Merge pull request NixOS#6812 from lovesegfault/rosetta-paths

fix(libstore): allow Nix to access all Rosetta 2 paths on MacOS
Minion3665 · Feb 23, 2023 · 028dd62 · 028dd62
2 parents ee085a1 + a3dff57
commit 028dd62
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/libstore/sandbox-defaults.sb b/src/libstore/sandbox-defaults.sb
@@ -98,7 +98,9 @@
 (allow file*
        (literal "/private/var/select/sh"))
 
-; Allow Rosetta 2 to run x86_64 binaries on aarch64-darwin.
+; Allow Rosetta 2 to run x86_64 binaries on aarch64-darwin (and vice versa).
 (allow file-read*
        (subpath "/Library/Apple/usr/libexec/oah")
-       (subpath "/System/Library/Apple/usr/libexec/oah"))
+       (subpath "/System/Library/Apple/usr/libexec/oah")
+       (subpath "/System/Library/LaunchDaemons/com.apple.oahd.plist")
+       (subpath "/Library/Apple/System/Library/LaunchDaemons/com.apple.oahd.plist"))