Skip to content

Instantly share code, notes, and snippets.

View ygini's full-sized avatar

Yoann Gini ygini

View GitHub Profile
@ygini
ygini / us.zoom.usual.config.mobileconfig.partial
Last active March 18, 2024 16:42
Usual config for Zoom with SSO
<dict>
<key>PayloadContent</key>
<dict>
<key>us.zoom.config</key>
<dict>
<key>Forced</key>
<array>
<dict>
<key>mcx_preference_settings</key>
<dict>
@ygini
ygini / ZoomCommandAndControlRemovalTool.sh
Created July 9, 2019 17:48
Sample script to mass kill Zoom on all kind of macOS used in enterprise
#!/bin/bash
killall ZoomOpener
while read homeFolder
do
if [ -d "$homeFolder/.zoomus" ]
then
rm -rf "$homeFolder/.zoomus"
touch "$homeFolder/.zoomus"
Privacy Policy
Yoann Gini built the MobileCertificate app as a Commercial app. This product is provided by Yoann Gini and is intended for use as is.
This page is used to inform visitors regarding my policies with the collection, use, and disclosure of Personal Information if anyone decided to use my app.
If you choose to use my app, then you agree to the collection and use of information in relation to this policy. The Personal Information that I collect is used for providing and improving the app. I will not use or share your information with anyone except as described in this Privacy Policy.
The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at MobileCertificate unless otherwise defined in this Privacy Policy.
@ygini
ygini / Reversing 10.13 RootGate, hands notes.md
Last active February 20, 2021 20:26
Work in progress, notes for the current state

Reversing 10.13 RootGate, hands notes

Inital discovery process

Original state of the root.plist

Dict {
    smb_sid = Array {
        S-1-5-18
@ygini
ygini / SELinuxJavaReservedPorts.md
Created September 8, 2016 09:58
Allow a service not started as root to open ports below 1024

Allow java binary to open ports below 1024

setcap 'cap_net_bind_service=+ep' $(find /usr/lib/jvm -type f -name java)

Allow java to load third part so

dirname $(find /usr/lib/jvm -name libjli.so) > /etc/ld.so.conf.d/java.conf
@ygini
ygini / AppleSchoolManagerUpdater.ps1
Last active October 3, 2021 03:57
First version of a PowerShell script used to upload all required Apple School Manager CSV files based on AD and CSV.
### To run this script you must install Windows Management Framework 5.0 before https://www.microsoft.com/en-us/download/details.aspx?id=50395
### Be careful to get the right installation package for your server, 2012R2 isn't 2012
### Run
$clearFiles = $false
$dryRun = $false
### School settings
$asmLogin = "1234@sftp.apple.com"
# For a 500 GB vmdk available at /dev/sdb
pvcreate /dev/sdb
vgextend centos /dev/sdb
lvcreate -L 499G -n data centos /dev/sdb
cp /etc/fstab /etc/fstab.bck
cat << EOF >> /etc/fstab
# additional storage
/dev/mapper/centos-data /mnt/data xfs defaults 0 0

Sources

Extra Packages for Enterprise Linux

yum install -y epel-release

MongoDB

cat << EOF > /etc/yum.repos.d/mongodb-org-3.2.repo
[mongodb-org-3.2]
@ygini
ygini / RFC_autopkg_validated_repo.md
Last active May 18, 2017 09:43
Request For Comments: Validated autopkg recipes repository (originally written by Elliot Jordan and Yoann Gini)

Validated Recipes

The goal of this special recipes repository for AutoPkg is to build trust into the thousands of available AutoPkg recipes.

In order to accomplish this, we will have a team of vetted reviewers ensuring that the recipes in this repository follow strict rules. These rules limit recipes' capabilities, and defining and enforcing those rules will require a lot of work on the part of our community. But we hope that the benefits of establishing a core of trusted recipes will be well worth it.

What kind of trust?

We intend to build trust in recipes — not in payload. We will verify that the recipe plist content is correctly identified, comes from a trusted source, and behaves in a reasonable manner. However, we will not guarantee that the software packaged by the recipe is secure or trusted.