I am in the process of adding Configuration Profiles support to C3 Inventory and I was hoping I could get some comments on what functionality might be useful for your organizations.
I can currently support:
Applied Profiles (and their UUID)
Digitally Signed Profiles
Unsigned Profiles
Components used Per Profile
Mapped Network Drives
Configured MDM Server
If there are other configuration profile settings you view as particularly important please let me know.
If you have a number of profiles configured and you’d be willing to share them let me know! Specifically if you can run Profiles -P -o "~/Desktop/Effective.plist" from terminal and share the effective.plist with me, and let me know which profile settings you’re particularly interested in, I can make sure that the properties cover those specific areas!
not exists file "/Library/Caches/BigFix-Profiles.plist" whose (modification time of it > maximum of (boot times of operating systems; modification times of files "/var/db/ConfigurationProfiles/Store/ConfigProfiles.binary"))
Is it possible to get this data through pure elevance? Is parsing a plist output from profiles the only way? (Matched with a periodic task that outputs profiles to a plist?)
Without true MDM capabilities in BigFix or an inspector that utilizes the profiles utility I don’t believe there would be another way. We were using lines of on the ConfigProfiles.binary but that method made it difficult to version or deploy updated profiles (with matching identifiers) and broke with the unicode changes in recent releases of of the agent.
An event driven task to output the profiles to a plist just in time for relevance evaluation would be the next best option.