Merge pull request #11316 from NixOS/backport-11270-to-2.21-maintenance

[Backport 2.21-maintenance] libstore: fix port binding in __darwinAllowLocalNetworking sandbox
NixOS · Aug 17, 2024 · a4c9218 · a4c9218
2 parents 8ac1a39 + 53ce99f
commit a4c9218
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/libstore/build/sandbox-defaults.sb b/src/libstore/build/sandbox-defaults.sb
@@ -46,6 +46,7 @@ R""(
 (if (param "_ALLOW_LOCAL_NETWORKING")
     (begin
       (allow network* (remote ip "localhost:*"))
+      (allow network-inbound (local ip "*:*")) ; required to bind and listen
 
       ; Allow access to /etc/resolv.conf (which is a symlink to
       ; /private/var/run/resolv.conf).