Skip to content
Open
Changes from 1 commit
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
ac4d653
Enable Safari Remote Automation on SIP-enabled macOS 14/15 workers
rcurranmoz Mar 26, 2026
42c58f0
Fix PPPC profile: use Authorization/Allow instead of Allowed/true
rcurranmoz Mar 26, 2026
6ec2376
Fix PPPC profile: remove StaticCode, drop SystemPolicyDesktopFolder
rcurranmoz Mar 26, 2026
17cd1c5
Fix PPPC profile: drop ScreenCapture, use Authorization:Allow
rcurranmoz Mar 26, 2026
9af90d8
Fix safaridriver: store LaunchAgent plist outside ~/Library/LaunchAgents
rcurranmoz Mar 26, 2026
81273e9
Fix safaridriver: check semaphore content not just existence
rcurranmoz Mar 26, 2026
ab620f3
Fix safaridriver: replace refreshonly perms exec with unless condition
rcurranmoz Mar 26, 2026
843608a
Disable BlackHole virtual audio install on M4 roles
rcurranmoz Mar 26, 2026
a73f92b
Disable BlackHole virtual audio install on M4 roles
rcurranmoz Mar 26, 2026
84c6fe3
Fix safaridriver: poll for semaphore content not just file existence
rcurranmoz Apr 3, 2026
4c41b33
Fix PPPC profile: grant FDA to /bin/bash and /usr/bin/sqlite3
rcurranmoz May 15, 2026
85876cc
applescript: verify Allow Remote Automation actually toggled before s…
rcurranmoz May 15, 2026
3bfb069
handoff: update with EACS#2 results + the run-buildbot footnote
rcurranmoz May 15, 2026
4c2119f
handoff: tweaks — link upstream signing issue, drop overstated claims
rcurranmoz May 15, 2026
582ea9a
bootstrap: move SimpleMDM script in-tree + fix HANDOFF cross-refs
rcurranmoz May 15, 2026
221dc61
handoff: drop EACS#2 run-buildbot footnote (latest script was uploaded)
rcurranmoz May 15, 2026
b36069a
safaridriver: enable Allow Remote Automation for Safari Technology Pr…
rcurranmoz May 20, 2026
383952b
handoff: record Safari TP support + try-push validation
rcurranmoz May 20, 2026
File filter

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
handoff: drop EACS#2 run-buildbot footnote (latest script was uploaded)
The footnote claimed SimpleMDM had a pre-touch version of the bootstrap
script during EACS#2; per Ryan, the latest script was in fact uploaded.
Dropping the inaccurate claim. The in-tree script
(`modules/macos_safaridriver/simplemdm-bootstrap-sip-safari.sh`) has
the `touch /var/tmp/semaphore/run-buildbot` baked into the driver
cleanup block (line 206), so the next EACS should bring the worker
online on its own.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
  • Loading branch information
rcurranmoz and claude committed May 15, 2026
commit 221dc619de97738f078020ca6ee9a0b755b6119f
11 changes: 0 additions & 11 deletions modules/macos_safaridriver/HANDOFF.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,17 +43,6 @@ in. ✨
> SimpleMDM driver's outer retry loop tries again instead of declaring
> victory. EACS round 2 hit this clean path.

### ⚠️ One footnote on the 2nd round

The bootstrap script that was uploaded to SimpleMDM at the time of
EACS#2 was the version BEFORE I added `touch /var/tmp/semaphore/run-buildbot`
into the driver cleanup block. So bootstrap finished clean, but the
worker stayed dormant until I manually touched the file. **The
current in-tree script
(`modules/macos_safaridriver/simplemdm-bootstrap-sip-safari.sh`) HAS
the touch baked in** — just make sure SimpleMDM is using the latest
version, and the next EACS won't need any human follow-up.

---

## 🪤 The footguns I left in the sand for you
Expand Down