Merge pull request #6954 from winterqt/darwin-sandbox-trustd

fix(libstore): allow access to trustd on macOS
NixOS · Aug 26, 2022 · 7918adb · 7918adb
2 parents 0b25446 + 8e56594
commit 7918adb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/libstore/sandbox-network.sb b/src/libstore/sandbox-network.sb
@@ -14,3 +14,7 @@
 
 ; Allow DNS lookups.
 (allow network-outbound (remote unix-socket (path-literal "/private/var/run/mDNSResponder")))
+
+; Allow access to trustd.
+(allow mach-lookup (global-name "com.apple.trustd"))
+(allow mach-lookup (global-name "com.apple.trustd.agent"))