How to add Restricted Software for macOSUpdCombo10.13.4.pkg

[Bernard_Huang]

Hi all,

Due to DisplayLink not being compatible with latest macOS High Sierra 10.13.4, we want to stop people from download and installing the updater itself from App Store.

Does anyone know how to set up such thing in Restricted Software? We've had success with blocking people from upgrading from Sierra to High Sierra (Users have to upgrade from Self Service, cannot be done via App Store). But for this updater, the process is "Installer", and we don't want to block that, it will block everything from installing.

So far I have set up the attached screenshot, but hasn't worked yet.

[Bernard_Huang]

Forgot to mention, we're using Casper JSS 9.101.

[mm2270]

You can't use Restricted Software to stop individual pkg installers, because, as you already mentioned, the app that runs those is "Installer.app" That's the only process Jamf Pro would see in relation to that pkg being installed by a user.

Do you have your clients pointed to any internal SUS, like an Apple one, or Resposado, NetSUS, etc? If so, you could disable that update from being published, and for good measure you could add it to the --ignore updates list for the softwareupdate utility. In fact, you could take the latter approach if you don't have them directed to a managed SUS.
That wouldn't stop anyone from downloading the 10.13.4 update from Apple's site directly though.

[Bernard_Huang]

Thanks. App Store auto update are already disabled on all our Macbooks.

So can't stop pkgs. ok :)