otakustay
2014-12-15 22:14:36 +08:00
这事有些奇怪，不知道有没有熟悉Sandbox机制的人……
QQ在选择接收文件存放目录的时候，是会提示要授权的，可见Sandbox应该还是很严格的，不至于允许这样乱读目录才对。感觉应该是QQ尝试去读了，但Sandbox会拒绝这些读取的操作，因此MAS版的QQ还是安全的
In addition, the system automatically permits a sandboxed app to:
Connect to system input methods
Invoke services chosen by the user from the Services menu (only those services flagged as “safe” by the service provider are available to a sandboxed app)
Open files chosen by the user from the Open Recent menu
Participate with other apps by way of user-invoked copy and paste
Read files that are world readable, in certain directories, including the following directories:
/bin
/sbin
/usr/bin
/usr/lib
/usr/sbin
/usr/share
/System
Read and write files in directories created by calling NSTemporaryDirectory.
Note: The /tmp directory is not accessible from sandboxed apps. You must use the NSTemporaryDirectory function to obtain a temporary location for your app’s temporary files.