I need to turn on access for assistive devices and prevent the user from turning it off. I can turn it on with:
touch /private/var/db.AccessibilityAPIEnabled
But the user can turn it off. I have tried setting the system immutable flag:
sudo chflags schg /private/var/db.AccessibilityAPIEnabled
When I do that I can't delete it with sudo, but the system can still apparently delete it, because unchecking the box in "Universal Access" deletes the file.
Any ideas on how I can accomplish this?