What probably matters to youSection of the release
What
Two new settings for administrators, coworkEDRIntegration and coworkEDRIntegrationVendor, let an organization supply a signed package from an EDR vendor (endpoint detection and response, security software that watches a machine for threats). When the Cowork workspace virtual machine starts, it runs the package's install.sh as root, the all-powerful system account.
The settings:
work on macOS only
are read only from device management, the system organizations use to configure company computers
Why
Organizations that require security monitoring on every machine can now extend it into the Cowork workspace. Because the install script runs as root, only the signed package an administrator provides through device management is used.
