What's wrong with this entry?
Anonymous. No account, no email.
What
More granular Unix socket permissions in the macOS sandbox.
Details
- Changed from broad
network*permission to specificnetwork-bindandnetwork-outboundfor Unix sockets - Adds
AF_UNIXsocket domain permission explicitly - Improves security by limiting socket access to specific paths
Evidence
Sandbox socket rules (search for "(allow system-socket (socket-domain AF_UNIX))")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.