postinstall: allow write access to cellars in repository.
If HOMEBREW_CELLAR (or HOMEBREW_PREFIX) are children of HOMEBREW_REPOSITORY it’s important to deny write to the repository and enable write to the Cellar/prefix afterwards.
This commit is contained in:
parent
6be6ce33e0
commit
58d998e208
@ -35,10 +35,10 @@ module Homebrew
|
|||||||
sandbox.record_log(formula.logs/"postinstall.sandbox.log")
|
sandbox.record_log(formula.logs/"postinstall.sandbox.log")
|
||||||
sandbox.allow_write_temp_and_cache
|
sandbox.allow_write_temp_and_cache
|
||||||
sandbox.allow_write_log(formula)
|
sandbox.allow_write_log(formula)
|
||||||
sandbox.allow_write_cellar(formula)
|
|
||||||
sandbox.allow_write_xcode
|
sandbox.allow_write_xcode
|
||||||
sandbox.allow_write_path HOMEBREW_PREFIX
|
|
||||||
sandbox.deny_write_homebrew_repository
|
sandbox.deny_write_homebrew_repository
|
||||||
|
sandbox.allow_write_path HOMEBREW_PREFIX
|
||||||
|
sandbox.allow_write_cellar(formula)
|
||||||
sandbox.exec(*args)
|
sandbox.exec(*args)
|
||||||
else
|
else
|
||||||
exec(*args)
|
exec(*args)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user