about summary refs log tree commit diff
diff options
context:
space:
mode:
authorJude Taylor <me@jude.bio>2015-11-03T16·43-0800
committerJude Taylor <me@jude.bio>2015-11-03T16·43-0800
commit3b52e54e315c4449d2cd057289b95c9354294794 (patch)
tree8f8f72611b38204a8816d821403281b5f49ee0b2
parent85aeedb9bce365a8eef09a88f0e47c8fd4b21128 (diff)
darwin: allow reading system locale and zoneinfo
-rw-r--r--src/libstore/sandbox-defaults.sb.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/src/libstore/sandbox-defaults.sb.in b/src/libstore/sandbox-defaults.sb.in
index 9993f998d161..e3c7f75e5e03 100644
--- a/src/libstore/sandbox-defaults.sb.in
+++ b/src/libstore/sandbox-defaults.sb.in
@@ -11,8 +11,12 @@
        (literal "/private/etc/protocols")
        (literal "/private/var/tmp")
        (literal "/private/var/db")
-       (subpath "/private/var/db/mds")
-       (subpath "/usr/share/icu"))
+       (subpath "/private/var/db/mds"))
+
+(allow file-read*
+       (subpath "/usr/share/icu")
+       (subpath "/usr/share/locale"))
+       (subpath "/usr/share/zoneinfo"))
 
 (allow file-write*
        (literal "/dev/tty")