Cleared 1m ago · safedep/pmg #307 · Go · ★ 565 · Apache-2.0

Support Unix domain socket bind in sandbox policy

Problem Tools like the Nx daemon bind a Unix domain socket (e.g. /private/tmp/<hash>/d.sock) and currently fail under restrictive sandbox profiles with EPERM on listen(), even when the parent path is in filesystem.allow_write. macOS Seatbelt treats bind/listen on AF_UNIX as…

What we checked

Similar unclaimed issues