Apple Sandboxes Part 1 at Useful Security: "Linux isn’t the only operating system with activity in the enhanced access control department. Apple recently released Mac OS X 10.5 Leopard, which includes a new feature called a sandbox (or seatbelt, depending on where you’re looking) as well. I delved into the sandbox mechanisms a bit and wanted to report my findings."

Labels: entitlements, sandbox, sandbox policy language