Updated today Sherlog

System Policy Rule

com.apple.systempolicy.rule

The payload that configures the system policy.

macOS 10.8+

Not available with User Enrollment · macOS: device channel only

Configuration Keys (6)

Key	Type	Title	Description	Default	Range
`Requirement` The policy requirement. This key must follow the syntax described in [Code Signing Requirement Language](https://developer.apple.com/library/archive/documentation/Security/Conceptual/CodeSigningGuide/RequirementLang/RequirementLang.html#//apple_ref/doc/uid/TP40005929-CH5).	string	—	The policy requirement. This key must follow the syntax described in [Code Signing Requirement Language](https://developer.apple.com/library/archive/documentation/Security/Conceptual/CodeSigningGuide/RequirementLang/RequirementLang.html#//apple_ref/doc/uid/TP40005929-CH5).	—	—
`Comment` This string appears in the System Policy UI. If it's missing, the device enters `PayloadDisplayName` or `PayloadDescription` into this field before adding the rule to the System Policy database.	string	—	This string appears in the System Policy UI. If it's missing, the device enters `PayloadDisplayName` or `PayloadDescription` into this field before adding the rule to the System Policy database.	—	—
`Priority` The rule's priority.	real	—	The rule's priority.	—	—
`Expiration` The expiration date for rules being processed.	date	—	The expiration date for rules being processed.	—	—
`OperationType` The type of operation. Default: "operation:execute" Range: operation:execute, operation:install, operation:lsopen	string	—	The type of operation.	"operation:execute"
`LeafCertificate` The single leaf certificate for the app that's in the allow list.	data	—	The single leaf certificate for the app that's in the allow list.	—	—