Merge pull request #6967 from NixOS/backport-6954-to-2.11-maintenance

[Backport 2.11-maintenance] fix(libstore): allow access to trustd on macOS
fix(libstore): allow access to trustd on macOS
2022-08-27 14:27:54 +01:00 · 2022-08-26 09:45:16 +00:00 · 2022-08-25 11:48:50 +02:00
3 changed files with 5 additions and 2 deletions
--- a/doc/manual/src/SUMMARY.md.in
+++ b/doc/manual/src/SUMMARY.md.in
@@ -72,7 +72,6 @@
  - [Hacking](contributing/hacking.md)
  - [CLI guideline](contributing/cli-guideline.md)
 - [Release Notes](release-notes/release-notes.md)
-  - [Release X.Y (202?-??-??)](release-notes/rl-next.md)
  - [Release 2.11 (2022-08-25)](release-notes/rl-2.11.md)
  - [Release 2.10 (2022-07-11)](release-notes/rl-2.10.md)
  - [Release 2.9 (2022-05-30)](release-notes/rl-2.9.md)
--- a/flake.nix
+++ b/flake.nix
@@ -15,7 +15,7 @@
        then ""
        else "pre${builtins.substring 0 8 (self.lastModifiedDate or self.lastModified or "19700101")}_${self.shortRev or "dirty"}";

-      officialRelease = false;
+      officialRelease = true;

      linux64BitSystems = [ "x86_64-linux" "aarch64-linux" ];
      linuxSystems = linux64BitSystems ++ [ "i686-linux" ];
--- a/src/libstore/sandbox-network.sb
+++ b/src/libstore/sandbox-network.sb
@@ -14,3 +14,7 @@

 ; Allow DNS lookups.
 (allow network-outbound (remote unix-socket (path-literal "/private/var/run/mDNSResponder")))
+
+; Allow access to trustd.
+(allow mach-lookup (global-name "com.apple.trustd"))
+(allow mach-lookup (global-name "com.apple.trustd.agent"))
Author	SHA1	Message	Date
Domen Kožar	11e45768b3	Merge pull request #6967 from NixOS/backport-6954-to-2.11-maintenance [Backport 2.11-maintenance] fix(libstore): allow access to trustd on macOS	2022-08-27 14:27:54 +01:00
Winter	0a9ab8f994	fix(libstore): allow access to trustd on macOS (cherry picked from commit `8e5659423e`)	2022-08-26 09:45:16 +00:00
Eelco Dolstra	f673551e71	Mark official release	2022-08-25 11:48:50 +02:00