mirror of
https://github.com/privatevoid-net/nix-super.git
synced 2024-11-29 17:16:15 +02:00
17 lines
513 B
Text
17 lines
513 B
Text
|
; Allow local and remote network traffic.
|
||
|
(allow network* (local ip) (remote ip))
|
||
|
|
||
|
; Allow access to /etc/resolv.conf (which is a symlink to
|
||
|
; /private/var/run/resolv.conf).
|
||
|
(allow file-read-metadata
|
||
|
(literal "/var")
|
||
|
(literal "/etc")
|
||
|
(literal "/etc/resolv.conf")
|
||
|
(literal "/private/etc/resolv.conf"))
|
||
|
|
||
|
(allow file-read*
|
||
|
(literal "/private/var/run/resolv.conf"))
|
||
|
|
||
|
; Allow DNS lookups.
|
||
|
(allow network-outbound (remote unix-socket (path-literal "/private/var/run/mDNSResponder")))
|