a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

learn more… | top users | synonyms

3
votes
1answer
1k views

Configure sandbox permissions

While trying to modify a property list I was rather surprised to receive the following error sh-3.2# cp com.apple.mDNSResponder.plist com.apple.mDSNResponder.plist.backup cp: com.apple.mDSNResponder....
2
votes
0answers
298 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny file-write-...
2
votes
0answers
326 views

Is there a way to turn off file system sandbox prompts for a specific app?

I have a Mac App Store app that needs to access various directories outside of the sandbox. To do so, it frequently prompts for permission. I fully trust this app, is there a way to grant it blanket ...
2
votes
0answers
75 views

How can I get quicklook to ignore network volumes?

How can I modify com.apple.qtkitserver.sb to ignore a certain network volume? For example, I don't want quicklook to build previews of graphic assets that are on a server. When I access a netatalk ...
2
votes
0answers
328 views

Sandboxing certain OSX apps

I am running multiple modern internet and cloud related services. Is it possible to limit their access to parts of my filesystem? For example Dropbox only needs access to its Dropbox shared folder.
1
vote
0answers
93 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
0
votes
0answers
32 views

How to delete all log files in Library/Containers with Terminal

I want to get rid of all the application log files that are not stored in ~/Library/Logs but in ~/Library/Containers/bundle.id/.../Logs I tried this: find ~/Library/Containers -name Logs -type d -...
0
votes
0answers
17 views

CalendarAgent deny file-read-data

When looking into sudo dmesg on my MacBook Pro, I see a lot of these messages. Sandbox: CalendarAgent(96278) deny file-read-data /private/tmp/krb5cc_209724998 Is this normal? Is it an indication ...
0
votes
0answers
95 views

sandboxd, pstopdf deny file-read-data and file-read-metadata

In attempting to get cups-pdf working in El Capitan, I'm running into the error that pstopdf errors out. The system.log shows that the sandbox kernel extension is denying read access to the following ...
0
votes
0answers
360 views

All UI apps suddenly turned to not responding

Today I was working when all opened apps with UI suddenly turned to "not responding". Nothing was installed last days, neither deleted. When this happened I was just listening music and was working ...
0
votes
0answers
120 views

How to send emails programmatically using scripting bridge if sandboxing is enabled

How to send emails using mail scripting bridge after enabling sandboxing. I am able to send mail before enabling sandboxing but failing after enabling it. As per my understanding, user permission is ...
0
votes
0answers
108 views

CoreAudio, SandBox & Kernel Errors

My console is littered with coreaudio errors. Will trashing the listed components, solve the problem? These are all of the logs that mention the word 'region':