I am trying to create a limited user account without access to several builtin apps, such as Terminal.

Changing these apps permissions either through Finder or chmod failed - I assume due to them being in the write-protected /System volume. I've also tried to copy them over to /Applications and change permissions on the copy instead, but that only leads to them appearing twice in Finder.

Is there an officially sanctioned way for access control left that doesn't involve me disabling SIP and remounting /System as read-write? Screentime is not an option for me, because I've found it to be highly unreliable on iOS.

  • Did you look into Parental Control?
    – nohillside
    Jan 26, 2021 at 15:55
  • @nohillside aren't parental controls gone and folded into Screentime?
    – janfoeh
    Jan 26, 2021 at 15:59
  • Ah right, has been I while since I needed this.
    – nohillside
    Jan 26, 2021 at 16:51
  • Have you worked through the answer here apple.stackexchange.com/questions/313373/… which uses spctl.
    – Gilby
    Jan 26, 2021 at 22:59
  • @Gilby thanks for the link! That's clever, and I had not seen it before. Unfortunately that doesn't work for me, because the restrictions aren't per-user, but global.
    – janfoeh
    Jan 27, 2021 at 11:35


You must log in to answer this question.

Browse other questions tagged .