Under the hood
Useful1 Signal2
The sandbox startup sweep records whether the denied thing it deleted was a file or directory.
What's wrong with this entry?
Anonymous. No account, no email.
What
When the startup sweep removes a denied path that had been replaced and is no longer a symlink, it now records whether the removed thing was a directory, a file, something else or unknown, alongside the existing debug log.
Evidence
tengu_sandbox_scrub_removed_non_symlink
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox