diff --git a/Library/Homebrew/sandbox.rb b/Library/Homebrew/sandbox.rb index 9054372bf2..e847744ad0 100644 --- a/Library/Homebrew/sandbox.rb +++ b/Library/Homebrew/sandbox.rb @@ -152,6 +152,10 @@ class Sandbox (regex #"^/dev/ttys?[0-9]*$") ) (deny file-write*) ; deny non-whitelist file write operations + (allow process-exec + (literal "/bin/ps") + (with no-sandbox) + ) ; allow certain processes running without sandbox (allow default) ; allow everything else EOS