diff --git a/sample_launchagent/README.md b/sample_launchagent/README.md new file mode 100644 index 0000000..9ff9a6f --- /dev/null +++ b/sample_launchagent/README.md @@ -0,0 +1,15 @@ +# Privileges.app LaunchAgent + +This sample LaunchAgent for **Privileges.app** can be used to automatically remove admin rights on login. To do this, it uses the `PrivilegesCLI` command line tool to run the following command: + +`/Applications/Privileges.app/Contents/Resources/PrivilegesCLI --remove` + +Running this command removes the logged-in user from the admin group. + + + + + +Support +=================================== +This project is 'as-is' with no support, no changes being made. You are welcome to make changes to improve it but we are not available for questions or support of any kind. diff --git a/sample_launchagent/corp.sap.privileges.plist b/sample_launchagent/corp.sap.privileges.plist new file mode 100644 index 0000000..e27c511 --- /dev/null +++ b/sample_launchagent/corp.sap.privileges.plist @@ -0,0 +1,17 @@ + + + + + Label + corp.sap.privileges + ProgramArguments + + /Applications/Privileges.app/Contents/Resources/PrivilegesCLI + --remove + + RunAtLoad + + LimitLoadToSessionType + Aqua + + \ No newline at end of file