Companies like Google and others love to install daemons/services on


Sonoma alerts me when this happens, but I want to be able to prevent bloat services like this even installing.

Unfortunately, I create things for the web and I need to test it using Chrome. Every time I run chrome, here we go, it fiddles with the LaunchDaemons and adds its crap.

I have thought of creating a zero byte file there, with the name they expect but with permission 000 (chmod 000), but because sometimes you are installing apps that have my admin password, these files will be overwritten.

I know that some files in the system have permissions that not even with a superuser permission one can access.

How can I set these files like that, so they cannot be overwritten?

  • Avoid running installers for third-party software, if possible. If the software comes as an Installer package, you can use an application such as "Suspicious Package" to open it, see what it contains, and install only the parts you want. I wouldn't advise trying to screw up the permissions of your files as a countermeasure.
    – Linc D.
    Commented Nov 28, 2023 at 23:59
  • Can you document your preferred gatekeeper settings? I wonder if you can restrict those and only relax when you’re going to want to be watching as a countermeasure here.
    – bmike
    Commented Nov 29, 2023 at 0:00

1 Answer 1


I would look at BlockBlock, From Objective-See.

It is a daemon that watches the normal persistence places, and silently blocks, or prompts, when something attempts to install itself there.

BlockBlock Alert Dialog Example

I use it myself and it alerts when Chrome tries to do something.


Not the answer you're looking for? Browse other questions tagged .