The xpc service accesses some information in the user's Contacts and passes that information back to the app. The GitFinder app does not have the sandbox entitlement to access a user's Contacts ( -information.addressbook), but the GitFinder app does embed an xpc service with that sandbox entitlement. Although GitFinder is distributed outside the Mac App Store, the developers nonetheless chose to sandbox it. This is a follow-up to my earlier blog post as well as a response to a a blog post by the developers of GitFinder that was highlighted by Michael Tsai. To support this blog please buy my apps StopTheMadness and Underpass Articles index Hardened Runtime and Sandboxing Revisited Novemby Jeff Johnson
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |