Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer)

I'd like to be able to revoke from the command-line. Is this possible?

Specifically, my problem is that I'm creating a password in a shell script and storing it in the keychain using the security add-generic-password ... command. This works fine, but because the security application created the password, it's automatically granted free reading privileges. I want it to prompt every time.

You must log in to answer this question.

Browse other questions tagged .