From a10951de08117dd2f9e7117fdd6fa61a7b4e2b72 Mon Sep 17 00:00:00 2001 From: Eelco Dolstra Date: Mon, 12 Jun 2017 14:04:52 +0200 Subject: [PATCH] OS X -> macOS (cherry picked from commit c20641ce569dc1fdeaeaa147b0292f258667f53b) --- doc/manual/release-notes/rl-1.11.10.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/manual/release-notes/rl-1.11.10.xml b/doc/manual/release-notes/rl-1.11.10.xml index 13cb497d9..415388b3e 100644 --- a/doc/manual/release-notes/rl-1.11.10.xml +++ b/doc/manual/release-notes/rl-1.11.10.xml @@ -19,7 +19,7 @@ filter. Note that this imposes a small performance penalty (e.g. 1% when building GNU Hello). Using seccomp, we now also prevent the creation of extended attributes and POSIX ACLs since these cannot be represented in the NAR format and (in the case of POSIX ACLs) allow -bypassing regular Nix store permissions. On OS X, the restriction is +bypassing regular Nix store permissions. On macOS, the restriction is implemented using the existing sandbox mechanism, which now uses a minimal “allow all except the creation of setuid/setgid binaries” profile when regular sandboxing is disabled. On other platforms, the