a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

learn more… | top users | synonyms

3
votes
1answer
980 views

Configure sandbox permissions

While trying to modify a property list I was rather surprised to receive the following error sh-3.2# cp com.apple.mDNSResponder.plist com.apple.mDSNResponder.plist.backup cp: ...
2
votes
0answers
295 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny ...
2
votes
0answers
319 views

Is there a way to turn off file system sandbox prompts for a specific app?

I have a Mac App Store app that needs to access various directories outside of the sandbox. To do so, it frequently prompts for permission. I fully trust this app, is there a way to grant it blanket ...
2
votes
0answers
73 views

How can I get quicklook to ignore network volumes?

How can I modify com.apple.qtkitserver.sb to ignore a certain network volume? For example, I don't want quicklook to build previews of graphic assets that are on a server. When I access a netatalk ...
2
votes
0answers
325 views

Sandboxing certain OSX apps

I am running multiple modern internet and cloud related services. Is it possible to limit their access to parts of my filesystem? For example Dropbox only needs access to its Dropbox shared folder.
1
vote
0answers
92 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
0
votes
0answers
20 views

How to delete all log files in Library/Containers with Terminal

I want to get rid of all the application log files that are not stored in ~/Library/Logs but in ~/Library/Containers/bundle.id/.../Logs I tried this: find ~/Library/Containers -name Logs -type d ...
0
votes
0answers
8 views

CalendarAgent deny file-read-data

When looking into sudo dmesg on my MacBook Pro, I see a lot of these messages. Sandbox: CalendarAgent(96278) deny file-read-data /private/tmp/krb5cc_209724998 Is this normal? Is it an indication ...
0
votes
0answers
61 views

sandboxd, pstopdf deny file-read-data and file-read-metadata

In attempting to get cups-pdf working in El Capitan, I'm running into the error that pstopdf errors out. The system.log shows that the sandbox kernel extension is denying read access to the following ...
0
votes
0answers
306 views

All UI apps suddenly turned to not responding

Today I was working when all opened apps with UI suddenly turned to "not responding". Nothing was installed last days, neither deleted. When this happened I was just listening music and was working ...
0
votes
0answers
112 views

How to send emails programmatically using scripting bridge if sandboxing is enabled

How to send emails using mail scripting bridge after enabling sandboxing. I am able to send mail before enabling sandboxing but failing after enabling it. As per my understanding, user permission is ...
0
votes
0answers
104 views

CoreAudio, SandBox & Kernel Errors

My console is littered with coreaudio errors. Will trashing the listed components, solve the problem? These are all of the logs that mention the word 'region':