Trim the sandbox scope to least privilege by keeping only capabilities required for current scanning, printing, contacts, and file workflows. Co-authored-by: Cursor <cursoragent@cursor.com>
@@ -10,15 +10,11 @@
<true/>
<key>com.apple.security.network.client</key>
- <key>com.apple.security.network.server</key>
- <true/>
<key>com.apple.security.print</key>
<key>com.apple.security.personal-information.addressbook</key>
<key>com.apple.security.device.scanner</key>
- <key>com.apple.security.device.usb</key>
</dict>
</plist>