[Openmcl-devel] Lisp in Leopard
Bill St. Clair
wws at clozure.com
Tue Oct 30 06:27:03 PDT 2007
In reading John Siracusa's review of Leopard (
http://arstechnica.com/reviews/os/mac-os-x-10-5.ars/ ), I encountered
a reference to the sandbox definitions in /usr/share/sandbox .
Interestingly, to this lisp weenie, they're encoded in lisp-like
syntax. For example, here's /usr/share/sandbox/bsd.sb :
;; common rules for various BSD daemons
;; Copyright (c) 2007 Apple Inc. All Rights reserved.
;; WARNING: The sandbox rules in this file currently constitute
;; Apple System Private Interface and are subject to change at any time and
;; without notice. The contents of this file are also auto-generated and not
;; user editable; it may be overwritten at any time.
(allow file-read-data file-write-data
; Allow files accessed by system dylibs and frameworks
(allow file-read-data file-read-metadata
; Allow reading system dylibs and frameworks
(allow ipc-posix-shm) ; Libnotify
More information about the Openmcl-devel