config
- icloud config status (we want to allow app store, but not iCloudDrive/keychain/data within apps)
- java/flash versions
- networksetup locations
- further than ASL, audit/openBSM configs
- tokend config
✅etc/pam.d (e.g. for fast user switching, screensaver)