Create or Edit a new configuration profile .plist using the command line
Take out of the picture MDM or Apple Configurator or any other management software, just for my knowledge and understanding of how to implement a restriction and how to manipulate or create a .plist file, let's take the example below: (this is just an example, I do not own an Apple Watch) (this is just an example to understand how configuration profiles works).
Step #1 Read the following scenario:
To check if the system is configured to prevent Apple Watch from terminating a session lock, run the following command:
/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "allowAutoUnlock"
allowAutoUnlock = 0;
Take out of the picture MDM or Apple Configurator or any other management software, just for my knowledge and understanding of how to implement a restriction and how to manipulate or create a .plist file, let's take the example below: (this is just an example, I do not own an Apple Watch) (this is just an example to understand how configuration profiles works).
Step #1 Read the following scenario:
To check if the system is configured to prevent Apple Watch from terminating a session lock, run the following command:
/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "allowAutoUnlock"
allowAutoUnlock = 0;
If there is no result or "allowAutoUnlock" is not set to "0", this is a finding.
Step #2 I just executed the following command line /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "allowAutoUnlock" on my Mac OS X system and I did not received any output.
Question: How do I manipulate or edit or create a .plist that will modify the system_profiler SPConfigurationProfileDataType and will add the following allowAutoUnlock = 0
Again, I do not want to use MDM, Apple Configurator or any other management software, how can I do it using the command line?
Thank you so much for your help