Security updates

Learn about important changes to Security.

Overview

Browse notable changes in Security.

Prepare to handle errors in your app’s file access actions if your app doesn’t adopt the App Sandbox Entitlement and tries to access files in another app’s App Sandbox container. The exception to this occurs when the person using your app permits access those files.

Define launch constraints to limit which apps and processes can launch your macOS apps and helper tools. For more information, see Defining launch environment and library constraints.
Define library constraints to limit which plug-ins and dynamic libraries your macOS process can load.
App Sandbox now associates your macOS app with its sandbox container using its code signature. The operating system asks the person using your app to grant permission if it tries to access a sandbox container associated with a different app. For more information, see Accessing files from the macOS App Sandbox.