pinentry-mac: fix build with Darwin sandbox enabled

2023-05-19 15:58:26 -04:00 · 2023-05-19 15:58:26 -04:00 · 8f84341c90
parent bc7872990b
commit 8f84341c90
1 changed files with 5 additions and 0 deletions
--- a/pkgs/tools/security/pinentry/mac.nix
+++ b/pkgs/tools/security/pinentry/mac.nix
@ -32,6 +32,11 @@ stdenv.mkDerivation rec {
    chmod -R u+w macosx/*.nib
  '';

+  # Unfortunately, PlistBuddy from xcbuild is not compatible enough pinentry-mac’s build process.
+  sandboxProfile = ''
+    (allow process-exec (literal "/usr/libexec/PlistBuddy"))
+  '';
+
  nativeBuildInputs = [ autoreconfHook texinfo ];
  buildInputs = [ libassuan libgpg-error libiconv Cocoa ];