Keychain in the sandboxed Mac App Store release build
Parent: Apple Platform Publishing (Mac App Store) · Topic entry · 16 branches · skill apple-platform-publishing/references/mac-appstore-keychain-sandbox-signing-identity.md
A published reference is not available for this topic yet.
Children
- Data-protection keychain access groups on macOS (keychain-access-groups, com.apple.application-identifier, wildcard prof (frontier)
- Designated requirement of App Store re-signed vs TestFlight re-signed Mac apps (marker OIDs 6.1.9 vs 6.1.25.1) (frontier)
- SecItem shim routing (SecItemCategorizeQuery) and result merging, per macOS release (frontier)
- Non-interactive file-based keychain reads without SecKeychainSetUserInteractionAllowed (frontier)
- macOS 26.4+ login keychain data protection and /var/db/SystemKeys entropy files (effect on stored API keys after restore (frontier)
- errSecAuthFailed -25293 after an OS upgrade for early-startup reads (FB22448572) (frontier)
- kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly behaviour on a locked or asleep Mac for background reads (frontier)
- SecTaskCopyValueForEntitlement as a runtime capability probe inside the App Sandbox (frontier)
- TestFlight Mac signing and profile behaviour (ITMS-90889, DR change on promotion to App Store) (frontier)
- Provisioning profile expiry (2027-09-27) and what an installed App Store app keeps after the profile is stripped (frontier)
- Keychain item lifecycle on app deletion and the "Remove credentials" promise in the privacy policy (frontier)
- Reviewer VM image state: auto-login, locked or missing login keychain at first launch (frontier)
- App Review static scan versus deprecated public Security symbols loaded through PyObjC (frontier)
- Keychain Access display of DP "Local Items" and user-facing removal instructions (frontier)
- Per-item SecAccessControl with biometrics for API keys: benefit versus complexity for a menu-bar monitor (frontier)
- Notes for Review wording for optional Keychain-stored credentials and the App Privacy label (frontier)
Frontier under this node: App Review static scan versus deprecated public Security symbols loaded through PyObjC, Data-protection keychain access groups on macOS (keychain-access-groups, com.apple.application-identifier, wildcard prof, Designated requirement of App Store re-signed vs TestFlight re-signed Mac apps (marker OIDs 6.1.9 vs 6.1.25.1), Keychain Access display of DP "Local Items" and user-facing removal instructions, Keychain item lifecycle on app deletion and the "Remove credentials" promise in the privacy policy, Non-interactive file-based keychain reads without SecKeychainSetUserInteractionAllowed, Notes for Review wording for optional Keychain-stored credentials and the App Privacy label, Per-item SecAccessControl with biometrics for API keys: benefit versus complexity for a menu-bar monitor, Provisioning profile expiry (2027-09-27) and what an installed App Store app keeps after the profile is stripped, Reviewer VM image state: auto-login, locked or missing login keychain at first launch, SecItem shim routing (SecItemCategorizeQuery) and result merging, per macOS release, SecTaskCopyValueForEntitlement as a runtime capability probe inside the App Sandbox, TestFlight Mac signing and profile behaviour (ITMS-90889, DR change on promotion to App Store), errSecAuthFailed -25293 after an OS upgrade for early-startup reads (FB22448572), kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly behaviour on a locked or asleep Mac for background reads, macOS 26.4+ login keychain data protection and /var/db/SystemKeys entropy files (effect on stored API keys after restore