Sandbox

Since version 1.1.0, Keka is sandboxed. This is a requirement to be part of the App Store and an increase in security for the user.

Disk access

To be able to work as integrated as before, Keka may ask for file access so it can:

• Create temporary folders for the extractions in progress
• Create parted files
• Open parted files just dropping one volume
• Compress a file next to it without any save panel
• Extract the contents of a compressed file next to it without any save panel

For example, Keka can't compress/extract without asking a destination in a folder it has no file access. Once you extract some files in a folder, this folder is saved for future file access, but for compression you need to add the folders/disks to the File Access list manually.

Customization

If you want to see/edit Keka's file access, open the Keka Preferences and go to the File Access panel:

• Click on the plus "+" button to add the folders you want Keka to have access
• Select the items in the list that you don't need file access anymore and click the "-" button to remove them

Note that multiple items in the list can be set and removed at once.

There're also some optional recommendations:

• Enable external volumes access: Keka will have access in all external devices.
• Enable home folder access: Keka will have access to your personal home folder.

Remove disk access

Keka will remember the file access you've set so it doesn't need to ask for it each time. You can remove it anytime in the File Access panel, on the Keka Preferences. Just click on the list the folder you want to revoke access to Keka and click on the minus "-" button. Restarting Keka might me necessary for this access to be fully applied.

Network access

Keka does not require and thus has no network access.

If you use the WEB version, Keka uses Sparkle for the update process. It has an integrated XPC service that requires and has (outgoing) network access, located at:

Keka.app/Contents/XPCServices/org.sparkle-project.Downloader.xpc/Contents/MacOS/org.sparkle-project.Downloader

Other access

No other access is enabled in Keka, so it does NOT have access to:

• Camera
• Microphone
• USB
• Printing
• Bluetooth
• Contacts
• Location
• Calendar

And other that might be enabled by Apple. Just plain file access.

Not sandboxed version

To keep things easy, both WEB and MAS versions will be sandboxed. This will reduce segmentation and help focus on a development that works anywhere and is more future proof.

Some development releases may be not sandboxed if needed. You can also un-sandbox Keka at your own risk.