Identify which macOS apps are sandboxed and view their entitlements

with Peter Borg's Sandkorn. Notable constraint mentioned in the FAQ:

"A normal app consists of many files and folders and Sandkorn checks it to see if it can find any more executables that have entitlements. For performance reasons it only checks a limited amount of subfolders and these are at the moment:

• Contents/Helpers
• Contents/PlugIns
• Contents/XPCServices
• Contents/Library/Automator
• Contents/Library/LaunchServices
• Contents/Library/LoginItems
• Contents/Library/QuickLook
• Contents/Library/Spotlight"

Be sure to check out Peter's venerable launchd editor and text editor as well.

❧ 2025-12-27