| SANDBOX_INIT(3) | Library Functions Manual | SANDBOX_INIT(3) |
sandbox_init,
sandbox_free_error — set
process sandbox (DEPRECATED)
#include
<sandbox.h>
int
sandbox_init(const char
*profile, uint64_t flags, char
**errorbuf);
void
sandbox_free_error(char
*errorbuf);
The
sandbox_init()
and
sandbox_free_error()
functions are DEPRECATED. Developers who wish to sandbox
an app should instead adopt the App Sandbox feature described in the App
Sandbox Design Guide.
The
sandbox_init()
function places the current process into a sandbox(7). The
NUL-terminated string profile specifies the profile to
be used to configure the sandbox. The flags specified
are formed by
or'ing the
following values:
SANDBOX_NAMEDThe out parameter *errorbuf will be set according to the error status.
Upon successful completion of
sandbox_init(), a value of 0 is returned and
*errorbuf is set to NULL. In the event of an error, a
value of -1 is returned and *errorbuf is set to a
pointer to a NUL-terminated string describing the error. This string may
contain embedded newlines. This error information is suitable for developers
and is not intended for end users. This pointer should be passed to
sandbox_free_error(3) to release the allocated storage
when it is no longer needed.
The following are brief descriptions of each available profile. Keep in mind that sandbox(7) restrictions are typically enforced at resource acquisition time.
kSBXProfileNoInternetkSBXProfileNoNetworkkSBXProfileNoWritekSBXProfileNoWriteExceptTemporarykSBXProfilePureComputation| March 9, 2017 | Mac OS X |