a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

learn more… | top users | synonyms

1
vote
0answers
22 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
4
votes
3answers
2k views

Process (fmfd) spamming my console with sandbox denies

Since installing OSX 10.10 (Yosemite), my console is full of error messages regarding fmfd, like fmfd(384) deny file-read-metadata /Volumes/Macintosh HD This happens mostly at startup and when ...
2
votes
0answers
61 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
0
votes
0answers
47 views

CoreAudio, SandBox & Kernel Errors

My console is littered with coreaudio errors. Will trashing the listed components, solve the problem? These are all of the logs that mention the word 'region':
2
votes
1answer
481 views

How do sync programs get around the iOS sandbox?

The various iOS sync programs (SugarSync, BitTorrent Sync, etc.) claim to be able to read files anywhere on the phone. I don't see how data from my application -- in my app's sandbox -- can be ...
5
votes
1answer
92 views

How to enforce sandbox rules for the particular app?

I wrote an sandbox specification file (inspired by files from /usr/share/sandbox and manuals like this) and now I can launch some app in sandbox with sandbox-exec $path_to_rules ...
0
votes
0answers
230 views

User directory replicated in each Library/Containers/**/Data directory

Came across a bizarre bug (?) in my Mavericks installation. I ran out of HD space, which I should not have been anywhere near. I ran Disk Inventory X to see where the space was being used, and found ...
1
vote
1answer
127 views

Installing drivers before installing Mac app - rejected by apple review team

I have developed a Mac desktop application and need to have our users install few drivers to run our application on OS X. Due to sandbox constraint, I am not able to get the user access permission to ...
1
vote
1answer
152 views

Weird Permissions/ Sandboxing issue: installer.app is not entitled for system.install.apple

There is a serious ownership/ permissions/ entitlements fault in my 10.7 install. What happened: 1) After swapping the stock drive for an Intel SSD of the same size in my Mac Mini 1,2 (2006 -ish?), ...
1
vote
0answers
69 views

Is there a way to turn off file system sandbox prompts for a specific app?

I have a Mac App Store app that needs to access various directories outside of the sandbox. To do so, it frequently prompts for permission. I fully trust this app, is there a way to grant it blanket ...
1
vote
1answer
711 views

How To Sandbox Individual Applications On OS X Mavericks

I am trying to Sandbox Firefox on OS X. I know on Linux, you have AppArmor. On Windows, you Sandboxie. Is there something built into OS X that will allow me to Sandbox individual applications?
2
votes
0answers
55 views

How can I get quicklook to ignore network volumes?

How can I modify com.apple.qtkitserver.sb to ignore a certain network volume? For example, I don't want quicklook to build previews of graphic assets that are on a server. When I access a netatalk ...
4
votes
1answer
13k views

Photos not uploading to photo stream or syncing with iCloud

So I have a heavy question that I haven't seen asked on ad, so, or su. Question -- My photos are not uploading from my iPhone nor iPhoto to my photo stream. Why? Background -- When I attempt to ...
5
votes
1answer
915 views

How to isolate an application from the system (fully sandboxed application)?

Is it possible to do something like the concept of sandboxing (like all apps on iOS have its own system software resources) for all existing applications (so - not while designing an own new ...
4
votes
1answer
9k views

What does lsboxd process do on os x?

My firewall asked me for a connection from lsboxd (module com.apple.ls.boxd, ) to one another computer in my network to the port tcp 548. What does it do? I found that it is a part of sandbox ...
2
votes
0answers
147 views

Sandboxing certain OSX apps

I am running multiple modern internet and cloud related services. Is it possible to limit their access to parts of my filesystem? For example Dropbox only needs access to its Dropbox shared folder.
5
votes
2answers
10k views

Console reports “sandboxd deny mach-lookup” … Should I modify system.sb?

I'm getting two errors in the console at the same time TimeMachine is running and taking FOREVER to make any progress. 1/4/13 9:41:38.000 PM kernel[0]: Sandbox: sandboxd(5838) deny mach-lookup ...
0
votes
1answer
5k views

Automatically Save Attachments in Mail.app in 10.8 Mountain Lion

I am trying to automatically save all email sent to one address (let's call it test@example.com) to this folder /Users/luomat/Dropbox/Incoming/e2w/ (where /Users/luomat = $HOME). Here is the rule ...
1
vote
1answer
399 views

Can you override app sandboxing, force app to use working directory?

I'm trying to configure asymptote on my mac, which is a mathematical graphing language for LaTeX. The program is a Unix command line utility. According to the configuring instructions at ...
2
votes
2answers
602 views

Can Mac App Store purchased apps install Quicklook Plugins?

Since all apps are now sandboxed when purchased from the Mac App Store, what does this mean for the install process? Do you literally downoad the .app bundle, which gets placed into /Applications, and ...
5
votes
3answers
3k views

TextEdit shows dialogs about not having permission to open any files

About once per day, TextEdit starts showing dialogs like this when I try to open any file: The document “test.txt” could not be opened. You don’t have permission. To view or change ...
2
votes
2answers
206 views

Sandbox admin privileges

I just downloaded the iAntivirus app from the Mac App Store. I wanted it to scan my whole hard drive for viruses, so it presented me with an Open dialog box pointing at the root of the hard drive (so ...