On 18 Oct 2017, at 06:21, Andrew Keller <andrew@...> wrote:
"deny mach-lookup com.apple.nsurlstorage-cache” sounds exactly like the OS denying something because the app isn’t provisioned for that capability, but I’m having trouble identifying which provision I need to turn on in Xcode.
I believe URL access requires com.apple.security.files.bookmarks.app-scope entitlement in a sandboxed app.
That one by itself didn’t change the symptoms of the issue.
However, upon clicking on random buttons on the Entitlements screen, it seems that `com.apple.security.network.client` does make the example app work while sandboxed.
I just tried this: App Sandbox Network [checked] Outgoing Connections (Client)
and now it seems to work.
Excellent idea!
I would never have guessed that an app which does not use any outgoing connections at all needs this entitlement.
