Mac Management Group

 View Only
  • 1.  Mac SWD Detection Rules not working

    Posted Jan 20, 2016 04:41 AM

    Hi All,

    I am not sure where I am going wrong here, I am working with ITMS 7.6 HF7 and Mac OS X 10.11.3 (although tested same result on OS X 10.10.5)

    I have created 3 seperate Managed SWD Policies and with each of them detection rule doesn't detect that the software is already installed and provides incorrect compliance state, which leads the Policy to run everytime Computer is restarted (Schedule is set to Computer Startup).

    I will provide the info based on installing Adobe Flash Player (20.0.0.286)

     

    Detection Rule:

    Name: Adobe Flash Player 20.0.0.286

    Expression Type: Software component package

    Product: com.adobe.pkg.FlashPlayer

    Version: 20.0.0.286

    Match: Equal

     

    When I run "pkgutil --pkgscom.adobe.pkg.FlashPlayer is listed

    When I check /var/db/receipts com.adobe.pkg.FlashPlayer.plist is present and has the below info:

    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
        <key>InstallDate</key>
        <date>2016-01-20T09:27:34Z</date>
        <key>InstallPrefixPath</key>
        <string></string>
        <key>InstallProcessName</key>
        <string>installer</string>
        <key>PackageFileName</key>
        <string>AdobeFlashPlayerComponent.pkg</string>
        <key>PackageIdentifier</key>
        <string>com.adobe.pkg.FlashPlayer</string>
        <key>PackageVersion</key>
        <string>20.0.0.286</string>

        <key>PathACLs</key>
        <dict>
            <key>Applications</key>
            <string>!#acl 1
    group:ABCDEFAB-CDEF-ABCD-EFAB-CDEF0000000C:everyone:12:deny:delete
    </string>
            <key>Applications/Utilities</key>
            <string>!#acl 1
    group:ABCDEFAB-CDEF-ABCD-EFAB-CDEF0000000C:everyone:12:deny:delete
    </string>
            <key>Library</key>
            <string>!#acl 1
    group:ABCDEFAB-CDEF-ABCD-EFAB-CDEF0000000C:everyone:12:deny:delete
    </string>
        </dict>
    </dict>
    </plist>

    The SWD executes successfully, but the compliance state is never set correctly.

     

    I found this thread Managed Software Delivery detection rule for Mac and dougj's suggestion gives me the below:

    ===================================

    com.adobe.pkg.FlashPlayer

     

    Package Details...

    ===================================

    package-id: com.adobe.pkg.FlashPlayer

    version: 20.0.0.286

    volume: /

    location: 

    install-time: 1453282054

     

    ===================================

     

    Is there something really simple I am missing here?

    Any help appreciated.

    Thanks

    Mark



  • 2.  RE: Mac SWD Detection Rules not working

    Broadcom Employee
    Posted Jan 20, 2016 05:00 AM

    Hi Mark,

    Actually no - all is correct. There was an issue in detection mechanism on agent side, that prevents correct detection in case package location is empty (as in user case)

    There is already point fix created. I will check if this PF was already published and will let you know.

    Thanks,

    AndreiF



  • 3.  RE: Mac SWD Detection Rules not working

    Posted Jan 20, 2016 06:36 AM

    Hi Andrei,

     

    Thank you for the prompt response, I am glad it's nothing I was doing wrong as it was getting quite frustrating.

     

    I look forward to your response and access to the relevant PF.

     

    Mark



  • 4.  RE: Mac SWD Detection Rules not working

    Posted Jan 20, 2016 11:06 AM

    The point fix is: http://www.symantec.com/docs/TECH233940

    You might also try this utility I wrote, which simplifies listing pkg info. It defaults to search for package with 'altiris' in the name. If you put any other string in the command line, it will search for that, instead. I named it 'pkgutilx' and put in the mac's /usr/sbin/local directory so it's available from anywhere. 

     

    ==========================================

    #!/bin/sh 

     

    # mac only

     

    curName=$1

    if [ -z $curName ]; then

      curName='altiris'

    fi

     

     

    echo

    echo 'Installed Packages'

    echo '===================================' 

    pkglist=`pkgutil --packages | grep -i $curName` 

    echo "$pkglist"

    echo

     

    echo 'Package Details...'

    echo '===================================' 

    for i in $pkglist; do 

      echo "`pkgutil --pkg-info $i`"

      echo 

    done

    echo '==================================='

    echo

    ==========================================

     



  • 5.  RE: Mac SWD Detection Rules not working

    Posted Jan 20, 2016 07:25 PM

    Hi Doug,

     

    Thanks for the response, unfortunatey that PF is not relevant for us, we are running 7.6 HF7

    "Important Note: This point fix is provided specifically for 7.5 SP1 HF5 only. "

     

    Andrei has been in contact with support engineering and they are working on a compatible PF.

     

    Thanks also for the suggestion, I will check it out.

     

    Mark



  • 6.  RE: Mac SWD Detection Rules not working

    Posted Feb 18, 2016 07:19 PM

    Just as an update to the thread, PointFix has been created for 7.6 HF7.

    It does not however solve my issue, so a support case has been logged to generate a working (hopefully) PF.