.. _app-sandbox_arch:

=======================
Apple App Sandbox架构
=======================

Apple App Sandbox的目标是构建系统的数据安全隔离

.. note::

   通过Mac App Store分发的macOS应用都必须激活App Sandbox能力

参考
======

- `Developer Documentation: App Sandbox <https://developer.apple.com/documentation/security/app-sandbox>`_
- `A quick glance at macOS' sandbox-exec <https://jmmv.dev/2019/11/macos-sandbox-exec.html>`_
- `Sandboxing a third-party macOS app to restrict writing to one folder <https://7402.org/blog/2020/macos-sandboxing-of-folder.html>`_
- `GitHub: lynaghk/sandboxtron <https://github.com/lynaghk/sandboxtron>`_
- `macOS: App sandboxing via sandbox-exec <https://www.karltarvas.com/macos-app-sandboxing-via-sandbox-exec.html>`_