From 3b52e54e315c4449d2cd057289b95c9354294794 Mon Sep 17 00:00:00 2001 From: Jude Taylor Date: Tue, 3 Nov 2015 08:43:09 -0800 Subject: [PATCH] darwin: allow reading system locale and zoneinfo --- src/libstore/sandbox-defaults.sb.in | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/libstore/sandbox-defaults.sb.in b/src/libstore/sandbox-defaults.sb.in index 9993f998d..e3c7f75e5 100644 --- a/src/libstore/sandbox-defaults.sb.in +++ b/src/libstore/sandbox-defaults.sb.in @@ -11,8 +11,12 @@ (literal "/private/etc/protocols") (literal "/private/var/tmp") (literal "/private/var/db") - (subpath "/private/var/db/mds") - (subpath "/usr/share/icu")) + (subpath "/private/var/db/mds")) + +(allow file-read* + (subpath "/usr/share/icu") + (subpath "/usr/share/locale")) + (subpath "/usr/share/zoneinfo")) (allow file-write* (literal "/dev/tty")