let us: Go! 2018 Spring (3/10) 발표 자료

1. The Sandbox
Container Directory

2. Sandbox
Bundle Container
Data Container
Tips
Summary

6. Sandboxing your app is a great way to protect systems
and users by limiting the privileges of an app to its intended functionality,
increasing the difficulty for malicious software
to compromise your users’ systems

7. Sandboxing your app is a great way to protect systems
and users by limiting the privileges of an app to its intended functionality,
increasing the difficulty for malicious software
to compromise your users’ systems

8. Sandboxing your app is a great way to protect systems
and users by limiting the privileges of an app to its intended functionality,
increasing the difficulty for malicious software
to compromise your users’ systems

9. Sandboxing your app is a great way to protect systems
and users by limiting the privileges of an app to its intended functionality,
increasing the difficulty for malicious software
to compromise your users’ systems

13. With Great Power Comes Great
Responsibility
I ve no great powers.
So there are no responsibilities

18. (Executable) , Info.plist, Resources ( , , strings )
Codesign Tool Signing Bundle Container Code Seal
Static Library - Executable
Dynamic Library Framework Frameworks
.
iTunes, iCloud
Bundle.main.bundlePath
Read,
Write, Delete, Backup

26. .a - Static Library ( )
.dylib - Dynamic Library
.framework - (Static / Dynamic) Framework

34. Data Documents
Library
System Data
Inbox
Application support
Preferences
Caches
Snapshots
tmp
[BundleID]-Inbox
…

35. NSHomeDirectory()
Data Container
- Documents, Library, tmp
Documents
StoreKit
iOS 11 SystemData ( , , ) -
Read
Write, Delete, Backup

36. • NSHomeDirectory() + “/Documents"
• FileManager.default.urls(for: .documentDirectory, in: .userDomainMask)[0]
• NSSearchPathForDirectoriesInDomains(.documentDirectory, .userDomainMask, true)[0]
• , , pdf
•
• Documents
Documents ,
• iTunes, iCloud
Read, Write, Backup
Delete
[ Directory ]
Read, Write, Delete, Backup
[ Files ]

38. $DocumentsPath + "Inbox"
• e.g.)
• ,
• [file-1.txt, file-2.txt]
• iOS 9.0 .
Documents Inbx
Read, Backup
Write, Delete
[ Directory ]
Read, Delete, Backup
Write
[ Files ]

39. [ UIDocumentInteractionController ]

40. [ iTunes ]
[ Files ]

41. url - $HomePath/Documents/Inbox/test.pdf
sourceApplication - com.apple.mobilemail
openInPlace - false
annotation - nil

42. NSTemporaryDirectory() + Bundle.main.bundleIdentifier! + “-Inbox”
• LSSupportsOpeningDocumentsInPlace NO
iCloud / Files / DocumentsPicker
• Documents/Inbox
• tmp
Read, Write, Delete
Backup
[ Directory ]
Read, Write, Delete
Backup
[ Files ]

43. • NO - Inbox
• YES - url . File Coordinator, File Presenter
• NO - url
file:///private/var/mobile/Containers/Data/Application/[UUID]/tmp/kr.giftbot.demo-Inbox/file.key
• YES - url
file:///private/var/mobile/Library/Mobile%20Documents/com~apple~Keynote/Documents/file.key

44. • UIFileSharingEnabled = YES
• LSSupportsOpeningDocumentsInPlace = YES

46. • NSHomeDirectory() + "/Library"
• FileManager.default.urls(for: .libraryDirectory, in: .userDomainMask)[0]
• NSSearchPathForDirectoriesInDomains(.libraryDirectory, .userDomainMask, true)[0]
•
•
• Application Support Caches
• Preference, Cookies, Saved Application State, WebKit
• iTunes, iCloud
Read, Write, Backup
Delete
[ Directory ]
Read, Write, Delete, Backup
[ Files ]

48. • FileManager.default.urls(for: .applicationSupportDirectory, in: .userDomainMask)[0]
• NSSearchPathForDirectoriesInDomains(.applicationSupportDirectory, .userDomainMask, true)[0]
•
• Documents ,
• BundleID
• CoreData
• iTunes, iCloud
Read, Write, Delete, Backup
[ Directory ]
Read, Write, Delete, Backup
[ Files ]

49. [ Realm ]
[ CoreData ]

52. • FileManager.default.urls(for: .cachesDirectory, in: .userDomainMask)[0]
• NSSearchPathForDirectoriesInDomains(.cachesDirectory, .userDomainMask, true)[0]
• /
• / e.g.) , , , json
• ,
•
•
•
Read, Write, Delete
Backup
[ Directory ]
Read, Write, Delete
Backup
[ Files ]

54. • applicationDidEnterBackground(_:)
• Background Foreground
• Restore Application State , Suspend
Snapshot

56. • Cover Screen
• UIApplicationExitsOnSuspend
• ignoreSnapshotOnNextApplicationLaunch

57. func applicationWillResignActive(_ application: UIApplication) {
coverView.backgroundColor = .black
window?.addSubview(coverView)
}
func applicationDidBecomeActive(_ application: UIApplication) {
if window!.contains(coverView) {
coverView.removeFromSuperview()
}
}

58. YES , Background Suspend (terminate)

59. ( ) , .

60. •
•
• UserDefaults, Settings.bundle, CFPreferences API
• iTunes, iCloud
$LibraryPath + "Preferences"
Read, Write, Backup
Delete
[ Directory ]
Read, Write, Delete, Backup
[ Files ]

61. NSTemporaryDirectory()
•
• ,
•
•
Read, Write, Delete
Backup
[ Directory ]
Read, Write, Delete
Backup
[ Files ]

63. Library/Caches

64. Library/Cachesin Memory

65. Library/Caches
tmp
in Memory

66. Library/Caches
tmp
Library/Caches
in Memory

68. @discardableResult
func excludeFileFromBackup(at filePath: String) -> Bool {
var url = URL(fileURLWithPath: filePath)
do {
var values = try url.resourceValues(forKeys: [.isExcludedFromBackupKey])
let isExcluded = values.isExcludedFromBackup ?? false
guard !isExcluded else { return true }
values.isExcludedFromBackup = true
try url.setResourceValues(values)
return true
} catch {
return false
}
}
URLResourceKey.isExcludedFromBackupKey (NSURLIsExcludedFromBackupKey)
• +
•
•
• (Documents, Library)

70. 2.23: Apps must follow the iOS Data Storage Guidelines or They Will be rejected

71. 2.23: Apps must follow the iOS Data Storage Guidelines or They Will be rejected
updated, but …

73. • .
-
Dist I/O

74. • .
-
Dist I/O
• -> X

75. • .
-
Dist I/O
• -> X
• URL - resourceValuesForKeys(_:)

76. • .
-
Dist I/O
• -> X
• URL - resourceValuesForKeys(_:)
• - Data.ReadingOptions.uncached

77. • .
-
Dist I/O
• -> X
• URL - resourceValuesForKeys(_:)
• - Data.ReadingOptions.uncached
• , String URL
e.g.) func write(to url: URL, atomically useAuxiliaryFile: Bool, encoding enc: UInt) throws
func write(toFile path: String, atomically useAuxiliaryFile: Bool, encoding enc: UInt) throws

79. •
Bundle Container Data Container

80. Documents Application Support
•
•

81. •
•
•
Documents Library/Caches
Library tmp

82. •
•
•
•
Library/Caches tmp