Skip to content

Instantly share code, notes, and snippets.

@nstrauss

nstrauss/macOS System Extensions

Last active May 2, 2024 00:46
Show Gist options
  • Star 22 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save nstrauss/ebca31a8110f6429ea4f2f91f4a7257b to your computer and use it in GitHub Desktop.
Save nstrauss/ebca31a8110f6429ea4f2f91f4a7257b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
macOS System Extensions
## Where to find info and how to report on system extensions in macOS Catalina+
# Staged system extensions location in folder based on unique ID
/Library/SystemExtensions/
# Info on each
/Library/SystemExtensions/db.plist
Includes...
- state (enabled, activated, etc.)
- associated launchd plists
- category (network, driver, etc.)
- original path within app bundle
- staged path
- version
- identifier
- unique ID
- MDM enforced system extension policies via profile
# CLI tools
systemextensionsctl
systemextensionsctl: usage:
systemextensionsctl developer [on|off]
systemextensionsctl list [category]
systemextensionsctl reset - reset all System Extensions state
systemextensionsctl uninstall <teamId> <bundleId>; can also accept '-' for teamID
systemextensionsctl list
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled]
systemextensionsctl list com.apple.system_extension.network_extension
Category: com.apple.system_extension.network_extension
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment