Secure MDM system for macOS, secure MDM platform, secure macOS mobile device and related method
An MDM management system to manage files outside the scope of MDM for macOS, the management system. The system has an MDM platform for managing a plurality of mobile devices each with a macOS operating system, the MDM manager allowing for creation of configuration profiles for an array of files outside of the scope of MDM for macOS and the configuration profiles having defined content settings. The MDM manager manages a plurality of managed mobile devices having a file manager agent to receive the array of configuration profiles from the MDM manager, the mobile devices each having a module to detect a change in the file outside the scope of MDM for macOS and when the change occurs to check a content change against the defined content settings, and if the change deviates from one of the defined content settings, returning the file to the defined content settings of the configuration profile.
1. An MDM management system to manage files outside the scope of MDM for macOS, the management system comprising:
an MDM platform for managing a plurality of mobile devices each with a macOS operating system, the MDM platform allowing for creation of configuration profiles for an array of files outside of the scope of MDM for macOS, the configuration profiles having defined content settings; and
a plurality of managed mobile devices having an agent to receive the configuration profiles for the array of files to be managed from the MDM platform, the agent detecting a change in the array of files outside the scope of MDM for macOS and when the change occurs the agent checking a content change against the defined content settings, and if the change deviates from one of the defined content settings, returning the file to the defined content settings of the configuration profiles.
2. The MDM management system as recited in claim 1 wherein the returning occurs automatically and instantaneously after the change occurs.
3. The MDM management system as recited in claim 1 wherein occurs within a second from a detection of the change.
4. The MDM management system as recited in claim 1 wherein occurs within a tenth of a second from a detection of the change.
5. The MDM management system as recited in claim 1 wherein the array has a file path key and value and content key and value for each managed file.
6. The MDM management system as recited in claim 5 wherein the array also has an owner key and value, a group key and value, and a permissions key and value.
7. The MDM management system as recited in claim 5 wherein the content value is in a numerical base form.
8. The MDM management system as recited in claim 5 wherein the content value is in base64.
9. A method for managing files outside the scope of MDM for macOS, the method comprising:
allowing an administrator to define configuration profile values for an array of files outside the scope of MDM for macOS;
providing each of a plurality of managed devices running macOS with an agent launched by a launchdaemon;
pushing the defined configuration profile values to the plurality of managed devices running macOS, the agents receiving the defined configuration profile values and the agent setting the files outside the scope of MDM for macOS to the defined configuration profile values, the agent checking for user changes by a user to the files outside the scope of MDM for macOS by calling FSEvents and if the user changes deviate from the defined configuration profile values, returning the file to the defined content settings of the configuration profiles.
10. The method as recited in claim 9 wherein the returning occurs automatically and instantaneously after the change occurs.
11. The method as recited in claim 10 wherein occurs within a second from a detection of the change.
12. The method as recited in claim 11 wherein occurs within a tenth of a second from a detection of the change.
13. The method as recited in claim 9 wherein the array has a file path key and value and content key and value for each managed file.
14. The method as recited in claim 13 wherein the array also has an owner key and value, a group key and value, and a permissions key and value.
15. The method as recited in claim 13 wherein the content value is in a numerical base form.
16. The method as recited in claim 13 wherein the content value is in base64.