os_software_update_deferral gives fails finding if 'enforcedSoftwareUpdateDelay' key is not set #238

Closed
opened 2026-01-19 18:29:46 +00:00 by michael · 1 comment
Owner

Originally created by @jmahlman on GitHub.

Originally assigned to: @golbiga on GitHub.

Summary

The os_software_update_deferral check will fail if there is no setting for "enforcedSoftwareUpdateDelay".

Steps to reproduce

  1. Run check on device without the 'enforcedSoftwareUpdateDelay' key set.

Operating System version

12.5

What is the current bug behavior?

If no key is preset, the check will be marked as failed.

What is the expected correct behavior?

If the key is not set I believe this should pass as this means there is essentially no delay.

Possible fix

May want to mark as pass if the key is not found.

Originally created by @jmahlman on GitHub. Originally assigned to: @golbiga on GitHub. <!--- Please read this! Before opening a new issue, make sure to search for keywords in the issues filtered by the "regression" or "bug" label and verify the issue you're about to submit isn't a duplicate. ---> ### Summary The `os_software_update_deferral` check will fail if there is no setting for "enforcedSoftwareUpdateDelay". ### Steps to reproduce 1. Run check on device without the 'enforcedSoftwareUpdateDelay' key set. ### Operating System version 12.5 ### What is the current *bug* behavior? If no key is preset, the check will be marked as failed. ### What is the expected *correct* behavior? If the key is not set I believe this should pass as this means there is essentially no delay. ### Possible fix May want to mark as pass if the key is not found.
Author
Owner

@jmahlman commented on GitHub:

The change seems to have worked.

@jmahlman commented on GitHub: The change seems to have worked.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#238