From 57d00f310d87fea7fe123fd4b920345e9847c1c6 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Fri, 15 Mar 2024 13:04:00 -0400
Subject: [PATCH] Add script to workstations and canary (#17634)

- Add script to remove the old Nudge launch agent (deployed by
SimpleMDM)
---
 it-and-security/lib/macos-remove-old-nudge.sh | 3 +++
 it-and-security/teams/workstations-canary.yml | 1 +
 it-and-security/teams/workstations.yml        | 1 +
 3 files changed, 5 insertions(+)
 create mode 100644 it-and-security/lib/macos-remove-old-nudge.sh

diff --git a/it-and-security/lib/macos-remove-old-nudge.sh b/it-and-security/lib/macos-remove-old-nudge.sh
new file mode 100644
index 000000000000..36f1e14ca984
--- /dev/null
+++ b/it-and-security/lib/macos-remove-old-nudge.sh
@@ -0,0 +1,3 @@
+/bin/launchctl unload -w /Library/LaunchAgents/com.github.macadmins.Nudge.plist
+
+# Remove the old Nudge launch agent that was deployed by SimpleMDM. More info here: https://github.com/fleetdm/confidential/issues/5274
\ No newline at end of file
diff --git a/it-and-security/teams/workstations-canary.yml b/it-and-security/teams/workstations-canary.yml
index daf09d4f9a60..d859a4acf0b5 100644
--- a/it-and-security/teams/workstations-canary.yml
+++ b/it-and-security/teams/workstations-canary.yml
@@ -50,6 +50,7 @@ controls:
   scripts:
     - path: ../lib/collect-fleetd-logs.sh
     - path: ../lib/macos-see-automatic-enrollment-profile.sh
+    - path: ../lib/macos-remove-old-nudge.sh
     - path: ../lib/windows-remove-fleetd.ps1
     - path: ../lib/windows-turn-off-mdm.ps1
 policies:
diff --git a/it-and-security/teams/workstations.yml b/it-and-security/teams/workstations.yml
index 8b1e774ea46c..49a6a476a063 100644
--- a/it-and-security/teams/workstations.yml
+++ b/it-and-security/teams/workstations.yml
@@ -50,6 +50,7 @@ controls:
   scripts:
     - path: ../lib/collect-fleetd-logs.sh
     - path: ../lib/macos-see-automatic-enrollment-profile.sh
+    - path: ../lib/macos-remove-old-nudge.sh
     - path: ../lib/windows-remove-fleetd.ps1
     - path: ../lib/windows-turn-off-mdm.ps1
 policies: