[Kernel Authorization] Finder asks for permissions.

I am trying to implement some data loss prevention software.

I use Kernel Authorization to block User to copy files to flash-drive.

But, when I return Deny from my VnodeListener, Finder asks for administrator password, and operation can be done.


How can I completely deny file write to flash-drive?


How can I forbid Finder to ask administrator password?

Accepted Reply

If your creating data loss prevention software, you can’t give users admin credentials. Such credentials will allow the user to bypass your software in many different ways.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Replies

If your creating data loss prevention software, you can’t give users admin credentials. Such credentials will allow the user to bypass your software in many different ways.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"