o9h.netlify.com

• Vulkan Runtime Libraries
• Shared Libraries
• Vulkan Dota 2

2015-7-2  I'm trying to link to a library from another library using CMake and Xcode. This is an issue for any library, but to make things easier to convey, let's use zlib as an example. This seems to work for executables as follows. Xcode中，想要导入整个一个库的对应的文件夹及其下所有文件， 但是导入后，编译时，项目出错 折腾了半天才发现： 原来导入项目的那个文件夹，实际上没有导入到当前项目 而还是在别的地方的位置： 因此导致项目编译出错。 现在需要： 搞清楚Xcode中，如何把整个文件夹，以及文件夹内所有的.

Note: This chapter describes property list keys specific to the macOS implementation of App Sandbox. They are not available in iOS.

In your macOS Xcode project, configure fine-grained security permissions by enabling settings in the Summary tab of the target editor. These settings, in turn, add Boolean values to entitlement keys in the target’s .entitlementsproperty list file. The values are then incorporated into the target’s code signature when you build the project.

You can think of using App Sandbox entitlements as a two-step process:

• 2019-7-24  If anyone else has this issue, there is a a setting in build setting for which will set which c libraries to use (libc is now default). In my case I simply changed the minimum system to something recent, Xcode then will seset the critical bits for you.
• How to Link with a Static Library in XCode. Go to your Project's Build Phases; Click on the '+' under 'Link Binary With Libraries' to add a new library. Then click on the 'Add Other' button. Navigate to the static library file (.a) and add it.

1. Sandbox a target, which removes most capabilities for interacting with the system

2. Restore capabilities to the sandboxed target, as needed, by configuring App Sandbox entitlements

At runtime, if a target requires a capability or a system resource for which the target isn’t entitled, the sandbox daemon (sandboxd) logs a violation message to the console.

For more information about App Sandbox, read App Sandbox Design Guide.

App Sandbox Entitlement Keys

This section describes the keys you can use to confer capabilities to a sandboxed app in macOS. The first key enables App Sandbox; the others configure the sandbox. If App Sandbox is not enabled, the other keys in this section are meaningless.

The value to use for any of these keys is a Boolean YES or NO, with the default value in each case being NO. If you are editing the .entitlements file directly in a text editor, the corresponding Boolean values to use are <true/> and <false/>. The default value for each key is false, so you can (and generally should) leave out the entitlement entirely rather than specifying a false value.

In cases where there are read-only and read/write entitlement key pairs, use of either key in the pair is mutually exclusive with the other.

Add these keys by using the Summary tab of the Xcode target editor. You can also add them directly to a target’s .entitlements file with the Xcode property list editor.

For information on additional entitlements for handling special circumstances, see App Sandbox Temporary Exception Entitlements.

For each key in this table, providing a Boolean value of YES enables the corresponding capability (unless otherwise noted).

Enables App Sandbox for a target in an Xcode project

Allows access to group containers that are shared among multiple apps produced by a single development team, and allows certain additional interprocess communication between the apps

Supported in macOS v10.7.5 and in v10.8.3 and later. The format for this attribute is described in Adding an App to an App Group.

Read-only access to the user’s Movies folder and iTunes movies

For details, see Enabling Access to Files in Standard Locations.

Read/write access to the user’s Movies folder and iTunes movies

For details, see Enabling Access to Files in Standard Locations.

Read-only access to the user’s Music folder

For details, see Enabling Access to Files in Standard Locations.

Read/write access to the user’s Music folder

For details, see Enabling Access to Files in Standard Locations.

Read-only access to the user’s Pictures folder

For details, see Enabling Access to Files in Standard Locations.

Read/write access to the user’s Pictures folder

For details, see Enabling Access to Files in Standard Locations.

Communication with AVB devices

For details, see Enabling Hardware Access.

Move itunes library to different drive mac. Interaction with Bluetooth devices

For details, see Enabling Hardware Access.

Capture of movies and still images using the built-in camera, if available

For details, see Enabling Hardware Access.

Interaction with FireWire devices (currently, does not support interaction with audio/video devices such as DV cameras)

For details, see Enabling Hardware Access.

Recording of audio using the built-in microphone, if available, along with access to audio input using any Core Audio API that supports audio input

For details, see Enabling Hardware Access.

Interaction with serial devices

For details, see Enabling Hardware Access.

Interaction with USB devices, including HID devices such as joysticks

For details, see Enabling Hardware Access.

Read/write access to the user’s Downloads folder

For details, see Enabling Access to Files in Standard Locations.

Use of app-scoped bookmarks and URLs

For details, see Enabling Security-Scoped Bookmark and URL Access.

