Ticket #42428: patch-portsandbox.tcl.diff

portsandbox.tcl

@@ -83 +83 @@
     }
 
     set portsandbox_profile "(version 1) (allow default) (deny file-write*) \
-(allow file-write-data (literal \"/dev/null\") (literal \"/dev/zero\") \
+(allow file-write-data \
+(literal \"/dev/null\") (literal \"/dev/zero\") \
 (literal \"/dev/dtracehelper\") (literal \"/dev/tty\") \
 (literal \"/dev/stdin\") (literal \"/dev/stdout\") (literal \"/dev/stderr\") \
-(regex #\"^/dev/fd/\")) (allow file-write* \
-(regex #\"^(/private)?(/var)?/tmp/\" #\"^(/private)?/var/folders/\"))"
+(regex #\"^/dev/fd/\")) \
+(allow file-write* \
+(regex #\"^/opt/.TemporaryItems/\") \
+(regex #\"^(/private)?(/var)?/tmp/\") \
+(regex #\"^(/private)?/var/folders/\"))"
 
     foreach dir $allow_dirs {
         append portsandbox_profile " (allow file-write* ("