Hacker News new | ask | show | jobs
by joethompson 4799 days ago
All the sandbox entitlement files are written in that scheme-like syntax, but it's limited to that in OS X as far as I've seen.
1 comments

It seems to be an actual Lisp-1 dialect, not just Scheme-like syntax. In (Lion's version of) application.sb, there are a whole bunch of lambdas and letrecs flying around. They even define a macro.
It's specifically TinyScheme, with one every-so-small modification to the parser.

This PDF goes into it in some detail: http://securityevaluators.com/files/papers/apple-sandbox.pdf

Interesting, I never really dug too deep into it, aside from making a couple of changes and standard entitlement stuff for applications. application.sb looks like a complete nightmare to maintain.