System Policy - Kernel Extensions
com.apple.syspolicy.kernel-extension-policy
The payload that configures the kernel extension policies.
Not available with User Enrollment · macOS: device channel only
Configuration Keys (4)
| Key | Type | Title |
|---|---|---|
AllowUserOverridesIf 'true', users can approve additional kernel extensions that configuration profiles don't explicitly allow. Default: false | boolean | Allow users to approve kernel extensions |
AllowNonAdminUserApprovalsmacOS 11.0+ If 'true', nonadministrative users can approve additional kernel extensions in the Security & Privacy preferences. Default: false | boolean | Allow non-admin users to approve kernel extensions |
AllowedTeamIdentifiersThe array of team identifiers that define which validly signed kernel extensions can load. | array | Allowed Team Identifiers |
AllowedTeamIdentifiersItem | string | Team Identifier |
AllowedKernelExtensionsThe dictionary that represents a set of kernel extensions that the system always allows to load on the computer. The dictionary maps team identifiers (keys) to arrays of bundle identifiers. | dict | Allowed Kernel Extensions |
{{value}}The kernel extension data. | array | Bundle Identifier |
AllowedKernelExtensionsItemsKernel extension data. | string | Bundle Identifier |
{{key}} | string | Team Identifier |
ANYThe kernel extension data. | array | — |
AllowedKernelExtensionsItemsrequiredKernel extension data. | string | — |