re-fix permissions for GHC

This commit is contained in:
Jude Taylor 2015-11-16 05:29:09 -08:00
parent 5deb7fbdfb
commit b9b7bb1806

View file

@ -2503,8 +2503,11 @@ void DerivationGoal::runChild()
} }
sandboxProfile += ")\n"; sandboxProfile += ")\n";
/* Our inputs (transitive dependencies and any impurities computed above) */ /* Our inputs (transitive dependencies and any impurities computed above)
sandboxProfile += "(allow file-read* process-exec\n";
without file-write* allowed, access() incorrectly returns EPERM
*/
sandboxProfile += "(allow file-read* file-write* process-exec\n";
for (auto & i : dirsInChroot) { for (auto & i : dirsInChroot) {
if (i.first != i.second) if (i.first != i.second)
throw SysError(format("can't map '%1%' to '%2%': mismatched impure paths not supported on darwin")); throw SysError(format("can't map '%1%' to '%2%': mismatched impure paths not supported on darwin"));