Re: sandbox-darwin.c: sandbox.h is deprecated

On Tue, 9 Jun 2026, Marius Schamschula wrote:

> Hi there,
> 
> Thank you for all the efforts on openssh portable over the years!
> 
> sandbox-darwin.c: has had a good long run.
> 
> Unfortunately, Apple has deprecated sandbox.h in favor of a newer App Sandbox API, see
> 
> https://developer.apple.com/documentation/security/app-sandbox#//apple_ref/doc/uid/TP40011183
> 
> Building openssh 10.3p1 now fails using Xcode 27-Beta.

I guess we'll have to disable the sandbox for this release unless and
until someone contributes a new one. I'm not sure how useful this will
actually be with the new sandbox API because AIUI it requires code
signing to operate. As a project that releases only source, we're not
in a position to make use of this directly.

-d