Inventorying .pkg Files

Verify Privilege Manager allows the inventory of macOS .pkg files. With the ability to upload and extract the contents within the .pkg files, Verify Privilege Manager inventories the applications that are bundled in any given .pkg, however, it is useful to note that not all .pkg files will be bundles.

1. Use Admin | File Upload to start the inventory process.

2. Choose a file to upload and click Upload File.

   

3. After uploading a .pkg file select the Go to File Details button.

   

   In the Resource Explorer, an Administrator can now look at all the details from the inventory, showing the Summary.

   

4. Click Known Data to see the information specified in the macOS bundle. This includes information such as:
   

   • File Digital Signature: includes the Signing certificate CN and Signing team ID
   • File Inventory: includes the Raw file header, contents of the .pkg file, and package summary (title and version)
   • Hash: Hash values of the uploaded .pkg file as defined under inventory hash algorithm(s)

     

Any packages that deviate from the standard configuration and layout might not have their contents inventoried correctly. In that case, unpack the .pkg and upload each contents file individually for inventory purposes.