Checking Code Signing and Sandboxing Status in Code – Ole Begemann
Can we do the same in code? Yes we can. With a lot of help from my coworkers Jörg Jacobsen (see his work on XPC and Sandboxing for the iMedia framework) and Christian Beer (who pointed me to the source code for the codesign utility), I wrote a category on NSBundle that can tell you for any application bundle: · whether it has a valid code signature, · whether it is sandboxed and · whether it was downloaded from the Mac App Store."

Labels: codesign, entitlements, sandbox