Sandbox deny file-read-metadata /private/var/tmp

Question

Hi,
I have Berkeley DB 5.2.28.
And I tried to use Berkeley DB on iOS 4.3.
I wrote;
printf (stderr, "db open - 1");
ret = dbenv.open(strDBdir,
DB_CREATE |
DB_INIT_LOCK |
DB_INIT_LOG |
DB_INIT_MPOOL |
DB_INIT_TXN |
DB_THREAD |
DB_RECOVER,
S_IRUSR | S_IWUSR);
printf (stderr, "db open - 2");
I runned this app on iPod 4 (iOS 4.3), and then in xCode's Organizer found a message: "sandbox[363] <Notice>: myapp(362) deny file-read-metadata /private/var/tmp", between "db open - 1" and "db open - 2".
How to resolve it?
Please, help me.
Thank you.

Answer 1

Hi,
I assume you have correctly followed and built BDB 5.2.28 for Apple iOS by following the guide for Building Berkeley DB for UNIX/POSIX and the notes specific to Apple iOS (iPhone OS).
The error message you reported:
sandbox[363] <Notice>: myapp(362) deny file-read-metadata /private/var/tmpis not an error from the BDB layer, but rather from the OS layer. It could point to insufficient privileges or rights (to write in that /private/var/tmp directory) or maybe a profile / access control list that is not configured correctly to allow the user you're running under to read metadata and data for a file; for example, make sure you have something like this in your sandbox profile:
(allow file-write* file-read-data file-read-metadata
  (regex "^/path_to_BDB_environment__strDBdir")
  (regex "^(/private)?/var/tmp/")
  (regex "^(/private)?/tmp/"))If this does not help then I suggest you post on the Apple discussion forums.
Regards,
Andrei