a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

learn more… | top users | synonyms

4
votes
3answers
3k views

Process (fmfd) spamming my console with sandbox denies

Since installing OSX 10.10 (Yosemite), my console is full of error messages regarding fmfd, like fmfd(384) deny file-read-metadata /Volumes/Macintosh HD This happens mostly at startup and when ...
2
votes
0answers
80 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
2
votes
0answers
56 views

How can I get quicklook to ignore network volumes?

How can I modify com.apple.qtkitserver.sb to ignore a certain network volume? For example, I don't want quicklook to build previews of graphic assets that are on a server. When I access a netatalk ...
2
votes
0answers
158 views

Sandboxing certain OSX apps

I am running multiple modern internet and cloud related services. Is it possible to limit their access to parts of my filesystem? For example Dropbox only needs access to its Dropbox shared folder.
1
vote
0answers
35 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
1
vote
0answers
79 views

Is there a way to turn off file system sandbox prompts for a specific app?

I have a Mac App Store app that needs to access various directories outside of the sandbox. To do so, it frequently prompts for permission. I fully trust this app, is there a way to grant it blanket ...
0
votes
0answers
48 views

CoreAudio, SandBox & Kernel Errors

My console is littered with coreaudio errors. Will trashing the listed components, solve the problem? These are all of the logs that mention the word 'region':
0
votes
0answers
265 views

User directory replicated in each Library/Containers/**/Data directory

Came across a bizarre bug (?) in my Mavericks installation. I ran out of HD space, which I should not have been anywhere near. I ran Disk Inventory X to see where the space was being used, and found ...