Starting a VM from a macOS sandbox: Seatbelt allow rules for virtualization | Hacker News Reader