Skip to content

Fix: Add required EmailAccountType key to com.apple.mail.managed rules#654

Open
nancysangani wants to merge 1 commit intousnistgov:ios_18from
nancysangani:fix/mail-managed-email-account-type
Open

Fix: Add required EmailAccountType key to com.apple.mail.managed rules#654
nancysangani wants to merge 1 commit intousnistgov:ios_18from
nancysangani:fix/mail-managed-email-account-type

Conversation

@nancysangani
Copy link
Copy Markdown

@nancysangani nancysangani commented Apr 4, 2026

Resolves #481
All 11 rules using the com.apple.mail.managed payload domain were missing the EmailAccountType key, which Apple's device management spec marks as required. Without it, these profiles silently fail to deploy when pushed from an MDM server.

Added EmailAccountType: EmailTypeIMAP to all affected rules. IMAP is used as the account type since POP3 does not support S/MIME signing, encryption, or folder-level operations enforced by several of these rules.

Note: cspell CI failures will be resolved once PR #656 is merged into main, as it adds the required project-specific identifiers to project-words.txt.

Copilot AI review requested due to automatic review settings April 4, 2026 18:14
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the iOS rule YAMLs that generate com.apple.mail.managed configuration profiles to include Apple’s required EmailAccountType key, preventing silent deployment failures when profiles are pushed via MDM (per issue #481).

Changes:

  • Added EmailAccountType: EmailTypeIMAP under mobileconfig_info.com.apple.mail.managed for all affected rules.
  • Normalized minor YAML formatting in the touched com.apple.mail.managed blocks (e.g., removing trailing whitespace).
  • Converted one fix: field to the block (|) style consistent with other rules in this area.

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated no comments.

Show a summary per file
File Description
rules/os/os_mail_move_messages_disable.yaml Adds required EmailAccountType to the com.apple.mail.managed payload.
rules/os/os_mail_maildrop_disable.yaml Adds required EmailAccountType to the com.apple.mail.managed payload.
rules/os/os_exchange_SMIME_signing_overwrite_disable.yaml Adds required EmailAccountType and normalizes the com.apple.mail.managed block formatting.
rules/os/os_exchange_SMIME_signing_enabled.yaml Adds required EmailAccountType and normalizes the com.apple.mail.managed block formatting.
rules/os/os_exchange_SMIME_signing_certificate_overwrite_disable.yaml Adds required EmailAccountType and normalizes the com.apple.mail.managed block formatting.
rules/os/os_exchange_SMIME_encryption_per_message_disable.yaml Adds required EmailAccountType; also adjusts fix: to a block style.
rules/os/os_exchange_SMIME_encryption_default_certificate_overwrite_enable.yaml Adds required EmailAccountType to the com.apple.mail.managed payload.
rules/os/os_exchange_SMIME_encryption_certificate_overwrite_disable.yaml Adds required EmailAccountType and normalizes the com.apple.mail.managed block formatting.
rules/os/os_exchange_prevent_move_enforce.yaml Adds required EmailAccountType and normalizes the com.apple.mail.managed block formatting.
rules/os/os_exchange_peraccountVPN.yaml Adds required EmailAccountType and normalizes the com.apple.mail.managed block formatting.
rules/os/os_exchange_mail_recents_sync_disable.yaml Adds required EmailAccountType to the com.apple.mail.managed payload.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@robertgendler
Copy link
Copy Markdown
Collaborator

Tagging @headmin for review as most of these fall into the BSI Indigo benchmark.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants