I want to stop a user in MacOS from unloading a plist using launchctl?
Launchctl does not seem to always require a su / sudo. I have a non-admin user that is managing to switch off app restrictions and adjust various processes that are running.
I don't want to block Terminal, which is my current solution.
~/Library
and other similar folders so that only administrators andwheel
orroot
can edit/view/etc.