Re: Sandboxing and NSTask

2011-08-14 Thread Scott Ribe
On Aug 14, 2011, at 2:59 PM, Andrew Satori wrote: > When I enable the sandboxing it all goes into the toilet. As far as I can > tell, the NSTask calls are not inheriting the sandbox entitlements and are > there fore failing to be able to have any file IO against the container. I think I'd crea

Re: Sandboxing and NSTask

2011-08-14 Thread Kyle Sluder
I believe the recommended advice would be to move to XPC services, which can be separately entitled. But all of your apps should automatically receive permission for ~/Library/Application Support/$COMPANY_NAME. We recently had to update OmniGraffle to look in ~/Library/Application Support/The O

Sandboxing and NSTask

2011-08-14 Thread Andrew Satori
Having spent the weekend trying to migrate to supporting sandboxing, I think I have hit a snag that may well be terminal. The situation: My application contains a bundle that embeds a set of programs (a local instance of the PostgreSQL RDMS). Outside of the sandbox, it properly creates the