Merge pull request #234111 from reckenrode/pinentry-mac-darwin-sandbox

pinentry-mac: fix build with Darwin sandbox enabled
NixOS · May 27, 2023 · 9fdb5f9 · 9fdb5f9
2 parents 5bf58e0 + 8f84341
commit 9fdb5f9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkgs/tools/security/pinentry/mac.nix b/pkgs/tools/security/pinentry/mac.nix
@@ -32,6 +32,11 @@ stdenv.mkDerivation rec {
     chmod -R u+w macosx/*.nib
   '';
 
+  # Unfortunately, PlistBuddy from xcbuild is not compatible enough pinentry-mac’s build process.
+  sandboxProfile = ''
+    (allow process-exec (literal "/usr/libexec/PlistBuddy"))
+  '';
+
   nativeBuildInputs = [ autoreconfHook texinfo ];
   buildInputs = [ libassuan libgpg-error libiconv Cocoa ];