Hacker News new | past | comments | ask | show | jobs | submit login

All the sandbox entitlement files are written in that scheme-like syntax, but it's limited to that in OS X as far as I've seen.



It seems to be an actual Lisp-1 dialect, not just Scheme-like syntax. In (Lion's version of) application.sb, there are a whole bunch of lambdas and letrecs flying around. They even define a macro.


It's specifically TinyScheme, with one every-so-small modification to the parser.

This PDF goes into it in some detail: http://securityevaluators.com/files/papers/apple-sandbox.pdf


Interesting, I never really dug too deep into it, aside from making a couple of changes and standard entitlement stuff for applications. application.sb looks like a complete nightmare to maintain.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: