Support Unix domain socket bind in sandbox policy
#307 · Go · ★ 565 · Apache-2.0 · updated 4mo ago
Problem Tools like the Nx daemon bind a Unix domain socket (e.g. /private/tmp/<hash>/d.sock) and currently fail under restrictive sandbox profiles with EPERM on listen(), even when the parent path is in filesystem.allow_write. macOS Seatbelt treats bind/listen on AF_UNIX as…
replies in ~0h5/5 outside PRs mergedpoints at a filehas CONTRIBUTING
Cleared 1m ago