How App Sandbox Limits a Mac Disk Cleaner and How DiskWise Handles It
DiskWise, a Mac disk-cleaning app, ships two separate builds — one for the Mac App Store (sandboxed) and one for direct download — because Apple's App Sandbox significantly restricts which files an app can access without explicit user permission. The sandboxed version can only scan the home directory and /Applications, while the direct build also covers system-level paths like /Library, /Volumes, and /usr/local. To access ~/Library, the sandboxed app prompts the user to manually grant permission once, storing a security-scoped bookmark so the access persists across launches. The developers also flagged a silent bug where NSHomeDirectory() returns a misleading container path inside the sandbox, causing the app to scan an empty folder with no error — fixed by reading the home directory from the system password entry instead. The post documents each architectural difference with references to the public GitHub repository, serving as a practical guide for developers building sandboxed utilities that need access to other apps' data.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in