From 4f24f67a7eece17d75cf87c9f6046f567e55824e Mon Sep 17 00:00:00 2001
From: David Kocher <dkocher@iterate.ch>
Date: Wed, 27 Nov 2024 09:56:57 +0100
Subject: [PATCH] Add profile to set sandbox entitlements.

---
 README.md   | 4 ++++
 osx/pom.xml | 6 ++++++
 2 files changed, 10 insertions(+)

diff --git a/README.md b/README.md
index 56ef9ad545b..d6dfa89a34f 100644
--- a/README.md
+++ b/README.md
@@ -131,6 +131,10 @@ Run with `-Pinstaller` to build installer packages with build artifacts
 * `cli/windows/target/release/*.(exe|msi)`
 * `cli/linux/target/release/*.(deb|rpm)`
 
+### macOS
+
+Active the sandboxing profile with `-Psandbox` to apply sandbox entitlements `com.apple.security.app-sandbox`.
+
 ### Windows
 
 You will run into warnings from `MSBuild`/`WiX` that are unrelated to how Cyberduck is built. You may safely ignore them.
diff --git a/osx/pom.xml b/osx/pom.xml
index d089aeb664d..cdfd2e3ccc5 100644
--- a/osx/pom.xml
+++ b/osx/pom.xml
@@ -246,6 +246,12 @@
                 <codesign.arg>--entitlements ../setup/app/default.entitlements</codesign.arg>
             </properties>
         </profile>
+        <profile>
+            <id>sandbox</id>
+            <properties>
+                <codesign.arg>--entitlements ../setup/app/sandbox.entitlements</codesign.arg>
+            </properties>
+        </profile>
         <profile>
             <id>installer</id>
             <activation>