SandboxingI did the same for now. At the Developer forums I got this reply from someone who had the exact same issues with using sem_open in a Sandbox.

I'm on the lookout for any information about temporary exception entitlements that can be applied to named semaphores.

In keeping with the spirit of information wants to be free, I present here:

http://reverse.put.as/wp-content/uploads/2011/09/Apple-Sandbox-Guide-v1.0.pdf

In particular, I'm looking for a solution that both works on 10.7.4 and Mountain Lion.

UPDATE: Here's an example of an entitlement for shared memory and semaphores:

  <key>com.apple.security.temporary-exception.sbpl</key>
    <string>
        (begin
            (allow ipc-posix-sem)
            (allow ipc-posix-shm)
    </string>



Labels: entitlements, hacking osx, quarantine bit, sandbox

Red Sweater Blog – The Sandbox’s Big Red Button: "(if (entitlement 'com.apple.security.network.client') (allow network-outbound (remote ip)))"

A nice article about the language used to express Sandboxing entitlements. Looks a lot like LISP.

Labels: entitlements, mountain lion, quarantine bit, sandbox

Issue 156 - soundflower

OK, I seem to have found a fix for this. The problem seems to be that the installer gets 'quarantined' because of an unrecognised certificate. This is marked against the file by an extended attribute. You need to clear the attribute to allow the installer to run again. The command for this is:

xattr -c

The installer will run after this. It throws up a certificate error but you can tell the system to trust it. For some reason, the install ran completely clean...

More about the xattr command at developer.apple.com.

Labels: gatekeeper, quarantine bit

Securosis Blog | OS X 10.8 Gatekeeper in Depth

An nice article about the quarantine bit and how it interacts with Gatekeeper and Developer ID under Mountain Lion.

Labels: developerid, gatekeeper, mountain lion, quarantine bit