News for hackers. Stuff that matters.

A comment on An Embarrassing Bug in Mac App Sandboxing. Parent comment

Re:An Embarrassing Bug in Mac App Sandboxing by coldtea on Wednesday March 06, 2013 @10:14AM (#5331512)
>Sandboxing is utterly broken. If you want a real hellride try to load 'sandbox unsafe' Audio Units (read: every non-Apple AU, though many Apple AUs aren't safe either) into a sandboxed application.

How does that prove that sandboxing is broken, much less "utterly"? You should NOT be able to load unsafe AUs into a sandboxes application.

And I'm not sure "temporary entitlement" was developed to allow this kind of thing. Sounds like an abuse of it.

[ Parent | on HN ]
Re:An Embarrassing Bug in Mac App Sandboxing by kybernetyk on Wednesday March 06, 2013 @03:26PM (#5333625)
> I'm not sure "temporary entitlement" was developed to allow this kind of thing. Sounds like an abuse of it.

The entitlement is called 'com.apple.security.temporary-excaption.audio-unit-host'.

[ Parent | on HN ]
Re:An Embarrassing Bug in Mac App Sandboxing by coldtea on Thursday March 07, 2013 @09:55AM (#5337883)
LOL. In this case, it sounds like a really by-the-book use of it.

In also sounds like a kludge way to solve the AU sanboxing issue from Apple's part.

[ Parent | on HN ]