Little Snitch in one account but not another?

[Dc2006ster]

I have a mac, running Yosemite but could run El Capitan, with two accounts. I want to be able to use Little Snitch on one of those accounts but not the other because the other user does not want to deal with all the LS popups I have tried a number of things, e.g. silent mode, stop the filter etc but always those things apply to both accounts.

My next idea is to partition the boot drive into two. Each will be bootable with its own OS and set of apps but only one account in each partition and only one partition would have LS installed. Inefficient I know but could this work? Is there another way to do this.

THanks

 

[Floris]

You're dealing with a plugin that runs on boot, it's not so much just a standalone app.
You would have to tweak the .plist files under LaunchAgents/ etc to limit it to your account, and then possibly update the services/app listed under restrictions for parental control on that alternative account.

To be honest, turning it off for listening events etc while it's still running doesn't give you any popups. If it's 'new' to the system it will perhaps double check with you etc. But I have it turned off during screencasting recordings on my alt account, and now when I switch to it I really get no notifications, popups, etc. Which is something I don't want to happen obviously while I am recording the screen.

 

[Dc2006ster]

You're dealing with a plugin that runs on boot, it's not so much just a standalone app.
You would have to tweak the .plist files under LaunchAgents/ etc to limit it to your account, and then possibly update the services/app listed under restrictions for parental control on that alternative account.

To be honest, turning it off for listening events etc while it's still running doesn't give you any popups. If it's 'new' to the system it will perhaps double check with you etc. But I have it turned off during screencasting recordings on my alt account, and now when I switch to it I really get no notifications, popups, etc. Which is something I don't want to happen obviously while I am recording the screen.

Thanks. If possible I want the other user to not even have to think about LS and even turning it off might be too much to ask of him. That is why I thought of the two partitions idea.

 

[KALLT]

Have you tried disabling the launch agent to see what happens? If you restrict it to just your user account, it may not ask on your other account and just enforce existing global rules.

 

[Dc2006ster]

Have you tried disabling the launch agent to see what happens? If you restrict it to just your user account, it may not ask on your other account and just enforce existing global rules.

Thanks. I would not know how to do that. How could I try that?

 

[KALLT]

Thanks. I would not know how to do that. How could I try that?

By moving the agent to your user directory.

cp /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist ~/LaunchAgents
sudo rm /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist

Then logout out and back in.

 

[campyguy]

I use a Terminal command to disable items I don't want booting upon log in, like the Adobe CC Manager. I used to, but no longer use LS - I disabled it using Terminal, so I know it works on LS as well. No need for sudo.

To disable the CC Manager, I found the name of the LaunchAgent:
/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist

I log into the relevant account that I want to disable the CC Manager, open Terminal and run:
launchctl unload -w /Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist

This prevents loading of CC Manager in the 2 user account profiles I use CC in but not the 2 user accounts (3, including the Guest account) that I ran the above Terminal command in; CC Manager never loads where it's not wanted...

And for LS I *think* it's:
launchctl unload -w /Library/LaunchAgents/at.obdev.littlesnitchd.plist

I log out and back in, just to test it. I just substituted the LS plist name and that killed it for the relevant user account; I also use this for some of the Wacom stuff on my Mac in user accounts I never use my tablets. This even works in the Guest User Account, but you need to log into that and run the relevant Terminal command.

To re-enable the CC Manager, open Terminal and run:
launchctl load -w /Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist

And for LS I *think* it's:
launchctl load -w /Library/LaunchAgents/at.obdev.littlesnitchd.plist

For more on the unload command and "-w" subcommand, its several paragraphs down:
https://developer.apple.com/legacy/...rwin/Reference/ManPages/man1/launchctl.1.html

 

[KALLT]

Disabling it for the other user as campyguy explains may of course also work. Whichever you prefer.

To correct campyguy though, the correct path would be this:

launchctl unload -w /Library/LaunchAgents/at.obdev.LittleSnitchUIAgent.plist

You have to execute this command from the account that it affects.

 

[Dc2006ster]

Kallt and Campyguy. Thanks for the help. That might be just what I am looking for in that once setup the other user would not be affected or need to do anything at all. I will create an account and test it there before messing with the other user account.

Edit: It worked and is just what I wanted. Thanks again.