{"id":6098,"date":"2012-09-23T14:45:43","date_gmt":"2012-09-23T18:45:43","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=6098"},"modified":"2024-10-09T15:37:17","modified_gmt":"2024-10-09T19:37:17","slug":"aperture-3-4-sandboxing-and-flickrexport","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2012\/09\/23\/aperture-3-4-sandboxing-and-flickrexport\/","title":{"rendered":"Aperture 3.4, Sandboxing, and FlickrExport"},"content":{"rendered":"

Aperture 3.4<\/a> is now sandboxed<\/a> (via Fraser Speirs<\/a>). This initially caused some problems because it did not migrate my FlickrExport<\/a> preferences file from:<\/p>\n

~\/Library\/Preferences\/com.connectedflow.flickrexportaperture.plist<\/pre>\n
to:<\/p>\n
~\/Library\/Containers\/com.apple.Aperture\/Data\/Library\/Preferences\/com.connectedflow.flickrexportaperture.plist<\/pre>\n
FlickrExport thus didn’t find its preferences. It lost its Flickr API token, thought I hadn’t purchased, and lost my preferences for which keywords to hide. I re-added these, but it wasn’t until after I’d uploaded a set that I realized I had forgotten to re-enable the preferences to save the Flickr ID and URL back to Aperture. Thus, the options to replace photos and update metadata didn’t work until I’d copied and pasted all the photo IDs from the Web site. In retrospect, I should have moved the preferences file to the new location right after updating Aperture. Of course, I would have if I had known then that it was sandboxed.<\/p>\n
Knowing a bit about how Aperture works, I wondered how some of its features could be made to work in the App Sandbox<\/a>. The answer is that Apple plays by different rules. For example, my copy of Aperture isn’t from the Mac App Store, but it has access to iCloud. Third-party applications need to use clunky UI workarounds and security-scoped bookmarks<\/a> to access files outside of a document package; Apple simply gives Aperture a com.apple.security.temporary-exception.files.absolute-path.read-write<\/code> entitlement with value \/<\/code>, i.e. read-write access to the entire filesystem. Aperture also makes use of com.apple.security.temporary-exception.sbpl<\/code>, which Daniel Jalkut noted is the Big Red Button<\/a>.<\/p>\n
Also note that, aside from “com.apple.PhotoApps.AVCHDConverter.xpc” (presumably a codec), Aperture does not use XPC services<\/a> for privilege separation. The main Aperture application has full hard drive access, as well as being a network client, a network server, and all the rest.<\/p>\n
With so many entitlements and temporary exceptions, it doesn’t seem like “sandboxing” Aperture in this way provides many security benefits. Aperture isn’t protected from bugs in itself. And a malicious plug-in could read my address book (or, indeed, any file on my hard drive) and upload it over the network. However, it does restrict what plug-ins can do a bit. For example, Aperture has temporary exceptions for sending Apple events to Mail and iTunes; other event targets are forbidden. This means, for example, that you can no longer write a plug-in that integrates Aperture with Photoshop or Acorn.<\/p>\n
Here’s the full list of Aperture 3.4 entitlements:<\/p>\n
icarus$ codesign -d --entitlements - \/Applications\/Aperture.app|bbedit\nExecutable=\/Applications\/Aperture.app\/Contents\/MacOS\/Aperture\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-\/\/Apple\/\/DTD PLIST 1.0\/\/EN\" \"http:\/\/www.apple.com\/DTDs\/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n    <key>com.apple.application-identifier<\/key>\n    <string>F9L2L89K5X.com.apple.Aperture<\/string>\n    <key>com.apple.private.icloud-account-access<\/key>\n    <true\/>\n    <key>com.apple.security.app-sandbox<\/key>\n    <true\/>\n    <key>com.apple.security.assets.movies.read-write<\/key>\n    <true\/>\n    <key>com.apple.security.assets.music.read-only<\/key>\n    <true\/>\n    <key>com.apple.security.assets.pictures.read-write<\/key>\n    <true\/>\n    <key>com.apple.security.files.user-selected.read-write<\/key>\n    <true\/>\n    <key>com.apple.security.library-repair.extensions<\/key>\n    <array>\n        <string>photolibrary<\/string>\n        <string>aplibrary<\/string>\n    <\/array>\n    <key>com.apple.security.library-repair.ostype<\/key>\n    <array>\n        <string>iPlb<\/string>\n    <\/array>\n    <key>com.apple.security.network.client<\/key>\n    <true\/>\n    <key>com.apple.security.network.server<\/key>\n    <true\/>\n    <key>com.apple.security.personal-information.addressbook<\/key>\n    <true\/>\n    <key>com.apple.security.print<\/key>\n    <true\/>\n    <key>com.apple.security.temporary-exception.apple-events<\/key>\n    <array>\n        <string>com.apple.mail<\/string>\n        <string>com.apple.itunes<\/string>\n    <\/array>\n    <key>com.apple.security.temporary-exception.files.absolute-path.read-write<\/key>\n    <string>\/<\/string>\n    <key>com.apple.security.temporary-exception.mach-lookup.global-name<\/key>\n    <array>\n        <string>com.apple.photostream-agent<\/string>\n    <\/array>\n    <key>com.apple.security.temporary-exception.mach-lookup.global-name:before:10.8<\/key>\n    <array>\n        <string>com.apple.AOSNotification-FMM<\/string>\n    <\/array>\n    <key>com.apple.security.temporary-exception.sbpl<\/key>\n    <string>\n        (begin\n            (allow file-search)\n            (allow ipc-posix-sem)\n            (allow system-fsctl))\n    <\/string>\n    <key>com.apple.security.temporary-exception.shared-preference.read-only<\/key>\n    <array>\n        <string>com.apple.iPhoto<\/string>\n    <\/array>\n    <key>com.apple.security.temporary-exception.shared-preference.read-write<\/key>\n    <array>\n        <string>com.apple.Aperture<\/string>\n        <string>com.apple.iApps<\/string>\n        <string>com.apple.iLifePhotoStream<\/string>\n        <string>com.apple.iLifeAssetManagement.agent<\/string>\n        <string>com.apple.iLifeAssetManagement.crash<\/string>\n        <string>com.apple.iLifePhotoStream.importstatus<\/string>\n        <string>MobileMeAccounts<\/string>\n        <string>com.apple.ImageCapture2<\/string>\n        <string>com.apple.mcxprinting<\/string>\n    <\/array>\n<\/dict>\n<\/plist>\n<\/pre>","protected":false},"excerpt":{"rendered":"
Aperture 3.4 is now sandboxed (via Fraser Speirs). This initially caused some problems because it did not migrate my FlickrExport preferences file from: ~\/Library\/Preferences\/com.connectedflow.flickrexportaperture.plist to: ~\/Library\/Containers\/com.apple.Aperture\/Data\/Library\/Preferences\/com.connectedflow.flickrexportaperture.plist FlickrExport thus didn’t find its preferences. It lost its Flickr API token, thought I hadn’t purchased, and lost my preferences for which keywords to hide. I re-added these, but […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2024-10-09T19:37:19Z","apple_news_api_id":"11fc501a-47b1-41bd-8a08-2f80ffa84e6c","apple_news_api_modified_at":"2024-10-09T19:37:19Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/AEfxQGkexQb2KCC-A_6hObA","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[114,38,116,115,30,32,53,2669,1227],"class_list":["post-6098","post","type-post","status-publish","format-standard","hentry","category-technology","tag-aperture","tag-apple","tag-flickr","tag-flickrexport","tag-mac","tag-macapp","tag-sandboxing","tag-security-scoped-bookmarks","tag-top-posts"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/6098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=6098"}],"version-history":[{"count":6,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/6098\/revisions"}],"predecessor-version":[{"id":6104,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/6098\/revisions\/6104"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=6098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=6098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=6098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}