aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJude Taylor <me@jude.bio>2015-11-03 08:43:09 -0800
committerJude Taylor <me@jude.bio>2015-11-03 08:43:09 -0800
commit3b52e54e315c4449d2cd057289b95c9354294794 (patch)
tree8f8f72611b38204a8816d821403281b5f49ee0b2
parent85aeedb9bce365a8eef09a88f0e47c8fd4b21128 (diff)
darwin: allow reading system locale and zoneinfo
-rw-r--r--src/libstore/sandbox-defaults.sb.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/src/libstore/sandbox-defaults.sb.in b/src/libstore/sandbox-defaults.sb.in
index 9993f998d..e3c7f75e5 100644
--- a/src/libstore/sandbox-defaults.sb.in
+++ b/src/libstore/sandbox-defaults.sb.in
@@ -11,8 +11,12 @@
(literal "/private/etc/protocols")
(literal "/private/var/tmp")
(literal "/private/var/db")
- (subpath "/private/var/db/mds")
- (subpath "/usr/share/icu"))
+ (subpath "/private/var/db/mds"))
+
+(allow file-read*
+ (subpath "/usr/share/icu")
+ (subpath "/usr/share/locale"))
+ (subpath "/usr/share/zoneinfo"))
(allow file-write*
(literal "/dev/tty")