Script or Function to Rollback Executed Commands

[narender34]

Problem to solve

By implementing a rollback or reverse script, all changes applied by the --fix flag can be reset to the default settings provided by a clean installation of macOS.

Intended users

This functionality can be utilized by all Mac administrators to test and revert specific settings to their default values during troubleshooting, or in cases where certain controls adversely affect system settings or the user experience.

Further details

The compliance script executed with the --fix flag applies various commands that modify permissions, settings, and other configurations on managed Mac devices. To revert these changes and restore the device to its original state, a dedicated script may be required.

Proposal

Consider incorporating an additional script or a built-in function to enable rollback of changes. For example, implementing a flag such as --rollback could facilitate reverting modifications made by --fix parameter.

[brodjieski]

For version 2.0 of the project, the schema supports a default_state as part of the enforcement_info. This is meant to be a place to populate a script to return the system back to the factory state for that particular control.

This represents an opportunity for someone to contribute both the information needed to restore a setting back to default state, as well as a way to generate script based on that content. Perhaps another output of the project would be a .zsh script that reverts all the settings back as you suggested, or takes an input that allows you to rollback any given control.

While it's not directly on our roadmap to include in 2.0, we did build in the pieces that would support the idea.