Hot answers tagged

8

They can't as all 3rd-party apps on a non-jailbroken iOS device are limited by the sandbox, both installed from the App Store and from ad-hoc/enterprise distribution. Either they are using public APIs to access data 'the iOS way' (structured and anticipated) such as accessing the Camera Roll to import/save photos, or are integrated with an app to share data ...


5

lsboxd is part of the OS X Sandbox. It allows communication between sandboxed applications. lsboxd is in the Launch Services API. It is the Launch Services Sandbox Daemon, which governs what apps can launch apps in the OS X sandbox. You can peruse the App Sandbox Guide for more information about sandboxing. PDF: App Sandbox Design Guide


4

I just found how to solve this problem. Go to the /System/Library/Sandbox/Profiles folder, you will find a file named fmfd.sb. You can't modify it here, so copy it to your desktop. Open the copy with TextEdit, locate the allow file-read-metadata section and add a new line under (literal "/Volumes") for the folder that can't be read, for you that should be (...


4

Yes, any application placed in the Applications folder can provide QuickLook support. Sandboxing does not affect an application's ability to support QuickLook. Mac OS X looks inside applications for a QuickLook plug-ins folder. The specific folder is: MyApp.app/Contents/Library/QuickLook/ Support for Automator and Spotlight can also be provided using ...


4

The containers folder uses a Unix device called symbolic links. These links are redirects to information stored in a different folder or separate hard drive in your system. This allows for multiple paths to the same files and folders. Some software applications can not distinguish a symlink from a valid directory and will report multiple copies of the same ...


3

Yes, you can change the binary, or even change the Info.plist, but like changing the binary you make will need to do this again each time the app is updated. There's no way to do this without changing the app in a way that won't be overwritten when it's updated. You can automatically make your changes with a Launch Agent. Save the following in ~/Library/...


3

Based on this from an old Applescript Release Notes on sandboxing… When sending commands to a sandboxed application, such as TextEdit in OS X Mountain Lion, parameters that refer to files must be of an explicit file-like type and not a bare string, or the target application will not be able to access the file. For example, file "Macintosh HD:Users:me:...


3

Yes, you can add a Quicklook Plugin to an application. For example, QuickNFO uses one: QuickNFO Mac App store page


2

I ended up replacing TextEdit's code signature with an ad-hoc signature: sudo codesign -f -s - /Applications/TextEdit.app/ It disables sandboxing, so for example the preference files are in ~/Library/Preferences/ instead of the sandbox container. Edit: The dialogs returned after I reinstalled OS X, and now I'm getting errors like this for codesign -f -s -...


2

You're not seeing it correctly. Sandboxing doesn't bypass file permissions. If you don't have write access to a file then having the file-write entitlement won't give you write access to the file. Likewise the NSOpen/NSSave dialogs can't access anything they can't access with sandboxing off.


2

The App can have read/write access to a location if it gets your permission using an entitlement as part of the App Sandbox, in other words this is how its suppose to work. The App is code-signed and trusted, its asking your permission, in theory all should be good. As noted in the Mac Technology overview: App Sandbox Introduced in OS X v10.7, App ...


2

Of course this is possible - iOS sandboxes all applications by default and runs on the same Darwin core as OS X. Apple hasn't chosen to implement this on OS X, so you would have a lot of engineering work to bolt this extra security on top of OS X. In the short run, it might be easier to virtualize the OS if you only need to sandbox one or two applications.


2

For most purposes, the following is good enough for most situations: sandbox-exec -n no-network command However, it's not more effective—there's numerous ways of apps escaping the sandbox. Little Snitch also lets you be more specific with what you are blocking—specific ports/etc.


2

easiest and most secure way Please choose A or B, not both. really malicious programs Are we talking invasive virus software, like the stuff that came on Sony CDs? Either a carefully-configured virtual machine, like VMware Fusion, or an isolated physical machine. By "isolated" I mean not used for anything else and not connected to any network. Make ...


2

According to Activity Monitor info on fmfd: This tool generates files that allow Apple to investigate issues with your computer and help improve Apple products. The files might contain personal information found on your device or associated with your iCloud accounts, including but not limited to serial numbers of your device, your device name, your user ...


2

Slack is a well-known chatting tool and I am yet to hear it does any surveillance. Also, every single Mac app which is submitted into App Store after June 1 of 2012 must have sandboxing implemented or it won't be approved. Additionally, no app is able to access your computer outside of its limits unless you give it your root password (Slack does not ask for ...


2

Try this. using terms from application "Mail" on perform mail action with messages theMessages for rule theRule -- The folder to save the attachments in (must already exist) -- Save in a sub-folder based on the name of the rule in Mail set subFolder to name of theRule tell application "Finder" set ...


1

The WeChat app can ask iOS whether it is running on an iPad or iPhone. It is not something you can set in Settings, or "fake" through the Messages settings as indicated elsewhere. The only way to overcome this is with a jailbroken iPhone, where you can intercept the relevant method calls. In practice it is not possible to do so for an "ordinary user" ...


1

Nothing stands out in your log, there are two options... You can download the 10.10.4 combo update on to another Mac, and using target disk mode on your broken Mac, you can reinstall the update again, ensuring to click Your broken Mac in the installer window, not the local machine... If you do this do a backup first. Or you can simply do an Archive and ...


1

fmfd is 'find my friends daemon' I believe. I have noticed on my multiuser iMac that the two logged in users are polling each other's home directories ... though I've not yet figured out why. :-)


1

Yes, Apple included a sandbox facility with the release of Mac OS X 10.5 Leopard in 2006. This facility includes sandbox, sandboxd, sandbox_init, and sandbox-exec.


1

Go to System Preferences > Security & Privacy > Calendars and uncheck the box next to the lsboxd Why this part of XCode needs access to your Calendar, is a different story.


1

Seems a simple restart into safe mode can fix this. https://www.princeton.edu/~jcjb/docs/osx_error_fix/



Only top voted, non community-wiki answers of a minimum length are eligible