Re: sandbox-darwin.c: sandbox.h is deprecated

On 09/06/2026 14:48, Marius Schamschula wrote:
> Building openssh 10.3p1 now fails using Xcode 27-Beta.

When build 10.5p1, it fails on sandbox-darwin.c with
sandbox-darwin.c:64:6: warning: 'sandbox_init' is deprecated: first 
deprecated in macOS 10.8 - No longer supported [-Wdeprecated-declarations]
    64 |         if (sandbox_init(kSBXProfilePureComputation, SANDBOX_NAMED,
       |             ^
/Library/Developer/CommandLineTools/SDKs/MacOSX.sdk/usr/include/sandbox.h:49:5: 
note: 'sandbox_init' has been explicitly marked deprecated here
    49 | int sandbox_init(const char *profile, uint64_t flags, char 
**errorbuf);
       |     ^
sandbox-darwin.c:64:19: error: use of undeclared identifier 
'kSBXProfilePureComputation'
    64 |         if (sandbox_init(kSBXProfilePureComputation, SANDBOX_NAMED,
       |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~
1 warning and 1 error generated.

Manual for sandbox_init(3) marks all the profiles including 
kSBXProfilePureComputation as deprecated, and states "These profiles 
must not be used when building against macOS SDK >= 27.0. Processes 
opting into them will be killed on attempt to do so."

Builds fine when configured --with-sandbox=no

I see test failures, but they're unrelated to sandboxing (regress/copy.dd)
Will open a separate thread once I've investigated some more.

Sevan