App Sandbox entitlement

The sandboxing rules for system extensions vary by type:

• NetworkExtension providers must be sandboxed regardless of how they are packaged.

• EndpointSecurity system extensions do not support sandboxing.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

thnsk you eskimo for the answer .

is "App Sandbox entitlement" required for Driverkit ?

is "App Sandbox entitlement" required for Driverkit ?

I’m not really a up to speed on DriverKit but the fact that the macOS > DriverKit project template enables the App Sandbox suggests that they are.

ps There’s a separate topic area for DriverKit here no DevForums, Core OS > DriverKit, and you’re more likely to connect up with folks with DriverKit experience there.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Hi Quinn,

Does this imply that you cannot have both an ES and NE solution in one binary that can be delivered to our customers? Our controlling app assumes one connection to the driver and will be unpleasant to rewrite the comm part for macOS only.

Thanks

I’ve not actually tried this myself, but my understanding is that if you combine ES and NE in a single sysex then everything ends up running unsandboxed. Give it a whirl and let us know how you get along.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Thanks, Quinn. I actually got a response back from our Apple rep who said that since we're not MAS, we can make the NE unsandboxed and it should work.

I'll let you know how it goes when I get there, fighting another fire at the moment.