sandbox: Allow file-write-data for /var/db/mds

It seems CommonCrypto sometimes uses mds, which can occasionally make
'git clone' fail if write access to /var/db/mds/system/mds.lock is
denied. Fix this by adding an exception.

Closes: https://trac.macports.org/ticket/50469
This commit is contained in:
Clemens Lang
2017-12-18 00:35:22 +01:00
parent db2bba84d5
commit 1f76522228
+1 -1
View File
@@ -86,7 +86,7 @@ proc portsandbox::set_profile {target} {
(literal \"/dev/stdin\") (literal \"/dev/stdout\") (literal \"/dev/stderr\") \
(literal \"/dev/random\") (literal \"/dev/urandom\") \
(regex #\"^/dev/fd/\")) (allow file-write* \
(regex #\"^(/private)?(/var)?/tmp/\" #\"^(/private)?/var/folders/\"))"
(regex #\"^(/private)?(/var)?/tmp/\" #\"^(/private)?/var/folders/\" #\"^(/private)?/var/db/mds/\"))"
set perms [list file-write*]
if {${os.major} >= 17} {