MacOS Sandbox
Introduction
<WIP>
Tooling
log
sandbox-exec
Profiles
<default ones found in /System/Library/Sandbox/Profiles/*>
<explain customized nixpkgs sandbox profile>
Methodology
<provide useful predicates>
<sandbox true vs sandbox relaxed>
<WIP>
<default ones found in /System/Library/Sandbox/Profiles/*>
<explain customized nixpkgs sandbox profile>
<provide useful predicates>
<sandbox true vs sandbox relaxed>