What is sandboxd?

sandboxd is a core macOS security process that keeps apps in check.

What is sandboxd?

sandboxd runs the App Sandbox, the macOS security feature that limits what each app can reach. Sandboxed apps can only use their own files, files the user picks (through Open or Save windows), and certain system resources they have been given rights to use.

What does it limit?

For sandboxed apps, sandboxd restricts:

• File access (limited to the app's own folder and files the user picks)
• Network access (must be declared in the app's rights)
• Hardware access (camera, microphone, both need user approval)
• Talking to other processes (limited to approved channels)
• System services (restricted based on declared rights)

Which apps are sandboxed?

All Mac App Store apps must be sandboxed. Many apps sold outside the App Store also use sandboxing by choice. System processes have their own sandbox rules.

Does sandboxing cause problems?

Sometimes. Sandboxed apps cannot do everything that unsandboxed apps can. They may not be able to reach any file they want, talk freely to other apps, or use certain system features. This is why some professional tools (like development software) are not sandboxed.

Should you worry?

No. sandboxd protects you by limiting what apps can do. It is one of the most important security features on macOS.

Enjoyed this post?

Well, you could share the post with others, follow me with RSS Feeds and/or send me a comment via email.

Tags