Re: Sandboxed Gnome apps

[Bastien Nocera <hadess hadess net>]

On Fri, 2014-09-05 at 18:26 +0200, Piñeiro wrote:
> On 09/04/2014 07:05 PM, Alexander Larsson wrote:
> >    
> > 5. Sandboxing APIs
> >
> >    In a sandboxed environment app code doesn't have access to most of
> >    the host system. However, apps still need some ways to securely
> >    access various services (like users files, hw, host services, etc).
>
> Add to that list "accessibility". And probably some accessible tools
> will not be able to be sandboxed. For example, that is a limit on
> current Apple sandboxing [1]

Apple's sandboxing doesn't allow you to sandbox the a11y application,
but applications still have a11y support[1]. That's fine, things like
the screen reader, zoom, etc. are already considered part of the system
in GNOME.

Cheers

[1]: "With App Sandbox, you can and should enable your app for
accessibility, as described in Accessibility Overview for OS X. However,
you cannot sandbox an assistive app such as a screen reader, and you
cannot sandbox an app that controls another app."

> [1]
> https://developer.apple.com/library/mac/documentation/security/conceptual/AppSandboxDesignGuide/DesigningYourSandbox/DesigningYourSandbox.html