Hacker News new | past | comments | ask | show | jobs | submit login

Does it? On OpenBSD, Chrome cannot read my ~/.ssh directory, can the same guarantee be made on Mac?



Yes, you can write custom sandbox profiles and apply themselves to yourself using sandbox_init(3).


Good to know, but I don't need to write anything on OpenBSD. The protection is just enabled by default. That is more comforting to me as a user.


Certain programs have default protections applied to them, such as most App Store apps.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: