Fixing broken "macOS - Check if latest version" policy. (#18304)

Fixing broken "macOS - Check if latest version" policy. Co-authored-by: Luke Heath <luke@fleetdm.com>
fleetdm · Apr 16, 2024 · daba623 · daba623
1 parent 2807bd6
commit daba623
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/it-and-security/lib/macos-device-health.policies.yml b/it-and-security/lib/macos-device-health.policies.yml
@@ -65,11 +65,9 @@
   resolution: Delete 1Password emergency kits from your computer, and empty the trash. 1Password emergency kits should only be printed and stored in a physically secure location.
   platform: darwin
 - name: macOS - Check if latest version
-  query: SELECT 1 WHERE 
-    EXISTS ( 
-      SELECT major, concat_ws(".", major, minor, patch) AS "macOS Version" FROM os_version --Sonoma WHERE 
-        (major = "14" AND "macOS Version" < "14.4.1")
-    );
+  query: |
+    SELECT 1 FROM os_version 
+      WHERE (major > 14 OR (major = 14 AND minor > 4) OR (major = 14 AND minor = 4 AND patch >= 1)) --Sonoma
   critical: false
   description: This policy check if macOS version is most recent version available.
   resolution: From the Apple menu, select System Settings. Navigate to General > Software Update.