4 ms·
PROTIP: Select your LaunchAgents and LaunchDaemons folders in /Library and ~/Library, select Folder Actions Setup in the Services menu, and enable folder action
by _qulr 6y ago
PROTIP: Select your LaunchAgents and LaunchDaemons folders in /Library and ~/Library, select Folder Actions Setup in the Services menu, and enable folder actions. You can use "add - new item alert.scpt" to be notified whenever a new item is added to those folders.
For even more protection, I flat out locked the folders ~/Library/LaunchAgents and ~/Library/LaunchDaemons in Finder, though this could interfere with some software you use.
- pingiun 6y agoThanks this is a very useful tip, the folder actions in general seem pretty useful
- inspector-g 6y agoThere’s also the fantastic app BlockBlock to help with this. Notifies you of changes to those folders and allows you to accept/deny whatever an app is trying to change.
- vagrantJin 6y agoThis is super useful. Thanks for sharing. I wish there was something out there where I could always see/check what folders are changed and what program is making external http calls to dodgy IPs. Then block the good jesus out of them.
- mkskm 6y agoThe same devs also make LuLu, an application firewall similar to Little Snitch: https://github.com/objective-see/LuLu https://github.com/objective-see/LuLu
- mkskm 6y agoAnother option is Lingon X. It provides a GUI for launchd and includes a notification setting under Preferences > Notifications for items being added/removed. https://www.peterborgapps.com/lingon/ https://www.peterborgapps.com/lingon/ https://www.peterborgapps.com/lingon/#preferencesnotifications https://www.peterborgapps.com/lingon/#preferencesnotificatio...
- carlosrg 6y agoThat's great advice, never occurred to me despite knowing about folder actions. Thanks!