Skip to content
This repository
Browse code

Restricted file system entitlements to be narrower (/Users and /Volum…

…es). This will help us with the App Store review process, and it should be sufficient for 99% of the users.
  • Loading branch information...
commit 8ecfa478077dd52b257bc519086cfe2be625e9df 1 parent 4a45d79
peterb180369 authored April 03, 2012
5  com.karelia.imedia.Aperture.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
5  com.karelia.imedia.FireFox.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
5  com.karelia.imedia.Flickr.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
6  com.karelia.imedia.GarageBand.entitlements
@@ -6,7 +6,11 @@
6 6
 	<true/>
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
  9
+	<key>com.apple.security.assets.music.read-write</key>
  10
+	<true/>
9 11
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  12
+	<array>
  13
+		<string>/Library/Application Support/GarageBand/GarageBand Demo Songs/GarageBand Demo Songs/</string>
  14
+	</array>
11 15
 </dict>
12 16
 </plist>
5  com.karelia.imedia.Lightroom.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
5  com.karelia.imedia.OmniWeb.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
5  com.karelia.imedia.Safari.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
5  com.karelia.imedia.folder.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
7  com.karelia.imedia.iPhoto.entitlements
@@ -6,7 +6,10 @@
6 6
 	<true/>
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9  
-	<key>com.apple.security.temporary-exception.files.absolute-path.read-only</key>
10  
-	<string>//</string>
  9
+	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
5  com.karelia.imedia.iTunes.entitlements
@@ -7,6 +7,9 @@
7 7
 	<key>com.apple.security.app-sandbox</key>
8 8
 	<true/>
9 9
 	<key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
10  
-	<string>//</string>
  10
+	<array>
  11
+		<string>/Volumes/</string>
  12
+		<string>/Users/</string>
  13
+	</array>
11 14
 </dict>
12 15
 </plist>
4  iMedia.xcodeproj/project.pbxproj
@@ -902,7 +902,7 @@
902 902
 		D0E96CE015189FAC004F3EE7 /* IMBFolderParserMessenger.m */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.objc; path = IMBFolderParserMessenger.m; sourceTree = "<group>"; };
903 903
 		D0E96CE41518A296004F3EE7 /* IMBImageFolderParserMessenger.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = IMBImageFolderParserMessenger.h; sourceTree = "<group>"; };
904 904
 		D0E96CE51518A297004F3EE7 /* IMBImageFolderParserMessenger.m */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.objc; path = IMBImageFolderParserMessenger.m; sourceTree = "<group>"; };
905  
-		D0E96CEA1518C97B004F3EE7 /* com.karelia.imedia.Folder.entitlements */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = file; path = com.karelia.imedia.Folder.entitlements; sourceTree = "<group>"; };
  905
+		D0E96CEA1518C97B004F3EE7 /* com.karelia.imedia.Folder.entitlements */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text.xml; path = com.karelia.imedia.Folder.entitlements; sourceTree = "<group>"; };
906 906
 		D0E96D021518C9BF004F3EE7 /* com.karelia.imedia.Folder.xpc */ = {isa = PBXFileReference; explicitFileType = wrapper.cfbundle; includeInIndex = 0; path = com.karelia.imedia.Folder.xpc; sourceTree = BUILT_PRODUCTS_DIR; };
907 907
 		D0E96D1A104410BD0015979F /* IMBPanelController.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = IMBPanelController.h; sourceTree = "<group>"; };
908 908
 		D0E96D1B104410BD0015979F /* IMBPanelController.m */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.objc; path = IMBPanelController.m; sourceTree = "<group>"; };
@@ -1636,11 +1636,11 @@
1636 1636
 		D0B6FAA21043227A00280DDC /* GarageBand */ = {
1637 1637
 			isa = PBXGroup;
1638 1638
 			children = (
1639  
-				D054AFED152984ED00EBFA1C /* com.karelia.imedia.GarageBand.entitlements */,
1640 1639
 				D054AFE8152984C300EBFA1C /* IMBGarageBandParserMessenger.h */,
1641 1640
 				D054AFE9152984C300EBFA1C /* IMBGarageBandParserMessenger.m */,
1642 1641
 				D02D17581081CF3B00142E8A /* IMBGarageBandParser.h */,
1643 1642
 				D02D17591081CF3B00142E8A /* IMBGarageBandParser.m */,
  1643
+				D054AFED152984ED00EBFA1C /* com.karelia.imedia.GarageBand.entitlements */,
1644 1644
 			);
1645 1645
 			name = GarageBand;
1646 1646
 			sourceTree = "<group>";

0 notes on commit 8ecfa47

Please sign in to comment.
Something went wrong with that request. Please try again.