Updated today Sherlog

System Policy - Kernel Extensions

com.apple.syspolicy.kernel-extension-policy

The payload that configures the kernel extension policies.

macOS

macOS 10.13.2+exclusive

Configuration Keys (4)

Key	Type	Title	Description	Default	Range
`AllowUserOverrides` If 'true', users can approve additional kernel extensions that configuration profiles don't explicitly allow. Default: false	boolean	Allow users to approve kernel extensions	If 'true', users can approve additional kernel extensions that configuration profiles don't explicitly allow.	false	—
`AllowNonAdminUserApprovals` If 'true', nonadministrative users can approve additional kernel extensions in the Security & Privacy preferences. Available in macOS 11 and later. Default: false	boolean	Allow non-admin users to approve kernel extensions	If 'true', nonadministrative users can approve additional kernel extensions in the Security & Privacy preferences. Available in macOS 11 and later.	false	—
`AllowedTeamIdentifiers` The array of team identifiers that define which validly signed kernel extensions can load.	array	Allowed Team Identifiers	The array of team identifiers that define which validly signed kernel extensions can load.	—	—
`AllowedKernelExtensions` The dictionary that represents a set of kernel extensions that the system always allows to load on the computer. The dictionary maps team identifiers (keys) to arrays of bundle identifiers.	dict	Allowed Kernel Extensions	The dictionary that represents a set of kernel extensions that the system always allows to load on the computer. The dictionary maps team identifiers (keys) to arrays of bundle identifiers.	—	—
`AllowedTeamIdentifiersItem`	string	Team Identifier	—	—	—
`{{value}}` The kernel extension data.	array	Bundle Identifier	The kernel extension data.	—	—
`{{key}}`	string	Team Identifier	—	—	—
`AllowedKernelExtensionsItems` Kernel extension data.	string	Bundle Identifier	Kernel extension data.	—	—