Questions tagged [sandbox]

a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

Filter by
Sorted by
Tagged with
2
votes
0answers
25 views

Sandbox Apple ID disabled in the App Store and iTunes

I am attempting to test macOS In-App Purchases via a Sandbox Apple ID. When I go through the purchase flow, I get the error: Your account has been disabled in the App Store and iTunes. For ...
0
votes
1answer
37 views

How can I force all traffic for a single app through VPN / Proxy + Open Source? aka App Firewall?

I'm looking for an app that is fully Open Source OR built-in to MacOS as I am trying to use this for security / privacy (to ensure that particular apps cannot make arbitrary connections) I have ...
2
votes
0answers
39 views

rsync denied to access directory when run with launchctl

I have mounted samba share in "/Volumes/Samba" with full read/write access right to it. I created simple script to rsync files from smb share to folder on my disk, when I lunch script from terminal ...
0
votes
0answers
115 views

When is it possible to grant a sandboxed app access to a folder by dragging and dropping it onto the app's Dock tile?

According to the App Sandbox in Depth article in Apple's developer documentation: Your sandboxed app can access file system locations outside of its container ... [a]t the specific direction of the ...
1
vote
1answer
52 views

Adding Test Credit Card to Apple Pay

I'm trying to add a test credit card in my Applet Wallet (with icloud and app store signed in to my developer account). I found a list of test credit cards available from Apple's page https://...
1
vote
1answer
52 views

How does macOS process protection work – Cliff Notes style?

Looking at Apple dev forums and not having programmed in C since college, I'm a bit out of my depth trying to understand the fundamentals of the components of MacOS' protection model employed over the ...
2
votes
0answers
839 views

how can I run an app in sandbox?

I wanted to play some games found on internet (not the Mac store) but I was afraid those could have a virus inside. As such I wanted to run them in a sandbox where they could just read files from ...
1
vote
1answer
90 views

Triggering Launch Agents for path in sandboxed app using WatchPaths does not work

I am trying to create a user LaunchAgents that will trigger a script when a path managed by a sandbox app will change (in my case, when /Library/Containers/com.omnigroup.OmniFocus3/Data/Library/...
5
votes
1answer
110 views

Are applications required to be installed to the /Applications folder in order to be sandboxed?

I have an application installed in the ~/Applications folder. I've been using it for years with no problems. But after a recent update this application started giving me warnings that it should be ...
6
votes
3answers
210 views

Third party application cannot write to disk

I downloaded this application: Donkey Simulator And after unzipping there should be an executable file but also a folder called "log", and once the application is running, new files are written into ...
4
votes
1answer
350 views

iTunesConnect no longer allows tester gmail with plus sign?

In the past, I used to use the same Gmail address for testing in-app purchasing (sandbox testing) by adding + sign to my email. For example, myemail+testapp@gmail.com Now I am no longer able to ...
0
votes
1answer
456 views

Restoring from Time Machine Backup – Cannot replace Mac HD

I'm trying to restore my computer to a previous backup of my Mac HD. However, when I try, I see an error notice telling me that I cannot, since this file is not able to be deleted: ....
2
votes
0answers
301 views

How do I create an Automator-based “Replace Text” Service that works with sandboxing?

I want to create a Service using Automator on macOS 10.12.6. I selected: Service receives selected rich text in any application Input is entire selection ☑️ Output replaces selected text I then ...
14
votes
1answer
9k views

How do I use my existing KeePass database on my new iPad without iTunes on a computer?

I'm a Linux user who bought an iPad. I'm also an Infosec pro who uses the KeePassX password manager. All my passwords are too long to type on the iPad - so I want to use my password manager on iPad. I ...
8
votes
1answer
958 views

How to fix sandbox violations by airportd?

I keep seeing a lot of errors like this in the console which seem to be causing beachballs: SandboxViolation: airportd(81) deny(1) file-read-metadata /Users I have a MacBook Pro (15-inch, Mid 2012) ...
4
votes
1answer
3k views

Run untrusted application safely through sandbox-exec command

I'm trying to run a potentially untrusted application without the following permissions, through the sandbox-exec command: file write (to avoid corruption/injection of files) network (to avoid ...
4
votes
1answer
2k views

AMFI: allowing exception handler - because the handler was set by master-entitled process ´launchd´, VirtualBox

I installed macOS Sierra 10.12 like Guest on VirtualBox 5.1.10 on my MacBook Air with macOS Sierra too. I facing errors! I login with difficulties an when I can, raise the error and I need to log in....
6
votes
2answers
13k views

Is there a sandboxing program like Sandboxie for Mac?

