about summary refs log tree commit diff
path: root/pkgs/shells/fish
diff options
context:
space:
mode:
authorRandy Eckenrode <randy@largeandhighquality.com>2023-05-23 21:49:17 -0400
committerCole Helbling <cole.e.helbling@outlook.com>2023-06-08 17:55:12 -0700
commitdad6320407c2970f6d1f590c693ccb2619231ec1 (patch)
tree7947134cdaaeaac1eef8758d44934fe1cc7a6304 /pkgs/shells/fish
parente6e3439417b486a6b100695431032759d3ce5118 (diff)
fish: fix build with Darwin sandbox enabled
Diffstat (limited to 'pkgs/shells/fish')
-rw-r--r--pkgs/shells/fish/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/pkgs/shells/fish/default.nix b/pkgs/shells/fish/default.nix
index cd8fe4d0ca264..a6284298155c4 100644
--- a/pkgs/shells/fish/default.nix
+++ b/pkgs/shells/fish/default.nix
@@ -210,6 +210,12 @@ let
       "-DMAC_CODESIGN_ID=OFF"
     ];
 
+    # Fish’s test suite needs to be able to look up process information and send signals.
+    sandboxProfile = lib.optionalString stdenv.isDarwin ''
+      (allow mach-lookup mach-task-name)
+      (allow signal (target children))
+    '';
+
     # The optional string is kind of an inelegant way to get fish to cross compile.
     # Fish needs coreutils as a runtime dependency, and it gets put into
     # CMAKE_PREFIX_PATH, which cmake uses to look up build time programs, so it