Merge pull request #4817 from emilazy/fix-sandboxed-big-sur-system-version-access

sandbox: allow SystemVersionCompat.plist on Darwin
This commit is contained in:
Eelco Dolstra 2021-05-17 11:15:48 +02:00 committed by GitHub
commit a22cad62d4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -32,7 +32,9 @@
(literal "/tmp") (subpath TMPDIR))
; Some packages like to read the system version.
(allow file-read* (literal "/System/Library/CoreServices/SystemVersion.plist"))
(allow file-read*
(literal "/System/Library/CoreServices/SystemVersion.plist")
(literal "/System/Library/CoreServices/SystemVersionCompat.plist"))
; Without this line clang cannot write to /dev/null, breaking some configure tests.
(allow file-read-metadata (literal "/dev"))