fish: fix build with Darwin sandbox enabled

NixOS · Jun 9, 2023 · dad6320 · dad6320
1 parent e6e3439
commit dad6320
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkgs/shells/fish/default.nix b/pkgs/shells/fish/default.nix
@@ -210,6 +210,12 @@ let
       "-DMAC_CODESIGN_ID=OFF"
     ];
 
+    # Fish’s test suite needs to be able to look up process information and send signals.
+    sandboxProfile = lib.optionalString stdenv.isDarwin ''
+      (allow mach-lookup mach-task-name)
+      (allow signal (target children))
+    '';
+
     # The optional string is kind of an inelegant way to get fish to cross compile.
     # Fish needs coreutils as a runtime dependency, and it gets put into
     # CMAKE_PREFIX_PATH, which cmake uses to look up build time programs, so it