update guard to account for TCC seperate module

This commit is contained in:
Jared Weyer 2023-03-09 16:26:04 -08:00
Родитель 8316b58e3d
Коммит db06526a53
1 изменённых файлов: 4 добавлений и 2 удалений

Просмотреть файл

@ -1,14 +1,16 @@
# TODO; do we want to add the TCC logic to the resource?
tcc_db_path = '/Library/Application Support/com.apple.TCC/TCC.db'
execute 'authorize screensharing client to utilize the kTCCServicePostEvent service' do
command ['/usr/bin/sqlite3', tcc_db_path, "INSERT OR REPLACE INTO access VALUES('kTCCServicePostEvent','com.apple.screensharing.agent',0,2,4,1,NULL,NULL,0,'UNUSED',NULL,0,1639743960);" ]
not_if { RemoteManagement.correct_tcc_db_privileges? }
not_if { RemoteManagement::TCC::DB.correct_privileges? }
only_if { shell_out('/usr/sbin/system_profiler', 'SPSoftwareDataType').stdout.match?(Regexp.new('System Integrity Protection: Disabled')) }
end
execute 'authorize screensharing client to utilize the kTCCServiceScreenCapture service' do
command ['/usr/bin/sqlite3', tcc_db_path, "INSERT OR REPLACE INTO access VALUES ('kTCCServiceScreenCapture','com.apple.screensharing.agent',0,2,4,1,NULL,NULL,0,'UNUSED',NULL,0,1639743960);" ]
not_if { RemoteManagement.correct_tcc_db_privileges? }
not_if { RemoteManagement::TCC::DB.correct_privileges? }
only_if { shell_out('/usr/sbin/system_profiler', 'SPSoftwareDataType').stdout.match?(Regexp.new('System Integrity Protection: Disabled')) }
end