Finish up macOS policies

Signed-off-by: Tommy <contact@tommytran.io>

Linux/recommended.json

@@ -1,5 +1,4 @@
 {
-    "DefaultJavaScriptJitSetting": 2,
     "SmartScreenEnabled": false,
     "TyposquattingCheckerEnabled": false
 }

README.md

@@ -1,3 +1,19 @@
 # Microsoft Edge Policies
 
-These policies are written for Linux. The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json`
+## Linux
+
+The mandatory prolicies should be put in `/etc/opt/edge/policies/managed/managed.json`, and the recommended policies should be put in `/etc/opt/edge/policies/recommended/recommended.json`
+
+## macOS
+
+The mandatory prolicies should be put in `/Library/Managed Preferences/com.microsoft.Edge.plist`, and the recommended policies should be put in `/Library/Preferences/com.microsoft.Edge.plist`
+
+macOS is problematic, as it will wipe `/Library/Managed Preferences` every boot if you are not using an MDM. I work around this by putting the policies in `/Library/Tomster Corporation`, and use a cronjob as root to copy it every boot:
+
+```
+@reboot sleep 5 && cp -r '/Library/Tomster Corporation/' '/Library/Managed Preferences'
+```
+
+I have also noticed that Microsoft Edge does not seem to reload Managed Preferences probably until the computer reboots. I am not sure if this is a macOS behavior or if it is caused because my machine is not enrolled in an MDM.
+
+Alternatively, you can try to convert the .plist files to .mobileconfig files and install them as profiles.

