Hello Team,
We have a System Extension with Provider Type "DNS Proxy". We have embedded the System Extension in GUI target which registered as LaunchAgent.
We found NEDNSProxyManager saves the proxy configuration in the caller's preferences. Due to that we see a prompt for Network Extension when switching users. On allowing that we see multiple DNS filter in the System Settings->Network->Filters even though one DNS Filter can enabled which is annoying.
Question 1: Is this expected for non MDM users? Are the users expected to authorise Network extension when switching users.
Question 2: Is there a way to prevent the multiple DNS filter for both MDM and non MDM users?
To prevent multiple filters, we identified a solution to embed the System Extension in our LaunchDaemon target. So the proxy configuration will be save in the root preference. But with this approach we ended up with an error [OSSystemExtensionErrorDomain error 13] during OSSystemExtensionRequest.deactivationRequest.
Question 3: Is there a way to avoid OSSystemExtensionErrorDomain 13 when deactivating System extension from our LaunchDaemon process?
Question 4: What is the best practice in terms of embedding and deploying DNS Proxy System Extension for managed and non managed environment.
Also if user expected to see multiple DNS filter. I suggest to show the filter that saved for that user's preference.
Thank you.