Adobe Acrobat Reader
Euan Williams
MacWorld posted this today:MacWorld announces Acrobat Reader 10.0
At last Reader now uses sandbox*, hopefully putting an end to recent scares, along with a 'simplified interface'. Available "in 30 days" -- although this may apply only to Adobe's full Acrobat Pro Software.
* quote>
"Leopard [and later OSX versions] enforces the MAC model via a new framework, architected from TrustedBSD’s MAC framework. This framework introduces “sandbox” access control capabilities which allow a developer or user to apply access control policies to a process, restricting privileges to various specified system resources. The restrictions are generally enforced upon acquisition, so any active file descriptors would not be immediately affected by any policy changes, however, any new open() operations would be subject to the new restrictions."
<unquote.
see: techjournal.318.com