sandbox.cpp: use sandbox on 10.7+

Author: barracuda156

src/cli/sandbox.cpp

@@ -10,12 +10,18 @@
 #include <botan/internal/target_info.h>
 #include <memory>
 
+#if defined(BOTAN_TARGET_OS_IS_MACOS)
+   #include <AvailabilityMacros.h>
+#endif
+
 #if defined(BOTAN_TARGET_OS_HAS_CAP_ENTER)
    #include <sys/capsicum.h>
    #include <unistd.h>
 #elif defined(BOTAN_TARGET_OS_HAS_SETPPRIV)
    #include <priv.h>
-#elif defined(BOTAN_TARGET_OS_HAS_SANDBOX_PROC)
+// macOS 10.6 has sandbox, but does not have sandbox_init
+#elif defined(BOTAN_TARGET_OS_HAS_SANDBOX_PROC) && \
+   !(defined(BOTAN_TARGET_OS_IS_MACOS) && MAC_OS_X_VERSION_MIN_REQUIRED < 1070)
    #include <sandbox.h>
 #endif
 
@@ -35,7 +41,8 @@ Sandbox::Sandbox() {
    m_name = "capsicum";
 #elif defined(BOTAN_TARGET_OS_HAS_SETPPRIV)
    m_name = "privilege";
-#elif defined(BOTAN_TARGET_OS_HAS_SANDBOX_PROC)
+#elif defined(BOTAN_TARGET_OS_HAS_SANDBOX_PROC) && \
+   !(defined(BOTAN_TARGET_OS_IS_MACOS) && MAC_OS_X_VERSION_MIN_REQUIRED < 1070)
    m_name = "sandbox";
 #else
    m_name = "<none>";
@@ -93,7 +100,8 @@ bool Sandbox::init() {
    }
 
    return true;
-#elif defined(BOTAN_TARGET_OS_HAS_SANDBOX_PROC)
+#elif defined(BOTAN_TARGET_OS_HAS_SANDBOX_PROC) && \
+   !(defined(BOTAN_TARGET_OS_IS_MACOS) && MAC_OS_X_VERSION_MIN_REQUIRED < 1070)
 
    BOTAN_DIAGNOSTIC_PUSH
    BOTAN_DIAGNOSTIC_IGNORE_DEPRECATED_DECLARATIONS