libSandy allows developers to securely extend the sandbox of system processes and user applications on a per process basis.

The main use cases are tweaks getting access to specified paths on the filesystem or being able to contact specified mach services.

Supports iOS 8 - 18.

Documentation and source code available on Github

No options to configure. This is a developer package.

No Screenshots for this item.

- Fixed a bug that caused libSandy to not work on iOS <=15
- Hotfix for a bug where on arm64e devices with certain tweaks installed, the 1.1.6 update would lead to securityd crash looping

- Add a new mach service unsandboxing method that works even if the process calling into libSandy is not permitted to contact sandyd and is not permitted to consume extensions that would allow it to contact sandyd. This method still requires the process to be able to reach com.apple.securityd and is applied automatically if required, so no changes in packages depending on libSandy have to be made. This change comes in response to iOS 18.4 removing mach lookup extensions from most system processes sandbox profiles.
- Fix some security issues

- Add support for iOS 18.4+

Updated	February 24, 2026
License	Free Package