Loaded 1836 executables and 6233 entitlements for iOS18

OS X/iOS Entitlement Database

As compiled by Jonathan Levin, @Morpheus______

Now with entitlements from iOS 9.0.2 through 18, MacOS 11.4 through 10.18 ("13")

Temporarily down for the weekend , for renovations (02/16/25)

	OS Version:
	Executables Entitlement:

	Entitlements by Executable:

iOS18 Executable mdmd

allow-obliterate-device: true
application-identifier: com.apple.devicemanagementclient.mdmd
aps-connection-initiate: true
backupd-connection-initiate: true
com.apple.CommCenter.fine-grained[0]: spi
com.apple.CommCenter.fine-grained[1]: identity
com.apple.GAX.SPI: true
com.apple.MobileInternetSharing.allow: true
com.apple.SystemConfiguration.SCPreferences-write-access[0]: com.apple.AutoWake.xml
com.apple.SystemConfiguration.SCPreferences-write-access[1]: preferences.plist
com.apple.appattest.spi: true
com.apple.appletv.pbs.allow-active-application: true
com.apple.appletv.pbs.osupdate-service-access: true
com.apple.appstored.install-apps: true
com.apple.apsd.ios-device-push-token: true
com.apple.authkit.client.private: true
com.apple.dmd-access: true
com.apple.dmd.operation.apply-redemption-code: true
com.apple.dmd.operation.begin-transaction: true
com.apple.dmd.operation.clear-activation-lock-bypass-code: true
com.apple.dmd.operation.clear-device-passcode: true
com.apple.dmd.operation.clear-restrictions-password: true
com.apple.dmd.operation.delete-user: true
com.apple.dmd.operation.disable-lost-mode: true
com.apple.dmd.operation.enable-lost-mode: true
com.apple.dmd.operation.end-transaction: true
com.apple.dmd.operation.erase-device: true
com.apple.dmd.operation.fetch-activation-lock-bypass-code: true
com.apple.dmd.operation.fetch-apps: true
com.apple.dmd.operation.fetch-available-os-updates: true
com.apple.dmd.operation.fetch-certificates: true
com.apple.dmd.operation.fetch-device-properties: true
com.apple.dmd.operation.fetch-location: true
com.apple.dmd.operation.fetch-managed-books: true
com.apple.dmd.operation.fetch-os-update-status: true
com.apple.dmd.operation.fetch-profiles: true
com.apple.dmd.operation.fetch-provisioning-profiles: true
com.apple.dmd.operation.fetch-restrictions: true
com.apple.dmd.operation.fetch-security-information: true
com.apple.dmd.operation.fetch-unlock-token: true
com.apple.dmd.operation.fetch-users: true
com.apple.dmd.operation.install-app: true
com.apple.dmd.operation.install-managed-book: true
com.apple.dmd.operation.install-profile: true
com.apple.dmd.operation.install-provisioning-profile: true
com.apple.dmd.operation.invite-user-to-vpp: true
com.apple.dmd.operation.lock-device: true
com.apple.dmd.operation.log-out-user: true
com.apple.dmd.operation.play-lost-mode-sound: true
com.apple.dmd.operation.refresh-cellular-plans: true
com.apple.dmd.operation.remove-app: true
com.apple.dmd.operation.remove-managed-book: true
com.apple.dmd.operation.remove-profile: true
com.apple.dmd.operation.remove-protected-profile: true
com.apple.dmd.operation.remove-provisioning-profile: true
com.apple.dmd.operation.request-airplay-mirroring: true
com.apple.dmd.operation.restart-device: true
com.apple.dmd.operation.schedule-os-update: true
com.apple.dmd.operation.schedule-os-update-scan: true
com.apple.dmd.operation.set-app-allow-user-to-hide: true
com.apple.dmd.operation.set-app-allow-user-to-lock: true
com.apple.dmd.operation.set-app-analytics-enabled: true
com.apple.dmd.operation.set-app-associated-domains: true
com.apple.dmd.operation.set-app-associated-domains-enable-direct-downloads: true
com.apple.dmd.operation.set-app-configuration: true
com.apple.dmd.operation.set-app-extension-uuids: true
com.apple.dmd.operation.set-app-options: true
com.apple.dmd.operation.set-app-removability: true
