System Policy Rule
com.apple.systempolicy.rule
The payload that configures the system policy.
macOS 10.8+
Apple schemaNot available with User Enrollment · macOS: device channel only
Configuration Keys (6)
| Key | Type | Description | Default | Range |
|---|---|---|---|---|
Requirementstring | string | The policy requirement. This key must follow the syntax described in [Code Signing Requirement Language](https://developer.apple.com/library/archive/documentation/Security/Conceptual/CodeSigningGuide/RequirementLang/RequirementLang.html#//apple_ref/doc/uid/TP40005929-CH5). | Default: — | Range: — |
Commentstring | string | This string appears in the System Policy UI. If it's missing, the device enters `PayloadDisplayName` or `PayloadDescription` into this field before adding the rule to the System Policy database. | Default: — | Range: — |
Priorityreal | real | The rule's priority. | Default: — | Range: — |
Expirationdate | date | The expiration date for rules being processed. | Default: — | Range: — |
OperationTypestring | string | The type of operation. | Default: "operation:execute" | Range: operation:execute, operation:install, operation:lsopen |
LeafCertificatedata | data | The single leaf certificate for the app that's in the allow list. | Default: — | Range: — |