Adding new policy to check for MDM enrollment (#4343)

2022-03-03 14:22:23 -05:00
parent 7d60be4c15
commit 4f8847ddd2
2 changed files with 20 additions and 2 deletions
@@ -587,4 +587,13 @@ spec:
  resolution: "Ensure ClamAV and Freshclam are installed and running."
  platforms: Linux
  contributors: GuillaumeRoss
-  
+---
+apiVersion: v1
+kind: policy
+spec:
+  name: MDM Enrolled (macOS)
+  query: SELECT 1 from mdm WHERE enrolled='true';
+  description: "Required: osquery deployed with Orbit, or manual installation of macadmins/osquery-extension. Checks that a Mac is enrolled to MDM. Add a AND on identity_certificate_uuid to check for a specific MDM."
+  resolution: "Enroll device to MDM"
+  platforms: macOS
+  contributors: GuillaumeRoss