- Use macOS Recovery to install the original version of the OS your Mac shipped with. This will completely wipe your Mac so make sure you do a backup. If you purchase a Mac with 10.15 Catalina or later installed: Install a VM (virtual machine) on your Mac and install macOS 10.14 Mojave or earlier in the VM.
- Applies to: Sophos Home Premium and Free (Mac) on macOS 10.13, 10.14 and 10.15. System Extension Blocked - A program tried to load a new system extension(s ) signed by 'Sophos'. Message appears after a new installation of Sophos Home on a computer running MacOS High Sierra 10.13 (or above) OR.
Just the other day macOS Mojave was released and now the armies of Macs armed only with the AppStore are silently downloading the installer and ready to upgrade. You can’t hurry too fast to be on the bleeding edge, hurry faster!
Just in case you don’t want everyone to install macOS 10.14.0 (dot zero!) in the first week of its release here’s a way to slow down the upgrade hordes using Erik Berglund’s AppBlocker script. Erik Berglund is also the author of ProfileCreator (for creating profiles) and the author of many other great scripts.
Edit the AppBlocker.py script with the Bundle Identifier of your app to block, in this case for the Mojave installer from the AppStore it is: com.apple.InstallAssistant.Mojave. You can also edit the alert message, and the icon that is shown, as well as decide if the blocked app should be deleted or not. Find the installer in your Applications folder as a single ”Install” file, such as Install macOS Mojave. The installer is typically around 6GB in size. You can verify it by going to /Applications directory, selecting the app bundle and using Command + I keyboard shortcut to view info.
Note: for true binary whitelisting check out Google’s Santa project and Upvote (and Moroz and Zentral, two other Santa sync servers).
Clone or download the AppBlocker project from GitHub
Edit the AppBlocker.py script with the Bundle Identifier of your app to block, in this case for the Mojave installer from the AppStore it is:
You can also edit the alert message, and the icon that is shown, as well as decide if the blocked app should be deleted or not. The script is easy to edit in BBEdit, or nano (in Terminal). Use whatever your favorite text editor is to make the necessary changes.
Download Mac Os Mojave App
UPDATED NOTE:
To determine the Bundle identifier of other applications you can use osascript
Mac App Store Mojave
If you want to block more than one app use a comma separated list in the AppBlocker.py script:
Put the script where you want to run it. The default location as defined in the launchd plist included with the app is “/usr/local/bin”. Put the launchd.plist in “/Library/LaunchDaemons/” and start up your launchd to block your apps!
For bonus points we automate! Bundle it all up in a package with munkipkg, then distribute it with Munki to all your clients.
Using munkipkg is easy. Create the folder using munkipkg https://yellowsim435.weebly.com/mac-web-server-app.html.
![Installation Blocked App By Mac Mojav Installation Blocked App By Mac Mojav](/uploads/1/3/3/9/133906391/693756976.png)
Then you fill the payload folders with those items you downloaded from the AppBlocker project. LauchD plist in the LaunchDaemons folder and AppBlocker.py in the “usr local bin” (create each nested folder).
https://yellowsim435.weebly.com/textedit-mac-portable-app.html. And finally create a post install script (no “.sh”) with the launchctl action to start your plist.
Installation Blocked App By Mac Mojave
Last but not least add this package to your Munki repo as an unattended managed install that everyone gets. Of course, only do this after testing your package locally somewhere to verify that it works properly. Remember the saying: “You may not test very often, but when you do it’s always in production.” Be very careful with your testing but always automate all the things.
Updated after the initial blog post to explain how to add more than one app to block, and how to use osascript to determine the bundle identifier.