Howto "sandbox" my Lion application?

Apple has decreed that all applications submitted to the Mac App Store must be sandboxed, starting in November.

Ok, but how can I "sandbox" my app?

I found the official Apple's guide Code Signing And Application Sandboxing Guide.

This document lists the following steps:

1) "Enable sandboxing for your application." Ok, easy: I have to open Xcode 4, select the project, select the target, go to the Summary tab and check:

• "Enable Entitlements"
• "Enable App Sandboxing"
• ...and every single entitlement I'm interested in.

2) Then: "Once you have created a basic entitlements profile, you should sign your application"开发者_运维知识库. In short, the guide says to run the command "codesign" on the .app.

But on which .app?

I have to do this every time I compile?

Xcode does not do that in automatic?

If you turn on sandboxing for your app, Xcode will automatically sign the built product using the codesign tool.

You'd only need to run the codesign tool manually if you wanted to customise the code signing behaviour.