sandbox: allow certain processes running without sandbox

2015-09-15 11:46:56 +08:00 · 2015-09-15 11:46:56 +08:00 · a0372e97d8
commit a0372e97d8
parent 10ab92114e
1 changed files with 4 additions and 0 deletions
--- a/Library/Homebrew/sandbox.rb
+++ b/Library/Homebrew/sandbox.rb
@ -152,6 +152,10 @@ class Sandbox
          (regex #"^/dev/ttys?[0-9]*$")
          )
      (deny file-write*) ; deny non-whitelist file write operations
+      (allow process-exec
+          (literal "/bin/ps")
+          (with no-sandbox)
+          ) ; allow certain processes running without sandbox
      (allow default) ; allow everything else
    EOS