Merge pull request #5251 from emilazy/darwin-sandbox-rosetta-2

sandbox: allow Rosetta 2 on Darwin
2021-09-15 09:11:26 +02:00
parent fda4efff87 56025ad3b1
commit d2c8eed344
1 changed files with 4 additions and 0 deletions
@@ -97,3 +97,7 @@
 ; This is used by /bin/sh on macOS 10.15 and later.
 (allow file*
       (literal "/private/var/select/sh"))
+
+; Allow Rosetta 2 to run x86_64 binaries on aarch64-darwin.
+(allow file-read*
+       (subpath "/Library/Apple/usr/libexec/oah"))