chrispike
4

Comments

Composer Opening Error - Folder Whitelist MCX

Posted 2/9/12 at 5:48 AM by chrispike

Hello all,

I have applied the Folder Whitelist MCX setting under com.apple.applicationaccess.new to only allow Applications to launch from the following folders:

<array>
<string>/Applications/</string>
<string>/Library/</string>
<string>/System/</string>
<string>/bin/</string>
<string>/usr/sbin/</string>
<string>/Users/_localadmin/</string>
</array>


However when I log in with my _localadmin account and try to run Composer from within the Applications directory I get the following error with the options to 'Always Allow...', 'Allow Once...', and 'OK'.

You don't have permission to use the application "jamf-relauncher".

Clicking on 'Always Allow' or 'Allow Once' and entering the admin password just bring the error back.

This mailing list has been massively helpful since we started using Casper and I thought someone on here might have a quick answer!

Cheers,
Chris



4

Comments

acdesigntech
Posted 2/9/12 at 12:08 PM by acdesigntech

My organization also uses a whitelist/blacklist, but it's only to blacklist one app - FontBook. However, per JAMF support you need to add keys for family controls, whitelist, AND blacklist. I've linked to images hosted on my wordpress blog so you can get the full picture.

You might want to consider allowing apps to launch from the entire /usr directory since you also have libexec, bin, etc under /usr.

http://acdesigntech.wordpress.com/?attachment_id=277
http://acdesigntech.wordpress.com/?attachment_id=276
http://acdesigntech.wordpress.com/?attachment_id=275
http://acdesigntech.wordpress.com/?attachment_id=274
http://acdesigntech.wordpress.com/?attachment_id=273
http://acdesigntech.wordpress.com/?attachment_id=272
http://acdesigntech.wordpress.com/?attachment_id=271

chrispike
Posted 2/10/12 at 3:33 AM by chrispike

Thank you for your reply but I am getting a 'Page not found' error on your links?

acdesigntech
Posted 2/10/12 at 5:44 AM by acdesigntech

Hmmm, i wrote an article last night about it on my blog:
http://acdesigntech.wordpress.com/2012/02/09/using-managed-preferences-mcx-to-blacklist-applications

Try that

chrispike
Posted 2/10/12 at 7:27 AM by chrispike

Thank you, very useful.