picnoir/nix-gh
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Allow getpwuid in the darwin sandbox.

Browse source
This commit is contained in:
Daiderd Jordan 2017-11-03 10:50:49 +01:00
parent 197922ea4e
commit 453f675810
No known key found for this signature in database
GPG key ID: D02435D05B810C96
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/libstore/sandbox-defaults.sb
View file

@ -21,6 +21,9 @@
; Allow sending signals within the sandbox.
(allow signal (target same-sandbox))
; Allow getpwuid.
(allow mach-lookup (global-name "com.apple.system.opendirectoryd.libinfo"))
; Access to /tmp.
(allow file* process-exec (literal "/tmp") (subpath TMPDIR))