System Policy - Kernel Extensions
com.apple.syspolicy.kernel-extension-policy
The payload that configures the kernel extension policies.
Not available with User Enrollment · macOS: device channel only
Configuration Keys (4)
| Key | Type | Description | Default | Range |
|---|---|---|---|---|
AllowUserOverridesbooleanAllow users to approve kernel extensions | boolean | If 'true', users can approve additional kernel extensions that configuration profiles don't explicitly allow. | Default: false | Range: — |
| boolean | If 'true', nonadministrative users can approve additional kernel extensions in the Security & Privacy preferences. | Default: false | Range: — | |
Allowed Team Identifiers | array | The array of team identifiers that define which validly signed kernel extensions can load. | Default: — | Range: — |
Team Identifier | string | — | Default: — | Range: — |
Allowed Kernel Extensions | dict | The dictionary that represents a set of kernel extensions that the system always allows to load on the computer. The dictionary maps team identifiers (keys) to arrays of bundle identifiers. | Default: — | Range: — |
{{value}}arrayBundle Identifier | array | The kernel extension data. | Default: — | Range: — |
Bundle Identifier | string | Kernel extension data. | Default: — | Range: — |
{{key}}stringTeam Identifier | string | — | Default: — | Range: — |
ANYarray | array | The kernel extension data. | Default: — | Range: — |
required | string | Kernel extension data. | Default: — | Range: — |