Re:Facebook iOS App Scrapes Your Clipboard?
by danieldk on Monday October 19, 2015 @02:47AM
(#10411484)
Sandbox all you want but give me root level access then. Notepad++ may not need the GPS or Internet access[0], but I need it to be able to edit Visual Studio's config files when I ask it to, without having to ask VS for permission. Don't let programs have magic databases that are inaccessible by users.
OS X solves this quite elegantly. If an application is sandboxed, it cannot access files outside the sandbox directly. However, when an Open (or Save) dialog is requested, it is handled by a privileged daemon outside the process (it used to be pboxd). This daemon then makes the file or directory available in the sandbox after selection.
You still get app isolation, but it does not impede the user experience. (Of course, it does not apply for every scenario, but sandboxing is not a requirement outside the App store.)
OS X solves this quite elegantly. If an application is sandboxed, it cannot access files outside the sandbox directly. However, when an Open (or Save) dialog is requested, it is handled by a privileged daemon outside the process (it used to be pboxd). This daemon then makes the file or directory available in the sandbox after selection.
You still get app isolation, but it does not impede the user experience. (Of course, it does not apply for every scenario, but sandboxing is not a requirement outside the App store.)