Back to browser

System Policy - Kernel Extensions

com.apple.syspolicy.kernel-extension-policy

The payload that configures the kernel extension policies.

macOS

macOS 10.13.2+exclusive

Configuration Keys (4)

Key	Type	Title	Description	Default	Range
`AllowUserOverrides`	boolean	Allow users to approve kernel extensions	If 'true', users can approve additional kernel extensions that configuration profiles don't explicitly allow.	false	—
`AllowNonAdminUserApprovals`	boolean	Allow non-admin users to approve kernel extensions	If 'true', nonadministrative users can approve additional kernel extensions in the Security & Privacy preferences. Available in macOS 11 and later.	false	—
`AllowedTeamIdentifiers`	array	Allowed Team Identifiers	The array of team identifiers that define which validly signed kernel extensions can load.	—	—
`AllowedTeamIdentifiersItem`	string	Team Identifier	—	—	—
`AllowedKernelExtensions`	dict	Allowed Kernel Extensions	The dictionary that represents a set of kernel extensions that the system always allows to load on the computer. The dictionary maps team identifiers (keys) to arrays of bundle identifiers.	—	—
`{{value}}`	array	Bundle Identifier	The kernel extension data.	—	—
`AllowedKernelExtensionsItems`	string	Bundle Identifier	Kernel extension data.	—	—
`{{key}}`	string	Team Identifier	—	—	—
`AllowedKernelExtensionsItems`	string	Bundle Identifier	Kernel extension data.	—	—
`AllowedTeamIdentifiersItem`	string	Team Identifier	—	—	—
`{{value}}`	array	Bundle Identifier	The kernel extension data.	—	—
`AllowedKernelExtensionsItems`	string	Bundle Identifier	Kernel extension data.	—	—
`{{key}}`	string	Team Identifier	—	—	—
`AllowedKernelExtensionsItems`	string	Bundle Identifier	Kernel extension data.	—	—