NEfilterDataProvider file access Restrictions

I get the following error while trying to copy a file from Filter Bundle to the Documents Directory :

sandbox deny(1) file-write-create

Is any file write permission completely restricted in the FilterDataProvider?

The reason I need to copy the file to the Documents Directory is to make modifications to the file, which in my understanding I can't do directly to the file by accessing it from the Bundle.

How can I make modifications to a file from FilterDataProvider if the FilterDataProvider doesn't have any write permissions?

Is using the FilterControlProvider the only option to make any changes to a file?
Are the file's content's something you can save in the App Group container of the extension instead of writing files to disk?


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
I tried that out but I am having issues reading from the database.

With the Filter Control provider I can open the database as well as read from the database and store the contents.
With the Filter Data provider, I can list contents of the App group directory and see that the file exists. I also can open the database, but I am unable to read from the database. I am not even trying to write to the database.
This is not the expected behavior from Filter Data provider right?
If you create the file in the Network Extension and then try to access it for reading / writing are you able to then? If not, what errors do you see in the console?


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
NEfilterDataProvider file access Restrictions
 
 
Q