update.tproj/update.sb

   1 ;; Copyright (c) 2007 Apple Inc.  All Rights reserved.
   2 ;;
   3 ;; WARNING: The sandbox rules in this file currently constitute
   4 ;; Apple System Private Interface and are subject to change at any time and
   5 ;; without notice. The contents of this file are also auto-generated and not
   6 ;; user editable; it may be overwritten at any time.
   7 ;;
   8 (version 1)
   9 (debug deny)
  10 (allow process-exec (regex #"^/usr/sbin/update$"))
  11 (allow sysctl-read)
  12 (allow file-read-data file-read-metadata
  13   (regex #"^/usr/lib/.*\.dylib$"
  14          #"^/var"
  15          #"^/private/var/db/dyld/"
  16          #"^/dev/urandom$"
  17          #"^/dev/dtracehelper$"))
  18 (deny default)