sandbox

I am trying to use How can I create a secure Lua sandbox? to build my own leaky sandbox. I am trying to create a Lua sandbox where some Lua functions can access some other Lua functions outside the sandbox. For example I want my sandbox to have a special "display" function which can call "print" but not have "print" in the sandbox too. The main problem is that I am trying to build a sandbox within an already large codebase, so I cannot nil away functions. How is this possible? The solution has to be a pure Lua function due to no fault of mine. When you create a sandbox, you do it by cherry

I have an OS X app, which stores an app-scoped bookmark to persist access to certain directories. I am able to write to those directories without any problems, but there is a part in my code where I want to make an extra check to confirm that the path is writable and it fails. var fileManager: NSFileManager = NSFileManager.defaultManager() var baseUrl: NSURL = try! NSURL(byResolvingBookmarkData: data, …) var fileUrl: NSURL = url.URLByAppendingPathComponent("foo.txt") // Changing this order has no effect, I make only the first start access call, // the second one is to demonstrate that it's not

This question already has an answer here: Please login to use the PayPal sandbox feature 5 answers I am using the PayPal sandbox to make test payments. It was working fine since last 3-4 months. But I see that they are making changes in sandbox design, ways to manage test email accounts, etc. They have disabled my actual sandbox account and asks me to login using real PayPal account. So I created a new sandbox ( https://developer.paypal.com/ ) account using my PayPal account. I imported test emails from my old sandbox account, and started making test payments. But it didn't work. I deleted all

I am adapting a MacOS application to use sandboxing. It uses a helper application (an exe in the same bundle) that fails when I try calling CFMessagePortCreateRemote with a 'deny mach-lookup' message in the console. I can see the com.apple.security.temporary-exception.mach-lookup.global-name entitlement key could solve this, but it is only temporary. Is there a way to achieve a communication between two apps with a mach port in a sandboxed application? Errors: let port = CFMessagePortCreateLocal(nil, "XXXYYYZZZZ.MyAppGroupName" as CFString, Callback, nil, nil) let runLoopSource =

There seems to be a problem with the TOpenDialog in a Firemonkey application, which is sandboxed for the Mac Appstore. I use XE3, but it is also present in XE2. I actually found a QC report here, but it is still unresolved: http://qc.embarcadero.com/wc/qcmain.aspx?d=105344 Has anyone had the same problem, or any ideas how to work around it? It is very easy to check. Just put a TOpenDialog on a form and call the Execute method. Sign and sandbox the application according to the Embarcadero instructions: http://docwiki.embarcadero.com/RADStudio/en/Mac_OS_X_Application_Development When Execute is

I processed drag operation from browser view to custom view.It work well in snow lepoard,but not in Mountain Lion with sandbox. in browser view: NSMutableArray* urls = [[[NSMutableArray alloc] init] autorelease]; ..............put some NSUrl to urls array.................... [pasteboard writeObjects:[NSArray arrayWithArray:urls]]; in my receive custom view: NSArray* pasteboardItems = [pasteboard readObjectsForClasses:[NSArray arrayWithObject:[NSString class]] options:nil]; NSArray* pasteboardItems2 = [pasteboard readObjectsForClasses:[NSArray arrayWithObject:[NSURL class]] options:nil];

Apple has decreed that all applications submitted to the Mac App Store must be sandboxed, starting in November. Ok, but how can I "sandbox" my app? I found the official Apple's guide Code Signing And Application Sandboxing Guide . This document lists the following steps: 1) "Enable sandboxing for your application." Ok, easy: I have to open Xcode 4, select the project, select the target, go to the Summary tab and check: "Enable Entitlements" "Enable App Sandboxing" ...and every single entitlement I'm interested in. 2) Then: "Once you have created a basic entitlements profile, you should sign