Merge pull request #4817 from emilazy/fix-sandboxed-big-sur-system-version-access

sandbox: allow SystemVersionCompat.plist on Darwin
2021-05-17 11:15:48 +02:00
parent de9e43c2ea 559a504da7
commit a22cad62d4
1 changed files with 3 additions and 1 deletions
@@ -32,7 +32,9 @@
       (literal "/tmp") (subpath TMPDIR))

 ; Some packages like to read the system version.
-(allow file-read* (literal "/System/Library/CoreServices/SystemVersion.plist"))
+(allow file-read*
+       (literal "/System/Library/CoreServices/SystemVersion.plist")
+       (literal "/System/Library/CoreServices/SystemVersionCompat.plist"))

 ; Without this line clang cannot write to /dev/null, breaking some configure tests.
 (allow file-read-metadata (literal "/dev"))