diff options
| author | Dan Peebles <pumpkin@me.com> | 2015-03-02 23:01:24 -0500 |
|---|---|---|
| committer | Dan Peebles <pumpkin@me.com> | 2015-03-02 23:01:24 -0500 |
| commit | 336c4270c625cf606d3a2bb141b1a648dba8fc05 (patch) | |
| tree | b9edb8f8a9425bfe183648002811492a808a5bce /src/libstore/build.cc | |
| parent | cffa7f80ab04e881b8e926962d9b51e2160ae5bd (diff) | |
Make the default impure prefix (not actual allowed impurities!) include all of /System/Library, since we also want PrivateFrameworks from there and (briefly) TextEncodings, and who knows what else. Yay infectious impurities?
Diffstat (limited to 'src/libstore/build.cc')
| -rw-r--r-- | src/libstore/build.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libstore/build.cc b/src/libstore/build.cc index 707c416d6..addf0923d 100644 --- a/src/libstore/build.cc +++ b/src/libstore/build.cc @@ -56,7 +56,7 @@ /* chroot-like behavior from Apple's sandbox */ #if __APPLE__ #define SANDBOX_ENABLED 1 - #define DEFAULT_ALLOWED_IMPURE_PREFIXES "/System/Library/Frameworks /usr/lib /dev /bin/sh" + #define DEFAULT_ALLOWED_IMPURE_PREFIXES "/System/Library /usr/lib /dev /bin/sh" #else #define SANDBOX_ENABLED 0 #define DEFAULT_ALLOWED_IMPURE_PREFIXES "/bin" "/usr/bin" |