picnoir/nix-gh
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #1651 from LnL7/darwin-sandbox-getpwuid

Browse source 
Allow getpwuid in the darwin sandbox
This commit is contained in:
Eelco Dolstra 2017-11-03 10:55:31 +01:00 committed by GitHub
parent e104842f8b 453f675810
commit 9ccea31dc2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/libstore/sandbox-defaults.sb
View file

@ -21,6 +21,9 @@
; Allow sending signals within the sandbox.
(allow signal (target same-sandbox))
; Allow getpwuid.
(allow mach-lookup (global-name "com.apple.system.opendirectoryd.libinfo"))
; Access to /tmp.
(allow file* process-exec (literal "/tmp") (subpath TMPDIR))