App Sandbox is a macOS access control technology designed to contain damage to the system and the user’s data if an app becomes compromised. An app distributed through the Mac App Store must enable App Sandbox.
In the project editor, add the App Sandbox capability to your target.
Xcode adds an entitlements file (a file with a .entitlements file extension) to your project and automatically enters default values for some entitlements. Xcode also enables the App Sandbox entitlement.
App Sandbox appears in the Signing & Capabilities pane revealing additional controls to configure the capability.
Use the App Sandbox checkboxes to describe the minimum set of capabilities the target needs to do its job.
Optionally, set specific permissions for file types. Choose a permission from the pop-up menu in the row that best describes the file type.