Skip to content

Instantly share code, notes, and snippets.

@zchee
Forked from nstrauss/macOS System Extensions
Created April 12, 2021 01:09
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zchee/b557c26b537f6cc422318c919fbe62ee to your computer and use it in GitHub Desktop.
Save zchee/b557c26b537f6cc422318c919fbe62ee to your computer and use it in GitHub Desktop.
## Where to find info and how to report on system extensions in macOS Catalina+
# Staged system extensions location in folder based on unique ID
/Library/SystemExtensions/
# Info on each
/Library/SystemExtensions/db.plist
Includes...
- state (enabled, activated, etc.)
- associated launchd plists
- category (network, driver, etc.)
- original path within app bundle
- staged path
- version
- identifier
- unique ID
- MDM enforced system extension policies via profile
# CLI tools
systemextensionsctl
systemextensionsctl: usage:
systemextensionsctl developer [on|off]
systemextensionsctl list [category]
systemextensionsctl reset - reset all System Extensions state
systemextensionsctl uninstall <teamId> <bundleId>; can also accept '-' for teamID
systemextensionsctl list
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled]
systemextensionsctl list com.apple.system_extension.network_extension
Category: com.apple.system_extension.network_extension
1 extension(s)
--- com.apple.system_extension.network_extension
enabled active teamID bundleID (version) name [state]
* * PXPZ95SK77 com.paloaltonetworks.GlobalProtect.client.extension (5.1.5-20/1) GlobalProtectExtension [activated enabled]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment