From 3b52e54e315c4449d2cd057289b95c9354294794 Mon Sep 17 00:00:00 2001 From: Jude Taylor Date: Tue, 3 Nov 2015 08:43:09 -0800 Subject: darwin: allow reading system locale and zoneinfo --- src/libstore/sandbox-defaults.sb.in | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/libstore/sandbox-defaults.sb.in b/src/libstore/sandbox-defaults.sb.in index 9993f998d161..e3c7f75e5e03 100644 --- a/src/libstore/sandbox-defaults.sb.in +++ b/src/libstore/sandbox-defaults.sb.in @@ -11,8 +11,12 @@ (literal "/private/etc/protocols") (literal "/private/var/tmp") (literal "/private/var/db") - (subpath "/private/var/db/mds") - (subpath "/usr/share/icu")) + (subpath "/private/var/db/mds")) + +(allow file-read* + (subpath "/usr/share/icu") + (subpath "/usr/share/locale")) + (subpath "/usr/share/zoneinfo")) (allow file-write* (literal "/dev/tty") -- cgit 1.4.1 From c10ef2d13467a143d9e750e400343fbc7070f23f Mon Sep 17 00:00:00 2001 From: Jude Taylor Date: Tue, 3 Nov 2015 09:03:32 -0800 Subject: fix syntax error --- src/libstore/sandbox-defaults.sb.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstore/sandbox-defaults.sb.in b/src/libstore/sandbox-defaults.sb.in index e3c7f75e5e03..b5e80085fbe2 100644 --- a/src/libstore/sandbox-defaults.sb.in +++ b/src/libstore/sandbox-defaults.sb.in @@ -15,7 +15,7 @@ (allow file-read* (subpath "/usr/share/icu") - (subpath "/usr/share/locale")) + (subpath "/usr/share/locale") (subpath "/usr/share/zoneinfo")) (allow file-write* -- cgit 1.4.1