<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadIdentifier</key>
    <string>org.rebreak.protection.contentfilter.sideload</string>
    <key>PayloadUUID</key>
    <string>7DE45DC6-A77B-4707-8A4A-D22B8073FE51</string>
    <key>PayloadDisplayName</key>
    <string>ReBreak Schutz (Sideload-Lock)</string>
    <key>PayloadDescription</key>
    <string>NEFilter ContentFilter + App non-removable + Anti-Tampering. Nur via AirDrop oder Apple Configurator installierbar (NICHT Safari).</string>
    <key>PayloadOrganization</key>
    <string>ReBreak</string>
    <key>PayloadRemovalDisallowed</key>
    <true/>
    <key>ConsentText</key>
    <dict>
        <key>default</key>
        <string>ReBreak Schutz Sideload-Lock

WAS DIESES PROFIL MACHT:
  - ReBreak NEFilter laeuft dauerhaft (Gambling-Domains blockiert)
  - ReBreak-App nicht ueber Long-Press loeschbar
  - Factory-Reset ueber Settings blockiert
  - Andere Konfigurationsprofile koennen nicht installiert werden
  - Dieses Profil kann NICHT ueber iPhone-Einstellungen entfernt werden

INSTALLATION:
  Dieses Profil ist NICHT via Safari installierbar (Apple-Policy fuer non-removable Sideload).
  Funktionierende Pfade:
  1. AirDrop von einem trusted Mac an dieses iPhone
  2. Apple Configurator 2 + USB-Kabel

ENTFERNUNG (im Notfall):
  Nicht ueber iPhone-Einstellungen moeglich. Funktionierende Pfade:
  1. Mac mit Apple Configurator 2:
       cfgutil --ecid [ECID] remove-profile "org.rebreak.protection.contentfilter.sideload"
     ECID via Konfigurator-UI ablesbar oder:  ioreg -p IOUSB -l | grep "ECID"
  2. iPhone-Recovery-Mode + Factory-Reset (alle Daten weg)
  3. Apple Configurator 2: Erase + Restore

TRUSTEE-ENTFERNUNG:
  Bei Bypass-Wunsch waehrend 7-Tage-Cooldown: dein Trustee hat die cfgutil-Anleitung.
  Im Notfall (Geraeteverlust): Factory-Reset macht alles weg.

Du installierst hiermit eine Selbstbindung. Das ist gewollt.</string>
    </dict>
    <key>PayloadContent</key>
    <array>
        <!-- 1) WEBCONTENT-FILTER -->
        <dict>
            <key>PayloadType</key>
            <string>com.apple.webcontent-filter</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>org.rebreak.protection.contentfilter.sideload.payload</string>
            <key>PayloadUUID</key>
            <string>287C4668-ECBA-4D24-AEB8-06B3E5BFD801</string>
            <key>PayloadDisplayName</key>
            <string>ReBreak Content Filter</string>
            <key>UserDefinedName</key>
            <string>ReBreak Schutz</string>
            <key>FilterType</key>
            <string>Plugin</string>
            <key>AutoFilterEnabled</key>
            <true/>
            <key>PluginBundleID</key>
            <string>org.rebreak.app</string>
            <key>FilterDataProviderBundleIdentifier</key>
            <string>org.rebreak.app.ContentFilterExtension</string>
            <key>FilterDataProviderDesignatedRequirement</key>
            <string>anchor apple generic and identifier "org.rebreak.app.ContentFilterExtension" and certificate leaf[subject.CN] = "Apple Distribution: CHAHINE BRINI (84BQ7MTFYK)" and certificate 1[field.1.2.840.113635.100.6.2.1] /* exists */</string>
            <key>FilterGrade</key>
            <string>firewall</string>
            <key>FilterBrowsers</key>
            <true/>
            <key>FilterSockets</key>
            <false/>
            <key>FilterPackets</key>
            <false/>
            <key>Organization</key>
            <string>ReBreak</string>
        </dict>

        <!-- 2) RESTRICTIONS (supervised-only) -->
        <dict>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>org.rebreak.protection.contentfilter.sideload.restrictions</string>
            <key>PayloadUUID</key>
            <string>B977A3B8-1643-48DF-8518-C0910BAC148D</string>
            <key>PayloadDisplayName</key>
            <string>ReBreak Restrictions</string>
            <key>PayloadDescription</key>
            <string>App nicht loeschbar + Anti-Tampering</string>
            <key>allowAppRemoval</key>
            <false/>
            <key>allowEraseContentAndSettings</key>
            <false/>
            <key>allowUIConfigurationProfileInstallation</key>
            <false/>
        </dict>
    </array>
</dict>
</plist>
