fix(libstore): allow Nix to access all Rosetta 2 paths on MacOS

Fixes: #5884
NixOS · Jul 15, 2022 · b88fb50 · b88fb50
1 parent 59764eb
commit b88fb50
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/libstore/sandbox-defaults.sb b/src/libstore/sandbox-defaults.sb
@@ -98,7 +98,9 @@
 (allow file*
        (literal "/private/var/select/sh"))
 
-; Allow Rosetta 2 to run x86_64 binaries on aarch64-darwin.
+; Allow Rosetta 2 to run x86_64 binaries on aarch64-darwin (and vice versa).
 (allow file-read*
        (subpath "/Library/Apple/usr/libexec/oah")
-       (subpath "/System/Library/Apple/usr/libexec/oah"))
+       (subpath "/System/Library/Apple/usr/libexec/oah")
+       (subpath "/System/Library/LaunchDaemons/com.apple.oahd.plist")
+       (subpath "/Library/Apple/System/Library/LaunchDaemons/com.apple.oahd.plist"))