diff --git a/WireGuard/WireGuard.xcodeproj/project.pbxproj b/WireGuard/WireGuard.xcodeproj/project.pbxproj
index c80564b..0ca1d03 100644
--- a/WireGuard/WireGuard.xcodeproj/project.pbxproj
+++ b/WireGuard/WireGuard.xcodeproj/project.pbxproj
@@ -744,6 +744,9 @@
 							com.apple.NetworkExtensions = {
 								enabled = 1;
 							};
+							com.apple.Sandbox = {
+								enabled = 1;
+							};
 						};
 					};
 					6FB1BD9021D4BFE600A991BF = {
diff --git a/WireGuard/WireGuard/UI/macOS/WireGuard.entitlements b/WireGuard/WireGuard/UI/macOS/WireGuard.entitlements
index fd5bd28..a39ba80 100644
--- a/WireGuard/WireGuard/UI/macOS/WireGuard.entitlements
+++ b/WireGuard/WireGuard/UI/macOS/WireGuard.entitlements
@@ -12,7 +12,7 @@
 	<array>
 		<string>$(DEVELOPMENT_TEAM).group.$(APP_ID_MACOS)</string>
 	</array>
-	<key>com.apple.security.files.user-selected.read-only</key>
+	<key>com.apple.security.files.user-selected.read-write</key>
 	<true/>
 </dict>
 </plist>