Use of document-scoped bookmarks and URLs

For details, see Enabling Security-Scoped Bookmark and URL Access.

Read-only access to files the user has selected using an Open or Save dialog

For details, see Enabling User-Selected File Access.

Read/write access to files the user has selected using an Open or Save dialog

For details, see Enabling User-Selected File Access.

Allows apps to write executable files.

For details, see Enabling User-Selected File Access.

Child process inheritance of the parent’s sandbox

For details, see Enabling App Sandbox Inheritance.

Network socket for connecting to other machines

For details, see Enabling Network Access.

Network socket for listening for incoming connections initiated by other machines

For details, see Enabling Network Access.

com.apple.security.personal-information.addressbook

Read/write access to contacts in the user’s address book; allows apps to infer the default address book if more than one is present on a system

For details, see Enabling Personal Information Access.

Read/write access to the user’s calendars

For details, see Enabling Personal Information Access.

Use of the Core Location framework for determining the computer’s geographical location

For details, see Enabling Personal Information Access.

Printing

For details, see Enabling Hardware Access.

Ability to use specific AppleScript scripting access groups within a specific scriptable app

For details, see Enabling Scripting of Other Apps.

Enabling App Sandbox

You enable App Sandbox individually for each target in an macOS Xcode project. For example, you may design a project as a main app, and some helpers in the form of XPC services. You then enable and configure the sandbox for each target individually.

To learn how to enable App Sandbox for your macOS app, which includes performing code signing, see App Sandbox Quick Start in App Sandbox Design Guide. The essential step is to ensure that the target editor checkbox named in Table 4-1 is selected.

Enabling User-Selected File Access

Xcode provides a pop-up menu, in the Summary tab of the target editor, with choices to enable read-only or read/write access to files and folders that the user explicitly selects. When you enable user-selected file access, you gain programmatic access to files and folders that the user opens using an NSOpenPanel object, and files the user saves using an NSSavePanel object.

Certain other user interactions, such as dragging items to your app or choosing items from the Open Recent menu, automatically expand your sandbox to include those items. Similarly, when macOS resumes an app after a reboot, the sandbox is automatically expanded to include any items that are automatically opened.

To enable user-selected file access in your app, use the Xcode target editor setting shown in Table 4-2.

Note: If your app needs to create executable files that are typically executed in some way other than through Launch Services (shell scripts, for example), you should also specify the com.apple.security.files.user-selected.executable entitlement.

By default, when writing executable files in sandboxed apps, the files are quarantined. Gatekeeper prevents quarantined executable files and other similar files (shell scripts, web archives, and so on) from opening or executing unless the user explicitly launches them from Finder.

If those executables are tools that are intended to run from the command line, such as shell scripts, this presents a problem. With this flag, the file quarantine system allows the app to write non-quarantined executables so that Gatekeeper does not prevent them from executing.

This entitlement does not have an Xcode checkbox, and thus must be added to your app’s entitlement property list manually. For details, see App Sandbox Entitlement Keys.

Enabling Access to Files in Standard Locations

In addition to granting user-selected file access, you can employ entitlements to grant programmatic file access to the following user folders:

• Downloads

• Music

• Movies

• Pictures

The Xcode control for enabling Downloads folder access is a checkbox; the controls for enabling access to these other folders are pop-up menus.

When you enable programmatic access to the user’s Movies folder, you also gain access to their iTunes movies.

Reopening of files by macOS using Resume does not require the presence of any entitlement key.

To enable programmatic access to specific folders, use the Xcode target editor settings shown in Table 4-3.

Enabling Security-Scoped Bookmark and URL Access

If you want to provide your sandboxed app with persistent access to file system resources, you must enable security-scoped bookmark and URL access. Security-scoped bookmarks are available starting in macOS v10.7.3.

To add the bookmarks.app-scope or bookmarks.document-scope entitlement, edit the target’s.entitlementsproperty list file using the Xcode property list editor. Use the entitlement keys shown in Table 4-4, depending on which type of access you want. Use a value of <true/> for each entitlement you want to enable. You can enable either or both entitlements.

For more information on security-scoped bookmarks, read Security-Scoped Bookmarks and Persistent Resource Access in App Sandbox Design Guide.

Enabling Network Access

Xcode’s Network checkboxes in the Summary tab of the target editor let you enable network access for your app.

To enable your app to connect to a server process running on another machine (or on the same machine), enable outgoing network connections.

To enable opening a network listening socket so that other computers can connect to your app, allow incoming network connections.

Note: Both outgoing and incoming connections can send and receive data. The sole difference is in whether your app is initiating the connection or is receiving connections initiated by other apps or other hosts.

To enable network access, use the Xcode target editor settings shown in Table 4-5.

