macOS 开源工具 dontallow 发布：自动拒绝本地网络访问权限请求

开发者 John Cassil 在 Hacker News 社区发布了名为 dontallow 的 macOS 开源工具，旨在通过自动点击系统弹窗中的“不允许”按钮，阻止应用程序获取本地网络访问权限 1。该工具主要应对 macOS Sequoia（版本 15）及更高系统中，因应用捆绑路径变化导致权限提示频繁重现的问题 1。虽然构建环境需要 macOS 13 或更高版本，但其核心功能针对的是较新系统的特定痛点 1。

在安装与运行机制方面，用户可通过 Homebrew 执行命令 brew install johncassil/tap/dontallow 进行安装，或直接使用源码编译 1。该软件由 Swift 语言编写且无外部依赖，利用辅助功能（Accessibility）API 监控 UserNotificationCenter 进程创建的窗口，因此用户必须授予相应的 Accessibility 权限才能执行自动点击操作 1。目前该工具仅支持英语界面，且在更新二进制文件后可能需要用户重新手动确认 Accessibility 权限 1。

为了提供灵活性，dontallow 配置选项包括允许暂停服务的 dontallow pause 命令、基于 ~/.config/dontallow/allowlist 文件的白名单机制以及可设定的 grace 时间窗口 1。

A new open-source utility named dontallow has been released to automatically dismiss persistent local network access permission prompts on macOS 1. The tool is designed for users of macOS Sequoia (version 15) and later, where changes in application bundle paths have caused the system to frequently re-display the "Allow to find devices on local networks?" dialog 1. By automatically clicking the "Don't Allow" button, dontallow prevents applications from gaining local network access without user intervention 1.

Developed by John Cassil and introduced via Hacker News, the utility is written in Swift with no external dependencies 1. It operates by monitoring window creation events through the UserNotificationCenter process and requires Accessibility permissions to execute the automated clicks 1. Users can install the tool via Homebrew using the command brew install johncassil/tap/dontallow or build it from source code 1. While the prompts appear on macOS 15+, building the tool requires macOS 13 or later 1.

The software offers configuration options including a pause command (dontallow pause) and support for an allowlist located at ~/.config/dontallow/allowlist, which allows specific apps to bypass the automatic rejection 1. Additionally, it features a configurable "grace" time window 1. However, the current version supports only English-language interfaces, and updating the binary may require users to manually re-confirm Accessibility permissions 1.