3 ms·

False. Signed apps can have entitlements, unsigned apps cannot. Some entitlements grant access to keychain items.

• teilo 9y ago
  Completely wrong. Entitlements are for sandboxed apps, and grant a sandboxed application access to other parts of the system. Unsigned apps are by definition, not sandboxed, and have no such restrictions. They are granted access, not by a sandbox entitlement, but by the Keychain API.
  • mikeash 9y ago
    There are both sandbox and non-sandbox entitlements. iCloud storage and push notifications are examples of the latter.
    • teilo 9y ago
      Granted. In any case it is not relevant in the context of this discussion. Access to the local keychain does not require an entitlement. Even the "keychain-access-groups" entitlement only applies to the iCloud keychain.