Merge pull request #10078 from szlend/fix-macos-local-network-sandbox

Fix `__darwinAllowLocalNetworking` sandbox
NixOS · Mar 4, 2024 · 7764edf · 7764edf
2 parents 4388559 + d60c3f7
commit 7764edf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/libstore/build/sandbox-defaults.sb b/src/libstore/build/sandbox-defaults.sb
@@ -45,7 +45,7 @@ R""(
 ; allow it if the package explicitly asks for it.
 (if (param "_ALLOW_LOCAL_NETWORKING")
     (begin
-      (allow network* (local ip) (local tcp) (local udp))
+      (allow network* (remote ip "localhost:*"))
 
       ; Allow access to /etc/resolv.conf (which is a symlink to
       ; /private/var/run/resolv.conf).