Casper’s hidden documentation

I’m interested in discovering when tools have hidden documentation, so I was curious when I learned recently that the Casper agent has explicitly hidden documentation which requires root privileges to access. For more information, see below the jump.

To access this documentation, go to a Mac which has Casper’s agent installed and run the following command with root privileges:

jamf help -hidden

 

	Usage: jamf verb [options]
	verb is one of the following:
	canRunOnThisOSXVersion Prints YES if this version is compatible with this OSX version.
	encryptDisk Activates disk encryption on this computer
	launchAgent Sends events on a per user basis to the jamf daemon.
	launchDaemon Performs actions in an ongoing daemon process.
	mdm Prepares the computer for use with MDM commands.
	reenroll Shorcut for enroll -reenroll -archiveDeviceCertificate
	removeMdmProfile Removes the JAMF MDM Profile
	scheduledTask Create a JAMF scheduled task
	trustJSS Adds a trust for the JAMF CA into the System keychain.
	Global Flags:
	-displayJSSTraffic Displays the total network traffic between the jamf binary and the JSS
	-randomDelaySeconds Delays a random amount of time before starting
	Specify the maximum number of seconds as the next parameter
	-verbose Shows verbose events
	-showPID Prints the PID of the process
	jamf help <verb> will provide details on that verb

view raw

gistfile1.txt

hosted with ❤ by GitHub

This will display information about commands which aren’t mentioned when you run the standard command for help:

jamf help

	Usage: jamf verb [options]
	verb is one of the following:
	about Displays information about the jamf binary
	bind Binds this computer to a directory service
	bless Blesses a System or a NetBoot Server
	checkJSSConnection Checks the availability of the JSS
	createAccount Creates a new local account on the system
	createConf Creates a configuration file that the jamf binary uses to find the JSS
	createHooks Creates and configures login/logout hooks
	createSetupDone Ensures the Setup Assistant does not launch on the next boot
	createStartupItem Creates a startup script to contact the JSS
	deleteAccount Deletes a local account from NetInfo or the local dscl database
	deletePrinter Deletes a printer from the system
	deleteSetupDone Causes the Setup Assistant to launch on the next boot
	displayMessage Displays a message to the current user
	enablePermissions Enables permissions on a volume
	enroll Enrolls this computer with the JSS
	fixByHostFiles Fixes the ByHost files
	fixDocks Repairs docks that have question marks after certain OS Updates
	fixPermissions Fixes the permissions on a given target
	flushCaches Flush cache files for the system and/or users
	flushPolicyHistory Flush the policy history on the JSS
	getARDFields Displays the ARD Fields on a volume
	getComputerName Displays the computer name on a volume
	heal Run self healing for all packages on this computer
	help Displays this message or details on a specific verb
	install Installs a package
	installAllCached Installs all packages that are cached
	listUsers Lists all the users on the computer
	log Log the IP address, action, and username to the JSS
	manage Enforces the entire management framework from the JSS
	mapPrinter Maps a printer
	mcx Apply Managed Preferences
	modifyDock Installs or removes items in all users docks
	mount Mounts a file share
	notify Checks the JSS for new notification messages
	policy Checks for policies on the JSS
	reboot Reboots the computer
	recon Runs Recon to update the inventory in the JSS
	removeFramework Removes the JAMF Binary and associated files from the computer.
	removeSWUSettings Remove settings that point SWU at internal servers
	resetPassword Resets a local user's password
	runScript Runs a script
	runSoftwareUpdate Run Software Update
	setARDFields Sets the ARD Fields
	setComputerName Sets the computer name
	setHomePage Sets the default home page for users
	setOFP Sets the Open Firmware mode and password
	startSSH Starts the ssh server
	uninstall Uninstalls a package
	unmountServer Unmounts a file server
	updatePrebindings Updates the prebindings on a volume
	version Prints the version of this application
	Global Flags:
	-displayJSSTraffic Displays the total network traffic between the jamf binary and the JSS
	-randomDelaySeconds Delays a random amount of time before starting
	Specify the maximum number of seconds as the next parameter
	-verbose Shows verbose events
	-showPID Prints the PID of the process
	jamf help <verb> will provide details on that verb

view raw

gistfile1.txt

hosted with ❤ by GitHub

You can access more documentation about these hidden commands by running the following with root privileges, referencing the command you want more information on:

jamf help command_goes_here