security.sandbox.profiles.<name>.readablePaths

List of paths that should be read-only inside the sandbox.

Type
list of absolute path
Default
[ ]
Declared
<nix-darwin/modules/security/sandbox>