Enabling Hardware Access

To allow a sandboxed target to access hardware services on a system—USB, printing, or the built-in camera and microphone—enable the corresponding setting in the Summary tab of the Xcode target editor.

• Camera access enables access to video and still image capture using the built-in camera, if available.

• Microphone access enables access to audio recording using the built-in microphone, if available.

• USB access enables the ability to interact with USB devices using USB device access APIs. On violation, sandboxd names the I/O Kit class your code tried to access.

• Printing access is required if you want to provide a target with the ability to print.

To enable access to hardware, use the Xcode target editor settings shown in Table 4-6.

To allow access to hardware devices for which no checkbox exists in Xcode’s user interface, you must manually add the appropriate entitlement to your app’s entitlements property list. These additional entitlements are listed in Table 4-7. All of these keys take a Boolean value.

Enabling Personal Information Access

A user’s personal information is inaccessible to your sandboxed app unless you grant access using the appropriate settings.

• Address Book access enables read/write access to contacts in the user’s address book.

• Location Services access enables use of the Core Location framework to determine the computer’s geographic position.

• Calendar access enables read/write access to the user’s calendars.

To enable access to personal information, use the Xcode target editor settings shown in Table 4-8.

Adding an App to an App Group

The com.apple.security.application-groups (available in macOS v10.7.5 and v10.8.3 and later) allows multiple apps produced by a single development team to share access to a special group container. This container is intended for content that is not user-facing, such as shared caches or databases.

In addition, this attribute allows the apps within the group to share Mach and POSIX semaphores and to use certain other IPC mechanisms among the group’s members. For additional details and naming conventions, read “Mach IPC and POSIX Semaphores and Shared Memory” in App Sandbox Design Guide.

Create new photo library mac. You can crop, adjust lighting and color, set the white balance, add filters, remove unwanted blemishes, and a few more things. If you're looking for a photo editing app that goes above and beyond for the pricetag, while still allowing you complete creative control over your images, then it might be worth it to take a peek at Affinity Photo.Affinity Photo supports unlimited layers, groups, layer adjustments, filters, masking, and more: you also have access to tools like dodge, red-eye fix, burn, blemish, clone, and patch (so pretty much Photoshop without all the convoluted bells and whistles). It's not really meant to be a robust editing app, so If you are looking for something to really finish your photos right, we've got a list of the best photo editors for Mac right here. However, in all honesty?

The value for this key must be of type array, and must contain one or more string values, each of which must consist of your development team ID, followed by a period, followed by an arbitrary name chosen by your development team. For example:

The group containers are automatically created or added into each app’s sandbox container as determined by the existence of these keys. The group containers are stored in ~/Library/Group Containers/<application-group-id>, where <application-group-id> is one of the strings from the array. Your app can obtain the path to the group containers by calling the containerURLForSecurityApplicationGroupIdentifier: method of NSFileManager.

Enabling App Sandbox Inheritance

If your app employs a child process created with either the posix_spawn function or the NSTask class, you can configure the child process to inherit the sandbox of its parent. However, using a child process does not provide the security afforded by using an XPC service.

Important: XPC (as described in External Tools, XPC Services, and Privilege Separation) complements App Sandbox and is the preferred technology for implementing privilege separation in an macOS app. Before using a child process, consider using an XPC service instead.

To enable sandbox inheritance, a child target must use exactly two App Sandbox entitlement keys: com.apple.security.app-sandbox and com.apple.security.inherit. If you specify any other App Sandbox entitlement, the system aborts the child process. You can, however, confer other capabilities to a child process by way of iCloud and notification entitlements.

The main app in an Xcode project must never have a YES value for the inherit entitlement.

To add the inherit entitlement, edit the target’s .entitlementsproperty list file using the Xcode property list editor. Use the entitlement key shown in Table 4-9 with a value of <true/>.

Note: This property causes the child process to inherit only the static rights defined in the main app’s entitlements file, not any rights added to your sandbox after launch (such as PowerBox access to files).

If you need to provide access to files opened after launch, you must either pass the data to the helper or pass a bookmark to the child process. The bookmark need not be a security-scoped bookmark, but it can be, if desired.

If you are using other APIs to create child processes (such as NSWorkspace) and wish to have a shared container directory, you must use an app group.

Enabling Scripting of Other Apps

If your app needs to control another scriptable app, your app can use the scripting targets entitlement to request access to one or more of the scriptable app’s scripting access groups.

Note: Before you can use this entitlement, the scriptable app must provide scripting access groups. If it does not, you can still control the app, but you use a temporary exception entitlement instead. In some cases, you may use both scripting-targets entitlement and a temporary entitlement together, to provide support across different versions of the OS. For more information, see Apple Event Temporary Exception.

