--- a/sandbox-darwin.c 2017-10-02 21:34:26.000000000 +0200
+++ b/sandbox-darwin.c 2017-10-07 04:34:48.000000000 +0200
@@ -63,8 +63,16 @@ ssh_sandbox_child(struct ssh_sandbox *bo
debug3("%s: starting Darwin sandbox", __func__);
+#ifdef __APPLE_SANDBOX_NAMED_EXTERNAL__
+#ifndef SANDBOX_NAMED_EXTERNAL
+#define SANDBOX_NAMED_EXTERNAL (0x3)
+ if (sandbox_init("@PREFIX@/share/openssh/org.openssh.sshd.sb",
+ SANDBOX_NAMED_EXTERNAL, &errmsg) == -1)
if (sandbox_init(kSBXProfilePureComputation, SANDBOX_NAMED,
fatal("%s: sandbox_init: %s", __func__, errmsg);