maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update sandbox profiles within nix

Browse source
This commit is contained in:
Jude Taylor 2015-11-12 22:51:52 -08:00
parent 8a7f0dfd68
commit 22dfd023fa
2 changed files with 19 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

18
corepkgs/buildenv.nix
View file

@ -23,10 +23,20 @@ derivation {
# network traffic, so don't do that.
preferLocalBuild = true;
__impureHostDeps = if builtins.currentSystem == "x86_64-darwin" then [
"/usr/lib/libSystem.dylib"
"/usr/lib/system"
] else null;
__sandboxProfile = ''
(allow sysctl-read)
(allow file-read*
(literal "/usr/lib/libSystem.dylib")
(literal "/usr/lib/libSystem.B.dylib")
(literal "/usr/lib/libobjc.A.dylib")
(literal "/usr/lib/libobjc.dylib")
(literal "/usr/lib/libauto.dylib")
(literal "/usr/lib/libc++abi.dylib")
(literal "/usr/lib/libc++.1.dylib")
(literal "/usr/lib/libDiagnosticMessagesClient.dylib")
(subpath "/usr/lib/system")
(subpath "/dev"))
'';
inherit chrootDeps;
}