Skip to content
Discussion options

You must be logged in to vote

App Sandbox

Enable managed file access

The first time the user launches your sandboxed app, the system creates its container — a folder in ~/Library/Containers that your app has exclusive read-write access to.

To minimize the risk to user data, the system restricts your app’s file system access to just its container, but that container does include a number of symbolic links that resolve to common user folders, such as ~/Downloads and ~/Pictures. However, the system considers those sensitive folders and requires that your app include certain entitlements before it grants access to the resolved locations of the symbolic links. An unauthorized attempt to access one of those folders results…

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by ACTCD
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants