Loaded 1836 executables and 6233 entitlements for iOS18

OS X/iOS Entitlement Database

As compiled by Jonathan Levin, @Morpheus______

Now with entitlements from iOS 9.0.2 through 18, MacOS 11.4 through 10.18 ("13")

Temporarily down for the weekend , for renovations (02/16/25)

	OS Version:
	Executables Entitlement:

	Entitlements by Executable:

iOS18 Executable profiled

application-identifier: com.apple.managedconfiguration.profiled
aps-connection-initiate: true
com.apple.CommCenter.fine-grained[0]: spi
com.apple.CommCenter.fine-grained[1]: dm
com.apple.CommCenter.fine-grained[2]: identity
com.apple.GAX.SPI: true
com.apple.SystemConfiguration.SCDynamicStore-write-access: true
com.apple.SystemConfiguration.SCPreferences-write-access[0]: com.apple.network.eapolclient.configuration.plist
com.apple.SystemConfiguration.SCPreferences-write-access[1]: preferences.plist
com.apple.SystemConfiguration.SCPreferences-write-access[2]: com.apple.AutoWake.xml
com.apple.accounts.appleidauthentication.defaultaccess: true
com.apple.accounts.connectbeforemigrationdidfinish: true
com.apple.appattest.spi: true
com.apple.authkit.client.internal: true
com.apple.authkit.client.private: true
com.apple.dmd-access: true
com.apple.dmd.operation.remove-app: true
com.apple.frontboard.launchapplications: true
com.apple.icloud.findmydeviced.access: true
com.apple.itunesstored.lookup: true
com.apple.itunesstored.private: true
com.apple.keystore.auth-token: true
com.apple.keystore.config.set: true
com.apple.keystore.device: true
com.apple.keystore.device.verify: true
com.apple.keystore.escrow.create: true
com.apple.keystore.lockassertion: true
com.apple.managedconfiguration.mdmd-access: true
com.apple.managedconfiguration.mdmuserd-access: true
com.apple.managedconfiguration.profiled-access: true
com.apple.managedconfiguration.profiled.configurationprofiles[0]: CarrierInstallation
com.apple.managedconfiguration.profiled.configurationprofiles[1]: CustomUIInstallation
com.apple.managedconfiguration.profiled.configurationprofiles[2]: DEPInstallation
com.apple.managedconfiguration.profiled.configurationprofiles[3]: Inspection
com.apple.managedconfiguration.profiled.configurationprofiles[4]: PopInstallationQueue
com.apple.managedconfiguration.profiled.configurationprofiles[5]: Removal
com.apple.managedconfiguration.profiled.configurationprofiles[6]: SilentNonUIInstallation
com.apple.managedconfiguration.profiled.configurationprofiles[7]: UIInstallation
com.apple.managedconfiguration.profiled.get[0]: MachineInfo
com.apple.managedconfiguration.profiled.get[1]: ManagedApplications
com.apple.managedconfiguration.profiled.get[2]: NetworkExtension
com.apple.managedconfiguration.profiled.get[3]: WiFiNetworks
com.apple.managedconfiguration.profiled.migration: true
com.apple.managedconfiguration.profiled.provisioningprofiles[0]: Installation
com.apple.managedconfiguration.profiled.provisioningprofiles[1]: PopInstallationQueue
com.apple.managedconfiguration.profiled.provisioningprofiles[2]: Removal
com.apple.managedconfiguration.profiled.provisioningprofiles[3]: Validation
com.apple.managedconfiguration.profiled.set[0]: ActivationLock
com.apple.managedconfiguration.profiled.set[1]: ActivationRecord
com.apple.managedconfiguration.profiled.set[2]: Certificates
com.apple.managedconfiguration.profiled.set[3]: ClientRestrictions
com.apple.managedconfiguration.profiled.set[4]: CloudConfiguration
com.apple.managedconfiguration.profiled.set[5]: Passcode
com.apple.managedconfiguration.profiled.set[6]: Safari
com.apple.managedconfiguration.profiled.set[7]: UserSettings
com.apple.managedconfiguration.profiled.shutdown: true
com.apple.managedconfiguration.profiled.usercompliance: true
com.apple.managedconfiguration.teslad-access: true
com.apple.mkb.usersession.info: true
com.apple.mkb.usersession.keybagopaquedata: true
com.apple.mkb.usersession.keybagopquedata: true
com.apple.mobileactivationd.device-identifiers: true
com.apple.mobileactivationd.eda: true
com.apple.mobileactivationd.spi: true
com.apple.nano.nanoregistry.generalaccess: true
com.apple.networkd.set_account_identifier: true
com.apple.osanalytics.otatasking-service-access: true
com.apple.payment.all-access: true
com.apple.private.CoreAuthentication.SPI: true
com.apple.private.InstallCoordination.allowed: true
com.apple.private.LocalAuthentication.DTO: true
com.apple.private.LocalAuthentication.DTO.FallbackToNoAuth: true
com.apple.private.MobileContainerManager.otherIdLookup: true
com.apple.private.MobileGestalt.AllowedProtectedKeys[0]: SerialNumber
com.apple.private.MobileGestalt.AllowedProtectedKeys[1]: UniqueChipID
