MACOSSANDBOX_PROFILE: improve performance/functionality on Lion
authorFabian Groffen <grobian@gentoo.org>
Sun, 30 Sep 2012 10:57:39 +0000 (12:57 +0200)
committerFabian Groffen <grobian@gentoo.org>
Sun, 30 Sep 2012 10:57:39 +0000 (12:57 +0200)
Lion now logs by default all denied access calls, which slows down
considerably.  Next allow access to /dev/tty and /dev/dtracehelper which
seem useful in general.

Patch by Michael Weisner, bug #430640

pym/portage/const.py

index 8aab65fac6ac658fe9c97a22a1ffc1cc659c0258..a460b7ea4492d9b617a0df02b0c19dac8f67aa40 100644 (file)
@@ -79,11 +79,13 @@ MACOSSANDBOX_PROFILE     = '''(version 1)
 
 (allow default)
 
-(deny file-write*)
+(deny file-write* (with no-log))
 
 (allow file-read* file-write*
   (literal
     #"@@WRITEABLE_PREFIX@@"
+    #"/dev/tty"
+    #"/dev/dtracehelper"
   )
 
   (regex