News for hackers. Stuff that matters.

A comment on macOS Containers v0.0.1. Parent comment

Re:macOS Containers v0.0.1 by slonopotamus on Tuesday September 26, 2023 @07:31AM (#37657730)
> Also not sure if it can be dynamically set by a parent process for a child?

Yes, it can. See sandbox-exec tool. And I actually plan to use it: https://github.com/macOScontainers/rund/issues/15

[ Parent | on HN ]
Re:macOS Containers v0.0.1 by lloeki on Tuesday September 26, 2023 @10:41AM (#37660111)
Oh my I totally forgot about sandbox-exec!

I played with it some time ago, can't recall the context but it was about build systems / packaging (maybe nix?), doing the configure/make/make install with reduced privileges.

[ Parent | on HN ]