Sergio Aviles Chalcahuite

brew is a bad neighbor

This isn't a guide about locking down homebrew so that it can't touch the rest of your system security-wise.

This guide doesn't fix the inherent security issues of a package management system that will literally yell at you if you try to do something about "huh, maybe it's not great my executables are writeable by my account without requiring authorization first".

But it absolutely is a guide about shoving it into its own little corner so that you can take it or leave it as you see fit, instead of just letting the project do what it likes like completely taking over permissions and ownership of a directory that might be in use by other software on your Mac and stomping all over their contents.

By following this guide you will:

Never have to run sudo to forcefully change permissions of some directory to be owned by your account

	import plistlib
	import CoreFoundation
	from Foundation import NSDate, NSMutableArray, NSMutableDictionary

	# read the current ManagedPlugInPolicies
	policy = CoreFoundation.CFPreferencesCopyAppValue("ManagedPlugInPolicies", "com.apple.Safari")

	if policy:
	# policy is an immutable dict, so we have to make a mutable copy
	my_policy = NSMutableDictionary.alloc().initWithDictionary_copyItems_(policy, True)

	#!/usr/bin/python
	"""Identify or remove files known to be involved in Adware/Malware
	infection.

	Most of the code applies to building a list of malware files. Thus,
	both extension attribute and removal handling are included.

	Cleans files as a Casper script policy; thus, it expects four total
	arguments, the first three of which it doesn't use, followed by
	--remove

	import datetime
	import logging
	import requests
	import urlparse

	class JamfUAPIAuthToken(object):
	def __init__(self, jamf_url, username, password):
	"""
	:param jamf_url: Jamf Pro URL
	:type jamf_url: str