com.apple.dmd.operation.set-app-tap-to-pay-screen-lock: true
com.apple.dmd.operation.set-bluetooth-enabled: true
com.apple.dmd.operation.set-data-roaming-enabled: true
com.apple.dmd.operation.set-device-name: true
com.apple.dmd.operation.set-diagnostic-submission-enabled: true
com.apple.dmd.operation.set-maximum-resident-users: true
com.apple.dmd.operation.set-passcode-lock-grace-period: true
com.apple.dmd.operation.set-personal-hotspot-enabled: true
com.apple.dmd.operation.set-user-language: true
com.apple.dmd.operation.set-user-locale: true
com.apple.dmd.operation.set-voice-roaming-enabled: true
com.apple.dmd.operation.set-wallpaper: true
com.apple.dmd.operation.shut-down-device: true
com.apple.dmd.operation.start-managing-app: true
com.apple.dmd.operation.stop-airplay-mirroring: true
com.apple.dmd.operation.stop-managing-app: true
com.apple.dmd.operation.stop-managing-books: true
com.apple.dmd.operation.trigger-diagnostics: true
com.apple.dmd.operation.update-app: true
com.apple.dmd.operation.validate-applications: true
com.apple.frontboard.shutdown: true
com.apple.icloud.FindMyDevice.FindMyDeviceHelperXPCService.access: true
com.apple.icloud.findmydeviced.access: true
com.apple.itunesstored.metrics: true
com.apple.itunesstored.private: true
com.apple.keystore.escrow.create: true
com.apple.locationd.authorizeapplications: true
com.apple.locationd.effective_bundle: true
com.apple.locationd.emergency_enabler: true
com.apple.lsapplicationproxy.deviceidentifierforvendor: true
com.apple.managedconfiguration.mdmd-access: true
com.apple.managedconfiguration.mdmuserd-access: true
com.apple.managedconfiguration.profiled-access: true
com.apple.managedconfiguration.profiled.configurationprofiles[0]: Inspection
com.apple.managedconfiguration.profiled.configurationprofiles[1]: PopInstallationQueue
com.apple.managedconfiguration.profiled.configurationprofiles[2]: Removal
com.apple.managedconfiguration.profiled.configurationprofiles[3]: SilentNonUIInstallation
com.apple.managedconfiguration.profiled.configurationprofiles[4]: UIInstallation
com.apple.managedconfiguration.profiled.configurationprofiles[5]: CloudLockedRemoval
com.apple.managedconfiguration.profiled.get[0]: MachineInfo
com.apple.managedconfiguration.profiled.get[1]: ManagedApplications
com.apple.managedconfiguration.profiled.get[2]: NetworkExtension
com.apple.managedconfiguration.profiled.get[3]: WiFiNetworks
com.apple.managedconfiguration.profiled.provisioningprofiles[0]: Installation
com.apple.managedconfiguration.profiled.provisioningprofiles[1]: PopInstallationQueue
com.apple.managedconfiguration.profiled.provisioningprofiles[2]: Removal
com.apple.managedconfiguration.profiled.provisioningprofiles[3]: Validation
com.apple.managedconfiguration.profiled.set[0]: ActivationLock
com.apple.managedconfiguration.profiled.set[1]: ActivationRecord
com.apple.managedconfiguration.profiled.set[2]: Certificates
com.apple.managedconfiguration.profiled.set[3]: ClientRestrictions
com.apple.managedconfiguration.profiled.set[4]: CloudConfiguration
com.apple.managedconfiguration.profiled.set[5]: Passcode
com.apple.managedconfiguration.profiled.set[6]: Safari
com.apple.managedconfiguration.profiled.set[7]: UserSettings
com.apple.managedconfiguration.profiled.usercompliance: true
com.apple.managedconfiguration.teslad-access: true
com.apple.mkb.usersession.delete: true
com.apple.mkb.usersession.info: true
com.apple.mkb.usersession.loginwindow: true
com.apple.mobile.keybagd.UserManager.bubblepop: true
com.apple.mobileactivationd.device-identifiers: true
com.apple.mobileactivationd.eda: true
com.apple.mobileactivationd.spi: true
com.apple.nano.nanoregistry: true
com.apple.nano.nanoregistry.pairunpairobliterate: true
com.apple.nanoregistry.BDE85C67-0FDD-4A95-A9B9-3CB5DD0C06A2: true
