TLDR Tech / Practical
macOS sandbox flaws expose SSH keys and other sensitive data
Research shows that macOS sandbox settings for coding agents can still allow access to sensitive files like SSH keys, shell history, and login keychain data, even when write and network operations are restricted. Experiments with different Seatbelt profiles and a proxy indicated that preventing agents from reading files within the home directory is necessary for security, though this might impact tools that use local caches.
Read the full story