I created two sample apps — one sandboxed and one non‑sandboxed. I tested reading Managed Preferences using bash commands, CFPreferencesCopyValue for a domain, and defaults read. Everything works correctly only when the sandbox is disabled in the entitlements.
When the sandbox is enabled, I’m unable to read values from /Library/Managed Preferences/.
Is there any supported way for a sandboxed macOS app to read an MDM-delivered preference plist under /Library/Managed Preferences/?
Any guidance on the correct and Apple‑supported method would be appreciated.