diff options
| author | Eelco Dolstra <edolstra@gmail.com> | 2021-05-17 11:15:48 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-05-17 11:15:48 +0200 |
| commit | a22cad62d49428ce5d5afb8a5c19841f50f3c76a (patch) | |
| tree | 7c3f4ced9efab52f703207f02ad566f59cc358d3 | |
| parent | de9e43c2ea8ac8752d42660c17a7b683682ef38b (diff) | |
| parent | 559a504da7d4289badfb4ebf7906f80fbf50bedf (diff) | |
Merge pull request #4817 from emilazy/fix-sandboxed-big-sur-system-version-access
sandbox: allow SystemVersionCompat.plist on Darwin
| -rw-r--r-- | src/libstore/sandbox-defaults.sb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/libstore/sandbox-defaults.sb b/src/libstore/sandbox-defaults.sb index 351037822..2bb1ea130 100644 --- a/src/libstore/sandbox-defaults.sb +++ b/src/libstore/sandbox-defaults.sb @@ -32,7 +32,9 @@ (literal "/tmp") (subpath TMPDIR)) ; Some packages like to read the system version. -(allow file-read* (literal "/System/Library/CoreServices/SystemVersion.plist")) +(allow file-read* + (literal "/System/Library/CoreServices/SystemVersion.plist") + (literal "/System/Library/CoreServices/SystemVersionCompat.plist")) ; Without this line clang cannot write to /dev/null, breaking some configure tests. (allow file-read-metadata (literal "/dev")) |