alt Hacker News> sshd(8): On OS X SDK >= 27, sandboxing is no longer supported as the API we depended upon has been removed and no obvious alternative provided.
https://github.com/openssh/openssh-portable/commit/d4b4c304a...
Replies
mrpippy • yesterday at 10:43 PM
I look forward to seeing if Apple makes any changes in the fork they ship with the OS: https://github.com/apple-oss-distributions/OpenSSH.
"Updated sandbox for privilege-separated pre-authorization sshd process" is listed as a modification to the open-source project, but I suspect this is out-of-date.
➕ show 1 reply
saagarjha • today at 12:16 AM
I’m confused why they can’t just write a sandbox profile that does the equivalent
➕ show 1 reply
Deprecated since Mountain Lion. https://issuetracker.google.com/40474030
It’s what Apple experimented with before they came up with the current entitlements system.