WeetHet
7d46e9db7e
https://github.com/NixOS/nixpkgs/pull/451579 PR enabled c-aresSupport for curl on darwin which ended up breaking DNS resolution in FOD sandboxes: ``` nix-run> exporting https://tangled.org/@weethet.bsky.social/nix-run (rev 73d7bf6b58848fb8f42e3a69816e0847f041c689) into /nix/store/m4m951648wmipxgwrgsml9gzjwfpfhm7-nix-run-73d7bf6 nix-run> Initialized empty Git repository in /nix/store/m4m951648wmipxgwrgsml9gzjwfpfhm7-nix-run-73d7bf6/.git/ nix-run> fatal: unable to access 'https://tangled.org/@weethet.bsky.social/nix-run/': Could not resolve host: tangled.org (Could not contact DNS servers) nix-run> fatal: unable to access 'https://tangled.org/@weethet.bsky.social/nix-run/': Could not resolve host: tangled.org (Could not contact DNS servers) nix-run> fatal: unable to access 'https://tangled.org/@weethet.bsky.social/nix-run/': Could not resolve host: tangled.org (Could not contact DNS servers) nix-run> Unable to checkout 73d7bf6b58848fb8f42e3a69816e0847f041c689 from https://tangled.org/@weethet.bsky.social/nix-run. ``` with these sandbox failures: ``` deny mach-lookup com.apple.SystemConfiguration.DNSConfiguration deny file-read-metadata /private/etc/hosts deny file-read-data /private/etc/hosts ``` We allow those so that DNS resolution work fine Change-Id: I9102293691972feb085adf8e9b1ad915bb3a36ab