com.apple.private.MobileGestalt.AllowedProtectedKeys[2]: InverseDeviceID
com.apple.private.WebClips.read-write: true
com.apple.private.accounts.allaccounts: true
com.apple.private.amfi.remove-trust: true
com.apple.private.amfi.schedule-profile: true
com.apple.private.amfi.set-managed: true
com.apple.private.amfi.set-supervised: true
com.apple.private.amfi.set-trust: true
com.apple.private.applecredentialmanager.allow: true
com.apple.private.bmk.allow: true
com.apple.private.carkit: true
com.apple.private.coreservices.canmaplsdatabase: true
com.apple.private.followup: true
com.apple.private.ids.registration[0]: com.apple.ess
com.apple.private.ids.testtool: true
com.apple.private.keychain.sysbound: true
com.apple.private.lockdown.finegrained-get[0]: com.apple.mobile.chaperone/DeviceIsChaperoned
com.apple.private.lockdown.finegrained-get[1]: com.apple.mobile.chaperone/PermissionSlip
com.apple.private.lockdown.finegrained-get[2]: com.apple.mobile.chaperone/AllowSleepOver
com.apple.private.lockdown.finegrained-get[3]: NULL/ActivationPrivateKey
com.apple.private.lockdown.finegrained-get[4]: NULL/BrickState
com.apple.private.lockdown.finegrained-get[5]: NULL/DevicePrivateKey
com.apple.private.lockdown.finegrained-get[6]: NULL/DeviceCertificate
com.apple.private.lockdown.finegrained-get[7]: NULL/DeviceName
com.apple.private.lockdown.finegrained-set[0]: com.apple.mobile.backup/RequiresEncryption
com.apple.private.lockdown.finegrained-set[1]: com.apple.mobile.restriction/ProhibitAppInstall
com.apple.private.lockdown.finegrained-set[2]: com.apple.mobile.restriction/ProhibitAppDelete
com.apple.private.lockdown.reset-pairing: true
com.apple.private.logging.admin: true
com.apple.private.managed-settings.blame: true
com.apple.private.mis.online_auth_agent: true
com.apple.private.mis.trust.set: true
com.apple.private.network.socket-delegate: true
com.apple.private.networkextension.configuration: true
com.apple.private.octagon: true
com.apple.private.remotemanagement.provider: true
com.apple.private.security.storage-exempt.heritable: true
com.apple.private.security.storage.Calendar: true
com.apple.private.security.storage.Mail: true
com.apple.private.security.storage.ManagedConfiguration: true
com.apple.private.system-keychain: true
com.apple.private.tcc.allow[0]: kTCCServicePhotos
com.apple.private.tcc.allow[1]: kTCCServiceFaceID
com.apple.private.tcc.manager.service-override.modify[0]: kTCCServiceUserTracking
com.apple.rootless.storage.ExtensibleSSO: true
com.apple.rootless.storage.dmd: true
com.apple.runningboard.process-state: true
com.apple.security.application-groups[0]: com.apple.MailPersonaStorage
com.apple.security.attestation.access: true
com.apple.security.exception.files.absolute-path.read-only[0]: /System/Library/ManagedConfiguration/TrustEvaluators/MCProfileTrustA.bundle
com.apple.security.exception.files.absolute-path.read-only[1]: /System/Library/ManagedConfiguration/TrustEvaluators/MCProfileTrustB.bundle
com.apple.security.iokit-user-client-class[0]: AppleCredentialManagerUserClient
com.apple.security.iokit-user-client-class[1]: IOSurfaceRootUserClient
com.apple.security.system-groups[0]: systemgroup.com.apple.configurationprofiles
com.apple.security.system-groups[1]: systemgroup.com.apple.media.books.managed
com.apple.security.system-groups[2]: systemgroup.com.apple.powerlog
com.apple.security.system-groups[3]: systemgroup.com.apple.WiFiAssist
com.apple.sharing.Client: true
com.apple.springboard.CFUserNotification: true
com.apple.springboard.addWebClipToHomeScreen: true
com.apple.springboard.opensensitiveurl: true
com.apple.springboard.openurlswhenlocked: true
com.apple.springboard.removeWebClipFromHomeScreen: true
com.apple.studentd.configuration: true
com.apple.timed: true
com.apple.tzlink.allow: true
com.apple.usermanagerd.persona.background: true
com.apple.usermanagerd.persona.create: true
com.apple.usermanagerd.persona.delete: true
com.apple.usermanagerd.persona.fetch: true
com.apple.wifi.manager-access: true
keychain-access-groups[0]: apple
keychain-access-groups[1]: com.apple.certificates
keychain-access-groups[2]: com.apple.identities
keychain-access-groups[3]: com.apple.mobilemail.smime
keychain-access-groups[4]: lockdown-identities
keychain-access-groups[5]: com.apple.managed.vpn.shared
keychain-access-groups[6]: com.apple.managed.watch.certificates
keychain-cloud-circle: true
modify-anchor-certificates: true

Entitlement data harvested automatically by jtool2 -v --ent (using OLDENT=1 since DER support is buggy).
This is a work in progress. Suggestions for improvement are welcome at the NewOSXBook.com forum