a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

learn more… | top users | synonyms

3
votes
1answer
2k views

Configure sandbox permissions

While trying to modify a property list I was rather surprised to receive the following error sh-3.2# cp com.apple.mDNSResponder.plist com.apple.mDSNResponder.plist.backup cp: com.apple.mDSNResponder....
2
votes
1answer
79 views

How can I get quicklook to ignore network volumes?

How can I modify com.apple.qtkitserver.sb to ignore a certain network volume? For example, I don't want quicklook to build previews of graphic assets that are on a server. When I access a netatalk ...
2
votes
0answers
306 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny file-write-...
2
votes
0answers
336 views

Is there a way to turn off file system sandbox prompts for a specific app?

I have a Mac App Store app that needs to access various directories outside of the sandbox. To do so, it frequently prompts for permission. I fully trust this app, is there a way to grant it blanket ...
2
votes
0answers
332 views

Sandboxing certain OSX apps

I am running multiple modern internet and cloud related services. Is it possible to limit their access to parts of my filesystem? For example Dropbox only needs access to its Dropbox shared folder.
1
vote
0answers
93 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
0
votes
0answers
8 views

Sandbox prevents reading files

I have a couple of apps for testing PHP code: PHP Tester from Hankinsoft, and PHP Code Tester from Jacob Klen. Since upgrading to El Capitan, I've found that they don't use the PHP configuration file ...
0
votes
0answers
43 views

How to delete all log files in Library/Containers with Terminal

I want to get rid of all the application log files that are not stored in ~/Library/Logs but in ~/Library/Containers/bundle.id/.../Logs I tried this: find ~/Library/Containers -name Logs -type d -...
0
votes
0answers
25 views

CalendarAgent deny file-read-data

When looking into sudo dmesg on my MacBook Pro, I see a lot of these messages. Sandbox: CalendarAgent(96278) deny file-read-data /private/tmp/krb5cc_209724998 Is this normal? Is it an indication ...
0
votes
0answers
110 views

sandboxd, pstopdf deny file-read-data and file-read-metadata

In attempting to get cups-pdf working in El Capitan, I'm running into the error that pstopdf errors out. The system.log shows that the sandbox kernel extension is denying read access to the following ...
0
votes
0answers
389 views

All UI apps suddenly turned to not responding

Today I was working when all opened apps with UI suddenly turned to "not responding". Nothing was installed last days, neither deleted. When this happened I was just listening music and was working ...
0
votes
0answers
122 views

How to send emails programmatically using scripting bridge if sandboxing is enabled

How to send emails using mail scripting bridge after enabling sandboxing. I am able to send mail before enabling sandboxing but failing after enabling it. As per my understanding, user permission is ...
0
votes
0answers
111 views

CoreAudio, SandBox & Kernel Errors

My console is littered with coreaudio errors. Will trashing the listed components, solve the problem? These are all of the logs that mention the word 'region':