Re: sandbox question about copying from bundle
Re: sandbox question about copying from bundle
- Subject: Re: sandbox question about copying from bundle
- From: "Rick C." <email@hidden>
- Date: Mon, 25 Jun 2012 09:18:56 +0800
That does make sense I was just looking for a definitive answer... :-) Now I am writing my helper to the app support folder inside of my sandbox that's why I thought it might work, but it might not based on how you described it. And I'm guessing it might also be possible that with the inherit entitlement the helper app must reside inside of the bundle that it's inheriting from?
rc
On Jun 25, 2012, at 9:10 AM, Todd Heberlein wrote:
>> Yes that is right I was doing it wrong thank you very much! Now the only other issue I had was am I not allowed to write my helper app to my application support folder and send NSTask to it there? It seems this only works if I keep it inside of my bundle?
>
> I'm still a newbie with sandboxing, but it strikes me that that being able to execute a program located at an arbitrary location would break the sandbox concept. The rest below are just thoughts that come to mind…
>
>
> I had read somewhere that sandbox apps can still read files in POSIX-readable locations, or something like that, so you might want to try some experiments where NSTask starts some of the standard UNIX programs like
>
> /usr/bin/whoami
> /bin/ls
>
> If NSTask can do that, I suppose there is hope for running programs via NSTask that live outside your bundle. Next , try copying your helper program to /usr/bin/my_helper_app (or whatever it is called), and then try executing that.
>
> If that works, then you can run your helper app when it is one of those standard POSIX-readable locations. Unfortunately, I have no idea what those are.
>
> Todd
>
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden