Little Snitch

https://help.obdev.at/littlesnitch6
Admin
Little Snitch is a host-based application firewall for macOS that monitors and controls outgoing and...
Tokens:45,624
Snippets:367
Trust Score:10
Update:3 weeks ago
Show doc for...
Tokens:
Raw
### read-preference example with sudo

Source: https://help.obdev.at/littlesnitch6/cmd-read-preference

Example of reading the 'dontShowDenyConsequencesAgain' preference, which outputs a JSON array.

```bash
$ sudo littlesnitch read-preference dontShowDenyConsequencesAgain
[
  "com.DanPristupov.Fork"
]

```

--------------------------------

### Minimal LittleSnitchMassDeploymentConfiguration.json example

Source: https://help.obdev.at/littlesnitch6/adv-enterprise-deployment

Minimal working example of the mass deployment configuration file. Includes license key and owner, global defaults, groups, and empty rules and users arrays. Save as LittleSnitchMassDeploymentConfiguration.json.

```json
{
  "massDeploymentLicenseKey" : "36123456789-715P8-0123456789",
  "massDeploymentLicenseOwner" : "ACME, Inc.",
  "globalDefaults" : {
    "activeSilentMode" : 0,
    "allowCommandLineAccess" : 1
  },
  "groups" : {
    "aaaaac" : {
      "isActive" : true,
      "type" : "builtinMacOSServices"
    },
    "aaaaad" : {
      "isActive" : true,
      "type" : "builtinICloudServices"
    }
  },
  "rules" : [ ],
  "users" : [ ]
}
```

--------------------------------

### Set user defaults for automatic license acceptance and installation

Source: https://help.obdev.at/littlesnitch6/adv-enterprise-deployment

Sets user defaults to automatically accept the license agreement and perform installation, bypassing user prompts. Must be run for the user running the app, not as root.

```bash
defaults write at.obdev.littlesnitch AcceptLicenseAgreementAutomatically YES
defaults write at.obdev.littlesnitch PerformInstallationAutomatically YES
```

--------------------------------

### Example values for preference types

Source: https://help.obdev.at/littlesnitch6/cmd-write-preference

Lists example values for each supported preference type: boolean, unsigned integer, integer, floating point, date, string, and data (base64 encoded).

```text
         boolean: true, false
unsigned integer: 23, 9953274
         integer: -25, 2147483647
  floating point: -547.23, 993.13
            date: 2021-05-01T13:11:59
          string: any text you like
            data: QmFzZTY0IGVuY29kZWQgZGF0YQo= (base 64 encoded)
```

--------------------------------

### Import backup as-is

Source: https://help.obdev.at/littlesnitch6/cmd-restore-model

Imports a backup file without any user mapping, using the example backup file from the documentation.

```bash
sudo littlesnitch restore-model ~/LittleSnitch-2019-10-15.xpl

```

--------------------------------

### Start Little Snitch with command-line defaults

Source: https://help.obdev.at/littlesnitch6/adv-enterprise-deployment

Alternative to setting user defaults: starts Little Snitch with the same options as command-line arguments. Useful for testing or one-time execution.

```bash
/Applications/Little\ Snitch.app/Contents/MacOS/Little\ Snitch -AcceptLicenseAgreementAutomatically YES -PerformInstallationAutomatically YES
```

--------------------------------

### Show littlesnitch help with --help

Source: https://help.obdev.at/littlesnitch6/cmd-overview

Displays the built-in help for the littlesnitch command line tool, listing available options and commands. Use this to get a general overview of the tool's capabilities. For details on a specific command, run `littlesnitch <command> --help`.

```bash
$ littlesnitch --help
usage: littlesnitch [-hv] [-u <user name or numeric ID>] command [<command
     args>]
  -h, --help
        Print a short list of available commands and options.
  -u, --user <user name or numeric ID>
        The command line tool is executed on behalf of a user. You can specify
        the user here.
  -v, --version
        Print the current version of Little Snitch.

Commands:
  list-preferences ... Lists all preferences.
  read-preference .... Reads a preference value.
  write-preference ... Writes a preference value.
  export-model ....... Exports the entire data model in JSON format (backup).
  restore-model ...... Restores the current data model from backup.
  debug-categories ... Sets categories to be logged in more detail.
  log ................ Reads Little Snitch log messages.
  log-traffic ........ Prints data from traffic log.
  recrypt-config ..... Copies configuration files changing encryption password.
  capture-traffic .... Captures traffic of a particular process or process pair.
  update-rule-groups . Updates factory rule groups with rules for currently installed apps.

For more information about a particular command use

    littlesnitch <command> --help

```

--------------------------------

### Import entire configuration with restore-model

Source: https://help.obdev.at/littlesnitch6/adv-enterprise-deployment

Use `sudo littlesnitch restore-model --preserve-terminal-access configuration.lsbackup` to import an entire configuration. The `--preserve-terminal-access` flag ensures command line access after import, even if the imported configuration lacks the `"allowCommandLineAccess"` setting. User-specific settings must be handled separately, and license key and owner are preserved from the original installation.

```bash
sudo littlesnitch restore-model --preserve-terminal-access configuration.lsbackup
```

--------------------------------

### Set an array element with write-preference

Source: https://help.obdev.at/littlesnitch6/cmd-write-preference

Example of adding an entry to an array by specifying the index in the key. Uses sudo to run the command.

```bash
sudo littlesnitch write-preference dontShowDenyConsequencesAgain.1 at.obdev.launchbar
```

--------------------------------

### littlesnitch export-model --help

Source: https://help.obdev.at/littlesnitch6/cmd-export-model

Shows the command-line help for the littlesnitch export-model command, including its usage and the -h/--help flag. Run this to see the available options and expected arguments.

```console
$ littlesnitch export-model --help
usage: littlesnitch export-model [-h] [<output file>]
  -h, --help
        Print a short help and exit.

```

--------------------------------

### Check Little Snitch system extensions

Source: https://help.obdev.at/littlesnitch6/intro-uninstall

Run in Terminal to show all currently installed system extensions of Little Snitch. When uninstalled, this command should yield an empty result.

```bash
systemextensionsctl list | grep activated | grep at.obdev.littlesnitch
```

--------------------------------

### Simple .lsrules rule for LaunchBar software update

Source: https://help.obdev.at/littlesnitch6/adv-lsrules-file-format

A minimal .lsrules file that defines a single rule allowing LaunchBar to connect to sw-update.obdev.at. The rule uses the "allow" action, specifies the process by its absolute path, and sets remote-hosts to the update server.

```json
{
  "name": "LaunchBar Software Update",
  "description": "This rule allows LaunchBar to check for updates.",
  "rules": [
    {
      "action": "allow",
      "process": "/Applications/LaunchBar.app/Contents/MacOS/LaunchBar",
      "remote-hosts": "sw-update.obdev.at"
    }
  ]
}
```

--------------------------------

### Sign LittleSnitch.mobileconfig with security cms

Source: https://help.obdev.at/littlesnitch6/adv-enterprise-deployment

Signs the LittleSnitch.mobileconfig profile with a trusted certificate to enable silent installation on supervised devices. Replace 'My Certificate Name' and the input/output paths as needed.

```bash
security cms -S -N "My Certificate Name" -i /path/to/LittleSnitch.mobileconfig -o /path/to/LittleSnitch-signed.mobileconfig
```

--------------------------------

### Suppress welcome tour with user default

Source: https://help.obdev.at/littlesnitch6/adv-enterprise-deployment

Sets a user default to avoid showing the welcome tour on first start. Useful when managing Little Snitch remotely. Must be run for the user, not as root.

```bash
defaults write at.obdev.littlesnitch LastShownWelcomeWindowVersion 2
```

--------------------------------

### Map user IDs and import backup

Source: https://help.obdev.at/littlesnitch6/cmd-restore-model

Shows how to check the current user ID with id -u and then import a backup with a user mapping using the --map-users option. The mapping '0 > 0, 501 > 502' maps backup user 501 to local user 502.

```bash
$ id -u
502

$ sudo littlesnitch restore-model --map-users "0 > 0, 501 > 502" ~/LittleSnitch-2019-10-15.xpl

```
Tokens:
Raw