Further experiments show that some disks can be ejected under sandbox, while others cannot. For example, CD, USB sticks, DMGs and some external drives can be ejected/unmounted, while other external drives and internal partitions cannot. The rule isn't that simple and seems to have many exceptions. I've found that some other developers have discovered this to be a bug of sandbox and filed it to Apple which ostensibly agreed that was a bug but they haven't fixed it so far.
> Probably not. That seems like a pretty serious operation; I would not > expect it to be available to sandboxed applications. With all respect, this sounds like again if Apple doesn't allow something, ergo you don't need it. There are many situations when apps may have legitimate needs to eject disks. If it requires a curated entitlement, Apple should have provided one. It is not a kind of case when an entitlement would be technically difficult or impossible to provide. So I tend to think it's a bug indeed. On Mon, Aug 12, 2013 at 8:21 PM, Kyle Sluder <k...@ksluder.com> wrote: > On Mon, Aug 12, 2013, at 08:28 AM, Oleg Krupnov wrote: > >> The "system.volume.internal.unmount entitlement" is not documented, > > This is an authorization right, not a sandbox entitlement. > >> and when I tried to add it to the list of entitlements, the app fails >> to start at all, saying not enough permissions. >> >> What's going on? Is there a way to eject/unmount disks in sandboxed mode? > > Probably not. That seems like a pretty serious operation; I would not > expect it to be available to sandboxed applications. > > --Kyle Sluder _______________________________________________ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