With Sandboxie for Windows, you are able to run applications that you don't entirely trust in a sandbox; it tracks all files the program creates and modifies, and although the files technically go to ...
2
votes
1answer
79 views

Website in separate browser instance in IOS

In IOS, adding a website to the home screen in Safari essentially produces a Safari bookmark on the home screen. When clicking on such an icon, the website is displayed in Safari. Is there some way ...
1
vote
1answer
1k views

Sandbox on Mac OS X

I can't use the sandbox-exec command as I expected. The problem is that I cannot apply a custom profile with the -f switch: I get "operation not permitted" error which I could not trace to anything ...
0
votes
2answers
1k views

How To Trick WeChat Into to Thinking My iPhone Is An iPad?

so I use a chatting app called WeChat and I have two phones. It only allows me to sign in on one phone at a time. But I can sign in on an iPad and a phone at the same time. It's an universal app, ...
4
votes
0answers
743 views

sandboxd, pstopdf deny file-read-data and file-read-metadata

In attempting to get cups-pdf working in El Capitan, I'm running into the error that pstopdf errors out. The system.log shows that the sandbox kernel extension is denying read access to the following ...
2
votes
1answer
293 views

How to ensure Slack runs safely in sandbox?

For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless ...
3
votes
1answer
10k views

Configure sandbox permissions

While trying to modify a property list I was rather surprised to receive the following error sh-3.2# cp com.apple.mDNSResponder.plist com.apple.mDSNResponder.plist.backup cp: com.apple.mDSNResponder....
2
votes
2answers
3k views

Failed startup after 10.10. upgrade

After upgrading to 10.10.4 from 10.10.2, my Macbook Pro (late 2013) boots up to a blank screen with the mouse cursor displayed briefly every 10 seconds. Booting to safe mode and resetting the SMC or ...
3
votes
2answers
3k views

How can I avoid permission-related failures when importing in Photos.app via AppleScript?

The new Photos.app does not come with Automator support (although there are third-party actions available). It does, however, have some basic AppleScript support, including support for importing a ...
3
votes
1answer
1k views

In OS X, how does manually sandboxing an application from the internet compare to blocking it with Little Snitch?

I want to prevent inbound and outbound connections to one application. I can buy Little Snitch if it's the best option, but it feels like I wouldn't be getting much value out of it for that one use. ...
3
votes
2answers
2k views

The best way to sandbox programs in OSX?

I know that this question have been discussed before on AskDifferent, but none of the threads really satisfied me. For Windows you have a wonderful program called Sandboxie http://www.sandboxie.com/ ...
1
vote
0answers
101 views

On Yosemite, how can I audit the safety of an executable?

I would like to audit an executable binary from an untrusted source, and ultimately maintain whether it is safe to run it. My main interest is to establish, in a safe fashion, whether said binary ...
7
votes
4answers
33k views

Process (fmfd) spamming my console with sandbox denies

Since installing OSX 10.10 (Yosemite), my console is full of error messages regarding fmfd, like fmfd(384) deny file-read-metadata /Volumes/Macintosh HD This happens mostly at startup and when ...
2
votes
0answers
386 views

How to add a process to sandboxd's configuration?

I have a particular process that is having some problems writing to the /private/tmp folder. sandboxd keeps emitting the following error: sandboxd[xxx] ([xxxxx]): process(xxxxx) deny file-write-...
0
votes
0answers
158 views

CoreAudio, SandBox & Kernel Errors

My console is littered with coreaudio errors. Will trashing the listed components, solve the problem? These are all of the logs that mention the word 'region':
2
votes
1answer
790 views

How do sync programs get around the iOS sandbox?

The various iOS sync programs (SugarSync, BitTorrent Sync, etc.) claim to be able to read files anywhere on the phone. I don't see how data from my application -- in my app's sandbox -- can be ...
8
votes
1answer
798 views

How to enforce sandbox rules for the particular app?

