Michael Tsai
@rosyna So you’re saying that the reason the Mac App Store requires sandboxing is to protect against Flash, which most apps don’t use?
-
@mjtsai@drewthaler Which such APIs do that? There is a list of "temporary extensions" that are only temp for MAS https://developer.apple.com/library/mac/documentation/Miscellaneous/Reference/EntitlementKeyReference/Chapters/AppSandboxTemporaryExceptionEntitlements.html#//apple_ref/doc/uid/TP40011195-CH5-SW1 …
Rosyna Keller
Drew Thaler
@rosyna @drewthaler For example, -[NSWorkspace openFile:]. The rules have changed several times w/ OS versions and are not documented.
-
-
@mjtsai@drewthaler What rules for openFile:? You just need to call startAccessingSecurityScopedResource: first to punch a hole in sandbox -
@rosyna@drewthaler No, there are cases where the document can't be opened if the app for it isn’t sandboxed, even if you punch a hole. -
@mjtsai@drewthaler Do you have an example of that? Because LaunchServices handles openFile. -
@rosyna@drewthaler Not handy. DTS eventually explained it to me; they were initially unaware, too. I fear more undocumented cases like this -
@mjtsai@drewthaler Because restrictions on openFile: are mostly handled by Gatekeeper, not the sandbox. - View other replies
-
@rosyna@drewthaler Similar issue in that some AppleScripts don’t work from sandbox, even when run using NSUserAppleScriptTask. -
@mjtsai@drewthaler In both cases, you need to use security-scoped bookmarks and startAccessingSecurityScopedResource - View other replies
-
@rosyna@drewthaler Perhaps security-scoped bookmarks are supposed to work in this case, but in practice they didn’t.
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.