sandbox: Allow UNIX sockets on macOS even when block-network is used.

philwo · buchgr · commit cd159bcee72a · 2017-07-25T13:17:55.000+02:00
Closes bazelbuild#3444. PiperOrigin-RevId: 163047183
diff --git a/src/main/java/com/google/devtools/build/lib/sandbox/DarwinSandboxedSpawnRunner.java b/src/main/java/com/google/devtools/build/lib/sandbox/DarwinSandboxedSpawnRunner.java
@@ -248,6 +248,7 @@ private void writeConfig(
         out.println("(deny network*)");
         out.println("(allow network* (local ip \"localhost:*\"))");
         out.println("(allow network* (remote ip \"localhost:*\"))");
+        out.println("(allow network* (remote unix-socket))");
       }
 
       // By default, everything is read-only.

Original file line number	Diff line number	Diff line change
`@@ -248,6 +248,7 @@ private void writeConfig(`
`248`	`248`	`out.println("(deny network*)");`
`249`	`249`	`out.println("(allow network* (local ip \"localhost:*\"))");`
`250`	`250`	`out.println("(allow network* (remote ip \"localhost:*\"))");`
	`251`	`+ out.println("(allow network* (remote unix-socket))");`
`251`	`252`	`}`
`252`	`253`
`253`	`254`	`// By default, everything is read-only.`