com.apple.posterboardservices.data-store: true
com.apple.posterboardservices.data-store.accessSwitcherConfiguration: true
com.apple.posterboardservices.data-store.mutateSwitcherConfiguration: true
com.apple.posterboardservices.data-store.refreshConfigurationSnapshot: true
com.apple.posterboardservices.data-store.refreshConfigurations: true
com.apple.private.InstallCoordination.allowed: true
com.apple.private.MobileContainerManager.otherIdLookup: true
com.apple.private.MobileGestalt.AllowedProtectedKeys[0]: UniqueChipID
com.apple.private.MobileGestalt.AllowedProtectedKeys[1]: SerialNumber
com.apple.private.accounts.allaccounts: true
com.apple.private.coreservices.canmaplsdatabase: true
com.apple.private.followup: true
com.apple.private.keychain.sysbound: true
com.apple.private.lockdown.finegrained-get[0]: NULL/DeviceName
com.apple.private.lockdown.finegrained-get[1]: com.apple.mobile.backup/LastCloudBackupDate
com.apple.private.lockdown.finegrained-set[0]: NULL/DeviceName
com.apple.private.lockdown.ignore-mc-name-restriction: true
com.apple.private.mobileinstall.allowedSPI[0]: Uninstall
com.apple.private.mobileinstall.allowedSPI[1]: Lookup
com.apple.private.mobileinstall.allowedSPI[2]: CopyDiskUsageForLaunchServices
com.apple.private.mobileinstall.allowedSPI[3]: UninstallForLaunchServices
com.apple.private.mobileinstall.allowedSPI[4]: InstallForLaunchServices
com.apple.private.remotemanagement.enrollment: true
com.apple.private.screen-time: true
com.apple.private.security.storage.ManagedConfiguration: true
com.apple.private.security.storage.os_eligibility.readonly: true
com.apple.private.system-keychain: true
com.apple.private.tcc.allow[0]: kTCCServiceMediaLibrary
com.apple.runningboard.process-state: true
com.apple.security.attestation.access: true
com.apple.security.exception.files.absolute-path.read-only[0]: /private/var/db/os_eligibility/
com.apple.security.iokit-user-client-class[0]: AGXCommandQueue
com.apple.security.iokit-user-client-class[1]: AGXDevice
com.apple.security.iokit-user-client-class[2]: AGXDeviceUserClient
com.apple.security.iokit-user-client-class[3]: AGXSharedUserClient
com.apple.security.iokit-user-client-class[4]: AppleJPEGDriverUserClient
com.apple.security.iokit-user-client-class[5]: IOAccelContext
com.apple.security.iokit-user-client-class[6]: IOAccelContext2
com.apple.security.iokit-user-client-class[7]: IOAccelDevice
com.apple.security.iokit-user-client-class[8]: IOAccelDevice2
com.apple.security.iokit-user-client-class[9]: IOAccelSharedUserClient
com.apple.security.iokit-user-client-class[10]: IOAccelSharedUserClient2
com.apple.security.iokit-user-client-class[11]: IOAccelSubmitter2
com.apple.security.iokit-user-client-class[12]: IOSurfaceAcceleratorClient
com.apple.security.iokit-user-client-class[13]: IOSurfaceRootUserClient
com.apple.security.system-groups[0]: systemgroup.com.apple.configurationprofiles
com.apple.security.system-groups[1]: systemgroup.com.apple.media.books.managed
com.apple.springboard.application-removability.proxy: true
com.apple.springboard.opensensitiveurl: true
com.apple.springboard.remote-alert: true
com.apple.springboard.wipedevice: true
com.apple.surfboard.lock-screen-client: true
com.apple.timed: true
com.apple.tzlink.allow: true
com.apple.umd.usersession.provision: true
com.apple.usermanagerd.persona.background: true
com.apple.usermanagerd.persona.fetch: true
com.apple.wipedevice: true
keychain-access-groups[0]: apple
keychain-access-groups[1]: com.apple.certificates
keychain-access-groups[2]: com.apple.identities
keychain-access-groups[3]: com.apple.mdm.attestation

Entitlement data harvested automatically by jtool2 -v --ent (using OLDENT=1 since DER support is buggy).
This is a work in progress. Suggestions for improvement are welcome at the NewOSXBook.com forum