Changeset 98679

Timestamp:

Oct 12, 2012, 11:15:53 PM (12 years ago)

Author:

jmr@…

Message:

add /var/folders to sandbox

File:

• trunk/base/src/port1.0/portsandbox.tcl (modified) (1 diff)

trunk/base/src/port1.0/portsandbox.tcl

@@ -70 +70 @@
 
     set portsandbox_profile "(version 1) (allow default) (deny file-write*) \
-(allow file-write-data (literal \"/dev/null\")) (allow file-write* (regex #\"^(/private)?(/var)?/tmp/\"))"
+(allow file-write-data (literal \"/dev/null\")) (allow file-write* (regex #\"^(/private)?(/var)?/tmp/\" \
+#\"^(/private)?/var/folders/\"))"
+
     foreach dir $allow_dirs {
-        append portsandbox_profile " (allow file-write* "
+        append portsandbox_profile " (allow file-write* ("
         if {${os.major} > 9} {
-            append portsandbox_profile "(subpath \"${dir}\")"
+            append portsandbox_profile "subpath \"${dir}\"))"
         } else {
-            append portsandbox_profile "(regex #\"^${dir}/\")"
+            append portsandbox_profile "regex #\"^${dir}/\"))"
         }
-        append portsandbox_profile ")"
     }
 }