macOS/Managed Preferences/com.microsoft.Edge.plist

@@ -0,0 +1,256 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>EnableMediaRouter</key>
+    <false />
+    <key>CookiesBlockedForUrls</key>
+    <array>
+      <string>ntp.msn.com</string>
+    </array>
+    <key>DefaultGeolocationSetting</key>
+    <integer>2</integer>
+    <key>DefaultInsecureContentSetting</key>
+    <integer>2</integer>
+    <key>DefaultCookiesSetting</key>
+    <integer>4</integer>
+    <key>DefaultThirdPartyStoragePartitioningSetting</key>
+    <integer>1</integer>
+    <key>DefaultFileSystemReadGuardSetting</key>
+    <integer>2</integer>
+    <key>DefaultFileSystemWriteGuardSetting</key>
+    <integer>2</integer>
+    <key>DefaultWebBluetoothGuardSetting</key>
+    <integer>2</integer>
+    <key>DefaultWebHidGuardSetting</key>
+    <integer>2</integer>
+    <key>ShowPDFDefaultRecommendationsEnabled</key>
+    <false />
+    <key>SpotlightExperiencesAndRecommendationsEnabled</key>
+    <false />
+    <key>FeatureFlagOverridesControl</key>
+    <integer>1</integer>
+    <key>ExtensionInstallBlocklist</key>
+    <array>
+      <string>*</string>
+    </array>
+    <key>GamerModeEnabled</key>
+    <false />
+    <key>WindowsHelloForHTTPAuthEnabled</key>
+    <false />
+    <key>ImmersiveReaderGrammarToolsEnabled</key>
+    <false />
+    <key>ImmersiveReaderPictureDictionaryEnabled</key>
+    <false />
+    <key>EdgeManagementEnabled</key>
+    <false />
+    <key>MAMEnabled</key>
+    <false />
+    <key>NativeMessagingBlocklist</key>
+    <array>
+      <string>*</string>
+    </array>
+    <key>PasswordManagerEnabled</key>
+    <false />
+    <key>PinBrowserEssentialsToolbarButton</key>
+    <false />
+    <key>InsecurePrivateNetworkRequestsAllowed</key>
+    <false />
+    <key>NewTabPageAllowedBackgroundTypes</key>
+    <integer>3</integer>
+    <key>NewTabPageAppLauncherEnabled</key>
+    <false />
+    <key>NewTabPageBingChatEnabled</key>
+    <false />
+    <key>NewTabPageContentEnabled</key>
+    <false />
+    <key>NewTabPageHideDefaultTopSites</key>
+    <false />
+    <key>NewTabPageQuickLinksEnabled</key>
+    <false />
+    <key>NewTabPageSearchBox</key>
+    <string>redirect</string>
+    <key>EdgeWorkspacesEnabled</key>
+    <false />
+    <key>AccessibilityImageLabelsEnabled</key>
+    <false />
+    <key>AdsSettingForIntrusiveAdsSites</key>
+    <integer>2</integer>
+    <key>AlternateErrorPagesEnabled</key>
+    <false />
+    <key>AudioSandboxEnabled</key>
+    <true />
+    <key>AutoLaunchProtocolsComponentEnabled</key>
+    <false />
+    <key>AutofillAddressEnabled</key>
+    <false />
+    <key>AutofillCreditCardEnabled</key>
+    <false />
+    <key>AutofillMembershipsEnabled</key>
+    <false />
+    <key>AutomaticHttpsDefault</key>
+    <integer>2</integer>
+    <key>BlockThirdPartyCookies</key>
+    <true />
+    <key>BrowserCodeIntegritySetting</key>
+    <integer>2</integer>
+    <key>BrowserNetworkTimeQueriesEnabled</key>
+    <false />
+    <key>BrowserSignin</key>
+    <integer>0</integer>
+    <key>ComposeInlineEnabled</key>
+    <false />
+    <key>ConfigureOnlineTextToSpeech</key>
+    <false />
+    <key>ConfigureShare</key>
+    <integer>1</integer>
+    <key>DefaultBrowserSettingsCampaignEnabled</key>
+    <false />
+    <key>DefaultClipboardSetting</key>
+    <integer>2</integer>
+    <key>DefaultSensorsSetting</key>
+    <integer>2</integer>
+    <key>DefaultSerialGuardSetting</key>
+    <integer>2</integer>
+    <key>ConfigureDoNotTrack</key>
+    <true />
+    <key>DefaultShareAdditionalOSRegionSetting</key>
+    <integer>2</integer>
+    <key>DiagnosticData</key>
+    <integer>0</integer>
+    <key>Edge3PSerpTelemetryEnabled</key>
+    <false />
+    <key>EdgeCollectionsEnabled</key>
+    <false />
+    <key>EdgeEDropEnabled</key>
+    <false />
+    <key>EdgeEnhanceImagesEnabled</key>
+    <false />
+    <key>EdgeFollowEnabled</key>
+    <false />
+    <key>EdgeShoppingAssistantEnabled</key>
+    <false />
+    <key>EdgeWalletCheckoutEnabled</key>
+    <false />
+    <key>EdgeWalletEtreeEnabled</key>
+    <false />
+    <key>EditFavoritesEnabled</key>
+    <false />
+    <key>EnableOnlineRevocationChecks</key>
+    <true />
+    <key>EncryptedClientHelloEnabled</key>
+    <true />
+    <key>EnhanceSecurityMode</key>
+    <integer>2</integer>
+    <key>FamilySafetySettingsEnabled</key>
+    <false />
+    <key>FavoritesBarEnabled</key>
+    <false />
+    <key>ImportAutofillFormData</key>
+    <false />
+    <key>ImportBrowserSettings</key>
+    <false />
+    <key>ImportCookies</key>
+    <false />
+    <key>ImportExtensions</key>
+    <false />
+    <key>ImportFavorites</key>
+    <false />
+    <key>ImportHistory</key>
+    <false />
+    <key>ImportHomepage</key>
+    <false />
+    <key>ImportOnEachLaunch</key>
+    <false />
+    <key>ImportOpenTabs</key>
+    <false />
+    <key>ImportPaymentInfo</key>
+    <false />
+    <key>ImportSavedPasswords</key>
+    <false />
+    <key>ImportSearchEngine</key>
+    <false />
+    <key>ImportShortcuts</key>
+    <false />
+    <key>ImportStartupPageSettings</key>
+    <false />
+    <key>HideFirstRunExperience</key>
+    <true />
+    <key>HubsSidebarEnabled</key>
+    <false />
+    <key>InAppSupportEnabled</key>
+    <false />
+    <key>MathSolverEnabled</key>
+    <false />
+    <key>MicrosoftEdgeInsiderPromotionEnabled</key>
+    <false />
+    <key>MicrosoftEditorProofingEnabled</key>
+    <false />
+    <key>NetworkPredictionOptions</key>
+    <integer>2</integer>
+    <key>NewPDFReaderEnabled</key>
+    <false />
+    <key>PDFSecureMode</key>
+    <true />
+    <key>PromotionalTabsEnabled</key>
+    <false />
+    <key>PaymentMethodQueryEnabled</key>
+    <false />
+    <key>PersonalizationReportingEnabled</key>
+    <false />
+    <key>QuickSearchShowMiniMenu</key>
+    <false />
+    <key>QuickViewOfficeFilesEnabled</key>
+    <false />
+    <key>ReadAloudEnabled</key>
+    <false />
+    <key>RemoteDebuggingAllowed</key>
+    <false />
+    <key>RelatedMatchesCloudServiceEnabled</key>
+    <false />
+    <key>RendererAppContainerEnabled</key>
+    <true />
+    <key>RendererCodeIntegrityEnabled</key>
+    <true />
+    <key>ResolveNavigationErrorsUseWebService</key>
+    <false />
+    <key>SSLErrorOverrideAllowed</key>
+    <false />
+    <key>SearchSuggestEnabled</key>
+    <false />
+    <key>ShowAcrobatSubscriptionButton</key>
+    <false />
+    <key>ShowMicrosoftRewards</key>
+    <false />
+    <key>ShowRecommendationsEnabled</key>
+    <false />
+    <key>SSLVersionMin</key>
+    <string>tls1.2</string>
+    <key>SitePerProcess</key>
+    <false />
+    <key>SiteSafetyServicesEnabled</key>
+    <false />
+    <key>SpeechRecognitionEnabled</key>
+    <false />
+    <key>SyncDisabled</key>
+    <true />
+    <key>TabServicesEnabled</key>
+    <false />
+    <key>TextPredictionEnabled</key>
+    <false />
+    <key>TrackingPrevention</key>
+    <integer>3</integer>
+    <key>TranslateEnabled</key>
+    <false />
+    <key>UploadFromPhoneEnabled</key>
+    <false />
+    <key>WebCaptureEnabled</key>
+    <false />
+    <key>WebRtcLocalhostIpHandling</key>
+    <string>DisableNonProxiedUdp</string>
+    <key>VisualSearchEnabled</key>
+    <false />
+    <key>WalletDonationEnabled</key>
+    <false />
+  </dict>
+</plist>

macOS/Preferences/com.microsoft.Edge.plist

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>SmartScreenEnabled</key>
+    <false />
+    <key>TyposquattingCheckerEnabled</key>
+    <false />
+  </dict>
+</plist>