added ddm for iOS and iPadOS; copied macOS ddm to Workstations team

fleetdm · Dec 17, 2024 · 6b6194a · 6b6194a
1 parent 35f0741
commit 6b6194a
Show file tree

Hide file tree

Showing 5 changed files with 33 additions and 0 deletions.
diff --git a/it-and-security/lib/ios/declaration-profiles/software-update-settings.json b/it-and-security/lib/ios/declaration-profiles/software-update-settings.json
@@ -0,0 +1,15 @@
+{
+    "Type": "com.apple.configuration.softwareupdate.settings",
+    "Identifier": "com.fleetdm.config.softwareupdate.settings",
+    "Payload": {
+        "AutomaticActions": {
+            "Download": "AlwaysOn",
+            "InstallOSUpdates": "Allowed",
+            "InstallSecurityUpdate": "AlwaysOn"
+        },
+        "Notifications": true,
+        "RapidSecurityResponse": {
+            "Enabled": true
+        }
+    }
+}
diff --git a/it-and-security/lib/ipados/declaration-profiles/software-update-settings.json b/it-and-security/lib/ipados/declaration-profiles/software-update-settings.json
@@ -0,0 +1,15 @@
+{
+    "Type": "com.apple.configuration.softwareupdate.settings",
+    "Identifier": "com.fleetdm.config.softwareupdate.settings",
+    "Payload": {
+        "AutomaticActions": {
+            "Download": "AlwaysOn",
+            "InstallOSUpdates": "Allowed",
+            "InstallSecurityUpdate": "AlwaysOn"
+        },
+        "Notifications": true,
+        "RapidSecurityResponse": {
+            "Enabled": true
+        }
+    }
+}
diff --git a/it-and-security/teams/company-owned-ipads.yml b/it-and-security/teams/company-owned-ipads.yml
@@ -16,6 +16,7 @@ controls:
     minimum_version: "17.6"
   macos_settings:
     custom_settings:
+      - path: ../lib/ipados/declaration-profiles/software-update-settings.json
   scripts:
 policies:
 queries:

diff --git a/it-and-security/teams/company-owned-iphones.yml b/it-and-security/teams/company-owned-iphones.yml
@@ -20,6 +20,7 @@ controls:
       - path: ../lib/ios/configuration-profiles/lock-screen-message.mobileconfig
       - path: ../lib/ios/configuration-profiles/content-filtering.mobileconfig
       - path: ../lib/ios/declaration-profiles/passcode-settings-ddm.json
+      - path: ../lib/ios/declaration-profiles/software-update-settings.json
   scripts:
 policies:
 queries:

diff --git a/it-and-security/teams/workstations.yml b/it-and-security/teams/workstations.yml
@@ -56,6 +56,7 @@ controls:
       - path: ../lib/macos/configuration-profiles/prevent-autologon.mobileconfig
       - path: ../lib/macos/configuration-profiles/secure-terminal-keyboard.mobileconfig
       - path: ../lib/macos/declaration-profiles/passcode-settings.json
+      - path: ../lib/macos/declaration-profiles/software-update-settings.json
   macos_setup:
     bootstrap_package: ""
     enable_end_user_authentication: true