Rosyna Keller
@mjtsai Because it's never been used to protect against malicious apps. As I said, those apps can always ask the user which files to destroy
Michael Tsai
Drew Thaler
@drewthaler @mjtsai That actually happened to Twitter for Mac OS X a few years ago due to an image parsing bug.
-
-
@rosyna@drewthaler Even for things that would never be approved in the Mac App Store, so that every Developer ID app can be sandboxed. - View other replies
-
@mjtsai@drewthaler That's exactly how sandboxing works today on Mac OS X. - View other replies
-
@rosyna@drewthaler And it doesn’t, AFAIK, address APIs that area available but behave differently when the app is sandboxed. -
@mjtsai@drewthaler Which such APIs do that? There is a list of "temporary extensions" that are only temp for MAS https://developer.apple.com/library/mac/documentation/Miscellaneous/Reference/EntitlementKeyReference/Chapters/AppSandboxTemporaryExceptionEntitlements.html#//apple_ref/doc/uid/TP40011195-CH5-SW1 … - View other replies
-
@rosyna@drewthaler For example, -[NSWorkspace openFile:]. The rules have changed several times w/ OS versions and are not documented. -
@mjtsai@drewthaler What rules for openFile:? You just need to call startAccessingSecurityScopedResource: first to punch a hole in sandbox -
@rosyna@drewthaler No, there are cases where the document can't be opened if the app for it isn’t sandboxed, even if you punch a hole. -
@mjtsai@drewthaler Do you have an example of that? Because LaunchServices handles openFile. - Show more
-
-
-
@rosyna@drewthaler If that sort of thing is a major concern, Apple should offer lots more entitlements. -
@mjtsai@drewthaler In which cases are the current sandbox rules of permitting an arbitrary path not enough? -
@rosyna@drewthaler I’m not just talking about file system access. But, re: files, really want to be able to fix ownership/permissions.
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.