macOS 27 and 26 platform changes affecting sandboxed menu-bar network apps
Parent: Mac App Store Readiness: Residual Gaps for Sandboxed Monitors · Published reference · snapshot 2026-10-02
↓ Facts as markdownall context files
Source-anchored research for macOS 27 and 26 platform changes affecting sandboxed menu-bar network apps. Run status: COMPLETED.
These notes link each claim to its source. Some citations identify archived research reports that are no longer hosted on this site. A published reference means the content is available; it does not certify independent review or accuracy.Read the editorial policy and follow the sources before relying on a claim.
Definitions
- macOS 27 release notes: Rosetta is not auto-restored after upgrade if it was installed. Apps can no longer read the TCC database directly. Cross-team app-data container access is denied without a prompt. Selected system processes (MDM, software update) enforce stricter TLS 1.2/ATS. None of these affects a normally sandboxed own-container menu-bar app. (low confidence) (verified as of 2026-09-14) [source]
How it works
- On macOS 27, Local Network access reportedly covers direct local-address connections, not only Bonjour browsing (citing Apple TN3179). The mechanism itself is described as unchanged from earlier releases. (low confidence) (verified as of 2026-10-02) [source]
- macOS 27 is the last release supporting Rosetta for general Intel apps. Apple announced this on 2026-09-01, and macOS 26.4+ already warns users when they launch Intel-only apps. Apple Silicon-only builds are therefore the safe target. (high confidence) (verified as of 2026-09-01) [source]
Problems, failure modes and limitations
- An app that touches the local network without NSLocalNetworkUsageDescription in its Info.plist is denied silently: no prompt, no entry in Privacy & Security > Local Network. macOS 27 reports (OpenAI Codex Desktop issue) show the same failure. (medium confidence) (verified as of 2026-10-02) [source]
- There is no supported way to reset an app's Local Network decision. Short-lived processes can fail silently without a prompt. Code-signature problems can make behavior unpredictable. (medium confidence) (verified as of 2026-10-02) [source]
Facts and statements
- Local Network privacy covers local DNS resolution (.local), Bonjour and outbound local connections. Listening for incoming TCP and receiving incoming UDP unicast need no privilege. Launchd daemons, root processes and Terminal/SSH tools are exempt, so a sandboxed GUI menu-bar app is subject to it. (medium confidence) (verified as of 2026-01-14) [source]
- macOS 27 release notes (build 26A428, 2026-09-14) make menu item symbol images hidden by default for apps linked on macOS 26.0+. Apps linked on the macOS 27 SDK also hide non-symbol images. The AppKit property preferredImageVisibility (.automatic/.visible/.hidden) overrides this. SwiftUI uses labelStyle(.titleAndIcon). Whether NSStatusItem button images are affected is not stated. (medium confidence) (verified as of 2026-09-14) [source]
- Universal Mac App Store apps that require macOS 13 or later can now ship arm64-only. Set the build architecture to arm64, rebuild and resubmit. Intel users keep the last compatible version. (medium confidence) (verified as of 2026-09-01) [source]
Children
- No children recorded.