Blocking OS Updates in Hosts?

[Mr_Brightside_@]

I have an MDM profile which helps delay updates, but I'm trying to rid myself of my currently recommended ones.

I added

127.0.0.1 appldnld.apple.com
127.0.0.1 mesu.apple.com

to hosts and did

sudo killall -HUP mDNSResponder

and
sudo dscacheutil -flushcache

and restarted, but those updates are still listed. Any other way to block access to the update server on each device?

 

[barbu]

That all sounds pretty risky. Free MDM? From who?

 

[bogdanw]

Have you tried running in Terminal softwareupdate -l ? Sometimes it's enough to get rid of recommended updates.
Profiles to delay software updates can be created with https://github.com/ProfileCreator/ProfileCreator

 

[Mr_Brightside_@]

That all sounds pretty risky. Free MDM? From who?

Unified Platform for Identity, Access, & Devices

JumpCloud makes it simple to manage Windows, Apple, Linux, and Android devices and to deliver secure access with SSO, MFA, Zero Trust, RADIUS, and more.

jumpcloud.com