On Sat, Jun 1, 2013, at 11:45 AM, Cianflone, Chris wrote:
> I get the same output for our 32-bit and 64-bit builds.  Surely we must
> still be able to create temp files?

Spotlight importers run within a worker process; thus, they inherit the
sandbox of the worker process, not the sandbox of your app (which might
not even be running). Because these processes are run automatically by
the system with the permissions of the user, it makes sense to severely
restrict the worker's sandbox, or else the process can silently behave
in ways the user does not expect.

While it would probably be a good idea to file a request that Spotlight
importers be run within their owning app's sandbox container (thus
granting it access to the container's temp directory), I'm kind of
curious why your Spotlight importer needs to create temporary files at
all.

--Kyle Sluder
_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to