I am trying to create a limited user account without access to several builtin apps, such as Terminal.
Changing these apps permissions either through
chmod failed - I assume due to them being in the write-protected
/System volume. I've also tried to copy them over to
/Applications and change permissions on the copy instead, but that only leads to them appearing twice in
Is there an officially sanctioned way for access control left that doesn't involve me disabling SIP and remounting /System as read-write?
Screentime is not an option for me, because I've found it to be highly unreliable on iOS.