Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
Internal ChangesKind: in v2.1.299,
Internal ChangesSection of the release
What
The sandbox checks whether a path was redirected somewhere else by a symlink, a file that points to another location. That check no longer has two separate rules for paths that already start with /private/tmp/ or /private/var/. An earlier step in the same check already gives the same answer for these paths, so they are treated as before. The rules that link /tmp and /var to their /private versions remain.
Why
This check decides which paths count as redirected, which matters for security. Removing the duplicate rules leaves the result for these paths the same.
