[jstrauss]

I'm trying to limit users from copying applications out of the /Applications folder, and my idea was to create a script that would stop whatever command is running under the GUI when a user drags an item out of /Applications (presumably cp). Is this feasible? If so, how would I start writing a script that would stop it?

Thanks!

[Chuckit]

This is not feasible, at least not that simply. The Finder does not use cp for its copying — it uses the same underlying system calls that cp uses. You could probably patch the file copying routines, but that isn't nearly as easy.

[mduell]

Set the permissions to execute only?
It's an amusing idea, but I don't even know if that would work.

[Chuckit]

That doesn't work. If the executable isn't readable, Finder won't even try to open it.

[larkost]

The solution is to put a folder into the .app bundle that the users in question can't read. The finder will get to that folder and stop. They might get something, but if you name the folder with an 'A' then they won't get anything meaningful.

[Chuckit]

Originally Posted by larkost 

The solution is to put a folder into the .app bundle that the users in question can't read. The finder will get to that folder and stop. They might get something, but if you name the folder with an 'A' then they won't get anything meaningful.

Oh, very clever. That would work.