system_settings_remote_management_disable avoid undocumented mdmclient

[nihil-admirari]

system_settings_remote_management_disable check uses mdmclient, whose man page states:

WARNING: All command arguments are private. The arguments and output can and will change without notice. Do not rely on any output this command may produce.

CIS “2.3.3.6 Ensure Remote Management Is Disabled” simply does a pgrep:

! /usr/bin/pgrep -q ARDAgent && :
echo $?

May be it makes sense to switch away from mdmclient, considering that CIS have already done so?

[robertgendler]

We have found a handful of undocumented things within the project and test them between OS releases. mdmclient commands seem safe enough.