RSSAmplifier

Blog

Mark Rowe

bdash.net.nzRSS feed ↗2 posts

Latest posts

TCC and the macOS Platform Sandbox Policy

Background What is TCC? TCC is a subsystem on macOS that is responsible for managing which applications a user has permitted to access certain resources. Its full name is "Transparency, Consent and Control". If you've ever seen an "Application" would like to access the camera prompt… that's TCC. TCC is used to gate access to resources that Apple considers to be sensitive. Protected…

Sandboxing on macOS

Background This is an overview of macOS's built-in support for application sandboxing. It covers how sandboxing behaves from an application's perspective, how sandbox policies are expressed, and how they're enforced by the macOS kernel. The goal is to help developers for non-Mac platforms understand what sandboxing entails on the Mac, and to provide macOS developers with a deeper…