On Oct 10, 2013, at 9:38 AM, Fritz Anderson <fri...@manoverboard.org> wrote:

> I can only speculate, but: If you can call out to a dynamic library, wouldn't 
> that make it possible to download a library and execute unapproved code? 
> Apple's not happy with downloadable executables other than JavaScript in the 
> WebKit sandbox.

Good point, but that’s avoidable by restricting dyld to only paths within the 
app’s bundle, which is immutable.
(I don’t know for certain, but this seems like something the sandbox can 
enforce.)

—Jens
_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to