Sandbox/OS X Rule Set: Difference between revisions

Sandbox/OS X Rule Set (view source)

719 bytes added , 17 September 2016

sandbox level updates

202

edits

@@ Line 752: / Line 752: @@
 = How security.sandbox.content.level Affects File Access (Planned) =
+R = read
+W = write
+read metadata = file contents are not readable, but file metadata is
 {| class="wikitable sortable"
@@ Line 757: / Line 761: @@
 ! Sandbox Level !! Access Type !! Subpaths? !! Path
 |-
-| 1 || R || yes || /foo
+| ? || read metadata || no || /etc
 |-
-| 2 || W || yes || /foo
+| ? || read metadata || no || /tmp
 |-
-| 2 || R || yes || HOME
+| ? || read metadata || no || /var
 |-
-| 3 || W || yes || HOME
+| ? || read metadata || no || /private/etc/localtime
 |-
-| 3 || R || yes || /etc
+| ? || read metadata || no || *
 |-
-| 1 || W || yes || /etc
+| ? || read metadata || no || /home
+|-
+| ? || read metadata || no || /net
+|-
+| ? || read metadata || no || /private/var/folders/...
+|-
+| ? || read metadata || no || ~/Library
+|-
+| ? || read || no || /dev/autofs_nowait
+|-
+| ? || read || no || /dev/random
+|-
+| ? || read || no || /dev/urandom
+|-
+| ? || read || no || /
+|-
+| ? || read || no || /private/tmp
+|-
+| ? || read || no || /private/var/tmp
+|-
+| ? || read || no || ~/.CFUserTextEncoding
+|-
+| ? || read || no || ~/Library/Preferences/com.apple.DownloadAssessment.plist
+|-
+| ? || read || no || ~/Library/Preferences/.../...plist
 |}