mirror of
https://github.com/NixOS/nix.git
synced 2025-11-18 08:19:35 +01:00
8433027e35
At this point many features are stripped out, but this works:
- Can run libnix{util,store,expr} unit tests
- Can run some Nix commands
Co-Authored-By volth <volth@volth.com>
Co-Authored-By Brian McKenna <brian@brianmckenna.org>
24 lines
663 B
Text
24 lines
663 B
Text
R""(
|
|
|
|
; Allow local and remote network traffic.
|
|
(allow network* (local ip) (remote ip))
|
|
|
|
; Allow access to /etc/resolv.conf (which is a symlink to
|
|
; /private/var/run/resolv.conf).
|
|
(allow file-read-metadata
|
|
(literal "/var")
|
|
(literal "/etc")
|
|
(literal "/etc/resolv.conf")
|
|
(literal "/private/etc/resolv.conf"))
|
|
|
|
(allow file-read*
|
|
(literal "/private/var/run/resolv.conf"))
|
|
|
|
; Allow DNS lookups.
|
|
(allow network-outbound (remote unix-socket (path-literal "/private/var/run/mDNSResponder")))
|
|
|
|
; Allow access to trustd.
|
|
(allow mach-lookup (global-name "com.apple.trustd"))
|
|
(allow mach-lookup (global-name "com.apple.trustd.agent"))
|
|
|
|
)""
|