iOS应用访问容器外/Library目录时遇Permission denied问题求助

问题重现 #

尝试让iOS App访问容器外的/Library/目录，使用的Swift代码：

let files = try! FileManager.default.contentsOfDirectory(atPath: "/Library/")

配置的.entitlements文件：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.temporary-exception.files.absolute-path.read-write

com.apple.security.temporary-exception.files.absolute-path.read-write

</key>
    <string>/</string>
</dict>
</plist>

运行后报错：

[file:///Library/]
DictionaryLoader/ContentView.swift:54: Fatal error: 'try!' expression unexpectedly raised an error: Error Domain=NSCocoaErrorDomain Code=257 "The file “Library” couldn’t be opened because you don’t have permission to view it." UserInfo={NSUserStringVariant=(
Folder
), NSFilePath=/Library/, NSUnderlyingError=0x282c275d0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}
2023-02-15 12:03:48.780396-0800 DictionaryLoader[1132:24964] DictionaryLoader/ContentView.swift:54: Fatal error: 'try!' expression unexpectedly raised an error: Error Domain=NSCocoaErrorDomain Code=257 "The file “Library” couldn’t be opened because you don’t have permission to view it." UserInfo={NSUserStringVariant=(
Folder
), NSFilePath=/Library/, NSUnderlyingError=0x282c275d0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}

测试环境：iPhone 12（iOS 16.2）真实设备

问题原因及解决方案 #

1. Entitlements配置错误 #

你的权限文件中key字段重复了两次com.apple.security.temporary-exception.files.absolute-path.read-write，还包含多余换行，导致系统无法正确识别权限。同时，直接授权根目录/的访问权限过于宽泛，iOS会限制这类请求。

修正后的.entitlements文件：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
    <array>
        <string>/Library/</string>
    </array>
</dict>
</plist>

• 确保key唯一且无多余格式
• 用<array>精准指定需要访问的目录，而非整个根目录

2. iOS沙箱机制限制 #

即使修正了权限配置，/Library/作为系统级目录，普通App在iOS 14+中仍可能无法直接访问：

• com.apple.security.temporary-exception.files.absolute-path.read-write仅适用于开发调试，正式上架App Store会被拒绝
• 若需访问容器外文件，建议使用系统正规API：UIDocumentPickerViewController，通过用户授权选择目标文件/目录，这是符合App Store审核规范的方式

3. 代码优化 #

避免使用try!强制解包，改用do-catch优雅处理错误：

do {
    let files = try FileManager.default.contentsOfDirectory(atPath: "/Library/")
    print("目录内容：\(files)")
} catch {
    print("访问失败：\(error.localizedDescription)")
    print("错误详情：\(error)")
}

内容的提问来源于stack exchange，提问作者Patrick