New answers tagged sandbox
I just found how to solve this problem. Go to the /System/Library/Sandbox/Profiles folder, you will find a file named fmfd.sb. You can't modify it here, so copy it to your desktop. Open the copy with TextEdit, locate the allow file-read-metadata section and add a new line under (literal "/Volumes") for the folder that can't be read, for you that should be ...
For most purposes, the following is good enough for most situations: sandbox-exec -n no-network command However, it's not more effective—there's numerous ways of apps escaping the sandbox. Little Snitch also lets you be more specific with what you are blocking—specific ports/etc.
Top 50 recent answers are included