fixed sandbox permissions on Mac