Comment on macOS's Little-Known Command-Line Sandboxing Tool (2025)parentComments−simonw6moSandbox-exec covers everything I personally expect from a sandbox:- controls which files the process can read and write- controls what network access the process is allowed
Comments
Sandbox-exec covers everything I personally expect from a sandbox:
- controls which files the process can read and write
- controls what network access the process is allowed