Sharvil Shah

Results 39 comments of Sharvil Shah

That is weird... I do not immediately know a root cause (possibly related to `uid` and sqlite types), and completely possible that I mucked up somewhere. But I will dig...

Ah, I see..I am relying on the `CFDictionary` that I get when making the OpenDirectory account policies API call.. Do you know of an easy way to set password policies,...

Back to filtering -- this seems to be related to https://github.com/osquery/osquery/issues/7420 One easy option is to use `-1` as the value for `uid` for global policies. Thoughts on this?

Hey @FritzX6, Do you know what build version for Catalina 10.15.1 is running on those notebooks? I am currently mobile, so don't have access to a computer, but will look...

Thanks @FritzX6 and @blaedj! Are you aware if this is this an issue on T2 machines running 10.14, or just on 10.15? Trying to narrow it down. In any case,...

> I read https://duo.com/labs/research/apple-t2-xpc and browsed all of the `ioreg` properties on my T2 macbook last night and did not see an alternative to querying the firmware version. This is...

Thanks @theopolis! I noticed some inconsistencies with `/System/Library/CoreServices/BridgeVersion.plist`: On my T1 machine, the contents of that plist is the same as the one you posted, but every apple tool (`system_profiler...

Looks like the what we know as Safari Extensions are deprecated, and there is now "Safari App Extension" https://developer.apple.com/documentation/safariservices/safari_app_extensions/converting_a_legacy_safari_extension_to_a_safari_app_extension?language=objc These seem to live within the .app bundle itself: for me...

@noahtalerman yep, as Zach mentioned, I am going to research what needs to be done, and what approach would work best -- whether an osquery extension, or in core or...