Mac OS app, sandbox with command line tool

I've made an app which includes a command-line tool. I have enabled the app's sandbox, and tested that it works. I've also code-signed both the app and the command line tool.

But when I upload the app to iTunes, I received a email telling me "App sandbox not enabled".

Apparently I need to set entitlement file of key 

com.apple.security.app-sandbox

 with 

true

 value, and list the executables: 

/Contents/MacOS/myApp

 and

/contents/Frameworks/x86/myCommandLineTool

.

I'm sure I've enabled sandbox in Xcode, so I thought the problem was with the command line tool.

How can I enable sandbox for command line tool? Or is there a specific folder I should put the tool? Any suggestions welcome - I have been troubled by it for several days.

I had the same issue and after some search, trial & error, this is what worked for me:

1. create an entitlement file - for me it was just com.apple.security.inherit set to YES. I created this file in xcode itself.

2. Now sign this commandline tool using the command:

codesign --entitlements ./entitlements.plist -s "copy & paste your certificate from keychain" ./commandlinetool   
           

3. Just to be sure, check using this command:

codesign --display --entitlements - ./commandlinetool   
           

4. This tool was already included in the project. So just compile, archive & submit

The status is now 'waiting for review' :-) Hope this helps