Mac OS XML禁用app模板 配合work space one 使用

参考link:

https://www.youtube.com/watch?v=c8KqEMPpCTI

https://www.youtube.com/watch?v=NOVZpp2kNUA

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2209/macOS_Platform/GUID-AppsProcessRestrictionsformacOS.html#create-a-system-extension-profile

Windows 相关参考链接 https://github.com/microsoft/AaronLocker

支持禁用字段：name/cdhash/path/bundleId

可以混合搭配，path可以使用通配符*，如 /Users/*/anaconda3/*

cdhash 只支持有签名的mac app

获取cdhash：

codesign -dvvv /path/to/binary

参考链接：https://docs.jamf.com/jamf-protect/administrator-guide/Preventions.html

<dict>
    <key>Restrictions</key>
    <array>
        <dict>
            <key>Attributes</key>
            <dict>
                <key>name</key>
                <array>
                    <string>Anaconda Navigator</string>
                </array>
                <key>cdhash</key>
                <array>
                    <string>da23241sda4214231jjh34hedeqwe</string>
                </array>
                <key>path</key>
                <array>
                    <string>/Users/*/anaconda3/*</string>
                </array>
                <key>bundleId</key>
                <array>
                    <string>com.anaconda.io</string>
                </array>
            </dict>
            <key>Actions</key>
            <array>
                <integer>1</integer>
            </array>
            <key>Message</key>
            <string>此软件未采购，禁止使用。如需使用请联系Corp IT。</string>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Restricted Software Policy</string>
    <key>PayloadIdentifier</key>
    <string>HubSettings.93f1655a-59fb-42dc-bc31-9571275cb12b</string>
    <key>PayloadOrganization</key>
    <string>VMware</string>
    <key>PayloadType</key>
    <string>com.vmware.hub.mac.restrictions</string>
    <key>PayloadUUID</key>
    <string>1D7F0D17-369B-4766-9CA0-D2B4537657C1</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>