The scripting target entitlement contains a dictionary where each entry has the target app’s code signing identifier as the key, and an array of scripting access groups as the value. Scripting access groups are identified by strings and are specific to an app. For example, the following entry would grant access to composing mail messages with Apple’s Mail app:

For more information about how to add scripting access groups to an app, watch WWDC 2012: Secure Automation Techniques in OS X and read the manual page for sdef.

Copyright © 2017 Apple Inc. All Rights Reserved. Terms of Use Privacy Policy Updated: 2017-03-27

Xcode 11 includes everything you need to create amazing apps and to bring your apps to even more devices. Take advantage of SwiftUI, an all-new user interface framework with a declarative Swift syntax. Start bringing your iPad app to Mac with just a click. And with support for Swift packages, Xcode 11 lets you share code among all of your apps or use packages created by the community.

SwiftUI

Better apps. Less code.

SwiftUI is an innovative, exceptionally simple way to build user interfaces across all Apple platforms with the power of Swift. Build user interfaces for any Apple device using just one set of tools and APIs. With a declarative Swift syntax that’s easy to read and natural to write, SwiftUI works seamlessly with new Xcode design tools to keep your code and design perfectly in sync. SwiftUI is truly native, so your apps directly access the proven technologies of each platform to beautifully implement everything users love about the Apple ecosystem.

Declarative syntax. Write simpler code with a declarative Swift syntax that clearly states what your user interface should do.

Design tools. Drag and drop to construct or edit your interface. Quickly make changes to visual UI elements with pop-up inspectors.

Native on all Apple platforms. Your apps gain incredible native performance and take advantage of the proven technologies, controls, and user experiences of Apple platforms to feel fully integrated.

Live mode. See your design change instantly in one or many exact previews. Switch the design canvas to live mode to instantly interact with your running app in Xcode or on a connected device.

Bring your iPad App to Mac

Xcode makes it easy to get a huge head start on turning your existing iPad app into a native Mac app. Your Mac and iPad apps share the same project and source code, so any changes you make translates to both platforms. And your newly created Mac app runs natively, utilizing the same frameworks, resources, and even runtime environment as apps built just for Mac.

Swift and Swift Packages

Swift 5 is now built right into all Apple platforms and the binary interface for Swift is stable moving forward. Your apps will be smaller, download faster, and keep working as Swift continues to evolve.

Swift packages are integrated throughout all of Xcode 11, making it incredibly simple to use a package in your apps for Apple platforms. Just add a new package dependency to add an external package to your project., then clone the package from GitHub, Bitbucket, GitLab, or your own code host. Xcode checks the package dependencies and displays all the packages you use directly in the navigator.

It’s also easy to create your own packages to use with projects based on your own code, or to share with the world. Source code you put in these packages will be built into any apps that depend on the package, with support for all Apple platforms. Code in the package is still easy to debug, test, and use with source code management.

Dark Mode for iPhone and iPad

Dark Mode has been beautifully integrated throughout iOS, and Xcode 11 gives you powerful tools to easily support dark mode in your apps. Quickly switch your designs and previews between light and dark in Interface Builder, and preview both modes in SwiftUI, even side-by-side. Asset catalogs let you label assets and named colors with variants for light and dark. And you can switch your app in and out of dark mode while debugging. This is all done using controls within Xcode that only apply to your app, with no need to change your system settings.

Vulkan Runtime Libraries

Your Editor, Your Layout

Whether you prefer a single editor or split your windows into a precisely-arranged mosaic, Xcode 11 gives you total control over your coding area and the ability to split any editor pane. Editors can also show SwiftUI previews, live views of playgrounds, and a myriad of assistants. If you need to focus on just one file, you can click-zoom to maximize the pane, and return to exactly where you were before. The new minimap sidebar shows a birds-eye view of the open file, including highlights that make it easy to jump to the right place.

Your code looks better than ever with documentation comments with bold and italics rendered inline with your code. You can even inspect the differences in your current source edits compared to past versions, with a comparison view that updates as you type.

In-depth Testing

The updated Devices window lets you simulate your users’ environment, for example when your app is running in extreme heat or on a slow network. Test plans in Xcode 11 make it easy to automate a huge number of test and analysis steps, all to be run in parallel. For instance, you can select several sanitizer tools with conflicting build settings, and Xcode will run all the tests for you and automatically build all the versions you need.

Shared Libraries

Screenshots are now easy to automate with an API that saves screenshots to your results bundle during UI testing. Combined with testing your localized UI, it’s easy to take every screenshot you need to submit to the App Store, or to show your localization team.

Vulkan Dota 2

With even better support for Xcode Server and other continuous integration tools, you can constantly test your app in hundreds of user scenarios, easily and efficiently.