Mondoo Docs

macOS application layer firewall (ALF) service

macos.alf MQL resource for querying Operating System infrastructure with cnquery and cnspec.

Operating System

macOS application layer firewall (ALF) service

Use MQL in cnspec shell or policy:

macos.alf
Min version: 5.15.0

Relationships

Mini Map
Operating System
2 resources · 1 relationshipsClick to select, expand fields to see properties.

Fields (11)

FieldTypeDescription
allowDownloadSignedEnabledrequired
intWhether the firewall service allows downloaded software to receive incoming connections
allowSignedEnabledrequired
intWhether the firewall service allows built-in software to receive incoming connections for signed software
applicationsrequired
[]dictApplications with exceptions for network blocking
exceptionsrequired
[]dictService exceptions
explicitAuthsrequired
[]stringServices explicitly allowed to perform networking
firewallUnloadrequired
intWhether the firewall is unloaded
globalStaterequired
intWhether the firewall is enabled
loggingEnabledrequired
intWhether alf.log is used
loggingOptionrequired
intLogging flags
stealthEnabledrequired
intWhether the firewall service is in stealth mode
versionrequired
stringALF version