I wrote an sandbox specification file (inspired by files from /usr/share/sandbox and manuals like this) and now I can launch some app in sandbox with sandbox-exec $path_to_rules /Applications/$appname....
4
votes
1answer
3k views

User directory replicated in each Library/Containers/**/Data directory

Came across a bizarre bug (?) in my Mavericks installation. I ran out of HD space, which I should not have been anywhere near. I ran Disk Inventory X to see where the space was being used, and found ...
1
vote
1answer
224 views

Installing drivers before installing Mac app - rejected by apple review team

I have developed a Mac desktop application and need to have our users install few drivers to run our application on OS X. Due to sandbox constraint, I am not able to get the user access permission to ...
1
vote
1answer
484 views

Weird Permissions/ Sandboxing issue: installer.app is not entitled for system.install.apple

There is a serious ownership/ permissions/ entitlements fault in my 10.7 install. What happened: 1) After swapping the stock drive for an Intel SSD of the same size in my Mac Mini 1,2 (2006 -ish?), ...
2
votes
0answers
1k views

Is there a way to turn off file system sandbox prompts for a specific app?

I have a Mac App Store app that needs to access various directories outside of the sandbox. To do so, it frequently prompts for permission. I fully trust this app, is there a way to grant it blanket ...
3
votes
1answer
8k views

How To Sandbox Individual Applications On OS X Mavericks

I am trying to Sandbox Firefox on OS X. I know on Linux, you have AppArmor. On Windows, you Sandboxie. Is there something built into OS X that will allow me to Sandbox individual applications?
2
votes
1answer
107 views

How can I get quicklook to ignore network volumes?

How can I modify com.apple.qtkitserver.sb to ignore a certain network volume? For example, I don't want quicklook to build previews of graphic assets that are on a server. When I access a netatalk ...
4
votes
1answer
55k views

Photos not uploading to photo stream or syncing with iCloud

So I have a heavy question that I haven't seen asked on ad, so, or su. Question -- My photos are not uploading from my iPhone nor iPhoto to my photo stream. Why? Background -- When I attempt to ...
6
votes
1answer
5k views

How to isolate an application from the system (fully sandboxed application)?

Is it possible to do something like the concept of sandboxing (like all apps on iOS have its own system software resources) for all existing applications (so - not while designing an own new ...
6
votes
3answers
14k views

What does lsboxd process do on os x?

My firewall asked me for a connection from lsboxd (module com.apple.ls.boxd, ) to one another computer in my network to the port tcp 548. What does it do? I found that it is a part of sandbox ...
2
votes
0answers
500 views

Sandboxing certain OSX apps

I am running multiple modern internet and cloud related services. Is it possible to limit their access to parts of my filesystem? For example Dropbox only needs access to its Dropbox shared folder.
5
votes
2answers
22k views

Console reports “sandboxd deny mach-lookup” … Should I modify system.sb?

I'm getting two errors in the console at the same time TimeMachine is running and taking FOREVER to make any progress. 1/4/13 9:41:38.000 PM kernel[0]: Sandbox: sandboxd(5838) deny mach-lookup com....
0
votes
1answer
7k views

Automatically Save Attachments in Mail.app in 10.8 Mountain Lion

I am trying to automatically save all email sent to one address (let's call it test@example.com) to this folder /Users/luomat/Dropbox/Incoming/e2w/ (where /Users/luomat = $HOME). Here is the rule ...
1
vote
1answer
911 views

Can you override app sandboxing, force app to use working directory?

I'm trying to configure asymptote on my mac, which is a mathematical graphing language for LaTeX. The program is a Unix command line utility. According to the configuring instructions at http://...
2
votes
2answers
1k views

Can Mac App Store purchased apps install Quicklook Plugins?

Since all apps are now sandboxed when purchased from the Mac App Store, what does this mean for the install process? Do you literally downoad the .app bundle, which gets placed into /Applications, and ...
9
votes
4answers
9k views

TextEdit shows dialogs about not having permission to open any files

About once per day, TextEdit starts showing dialogs like this when I try to open any file: The document “test.txt” could not be opened. You don’t have permission. To view or change permissions,...
3
votes
2answers
1k views

Sandbox admin privileges

I just downloaded the iAntivirus app from the Mac App Store. I wanted it to scan my whole hard drive for viruses, so it presented me with an Open dialog box pointing at the root of the hard drive (so ...