Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
gatekeeper
macOS Gatekeeper Details.
Column | Type | Description |
---|---|---|
assessments_enabled | integer | 1 If a Gatekeeper is enabled else 0 |
dev_id_enabled | integer | 1 If a Gatekeeper allows execution from identified developers else 0 |
opaque_version | text | Version of Gatekeeper's gkopaque.bundle |
version | text | Version of Gatekeeper's gke.bundle |
Policy query to check that Gatekeeper is enabled
SELECT 1 FROM gatekeeper WHERE assessments_enabled = 1;