External/pmg
1
0
Fork 0
mirror of https://github.com/safedep/pmg.git synced 2026-08-03 07:24:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: Add support for config templates

Browse Source
This commit is contained in:
Abhisek Datta
2026-01-09 18:46:08 +05:30
parent e72c1d6324
commit 9cb5345bd6
4 changed files with 84 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sandbox/platform/seatbelt_translator_darwin.go
+6 -1
View File
@@ -38,7 +38,12 @@ func (t *seatbeltPolicyTranslator) translate(policy *sandbox.SandboxPolicy) (str
sb.WriteString("(allow mach-lookup)\n")
sb.WriteString("(allow mach-register)\n")
sb.WriteString("(allow ipc-posix-shm)\n")
sb.WriteString("(allow signal)\n\n")
sb.WriteString("(allow signal)\n")
sb.WriteString(";; Allow reading file metadata for getcwd() and similar operations\n")
sb.WriteString("(allow file-read-metadata)\n")
sb.WriteString(";; Allow reading system configuration and libraries needed for process execution\n")
sb.WriteString("(allow file-read* (subpath \"/dev\"))\n")
sb.WriteString("(allow file-read* (subpath \"/etc\"))\n\n")
// Filesystem rules
if err := t.translateFilesystem(policy, &sb); err != nil {