[patch] Fix macOS 10.13 seatbelt sandbox suid bit setting

0001-Fix-macOS-10.13-seatbelt-sandbox-suid-bit-setting.patch (text/plain), 964 bytes, created by Michael Weiser on 2017-12-08 10:13:33 UTC

From 687c5da1a0383cdeacb1a0562d1dd61e3f45c8c3 Mon Sep 17 00:00:00 2001
From: Michael Weiser <[e-mail]>
Date: Fri, 8 Dec 2017 11:00:47 +0100
Subject: [PATCH] Fix macOS 10.13 seatbelt sandbox suid bit setting

macOS 10.13 changed the defaults for what is allowed in a seatbelt
sandbox, denying setting suid and sgid bits on files. See
https://trac.macports.org/ticket/54963 for additional information.
---
 pym/portage/const.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pym/portage/const.py b/pym/portage/const.py
index 172c5b189..bdb287379 100644
--- a/pym/portage/const.py
+++ b/pym/portage/const.py
@@ -83,7 +83,7 @@ MACOSSANDBOX_BINARY      = "/usr/bin/sandbox-exec"
 MACOSSANDBOX_PROFILE     = '''(version 1)
 (allow default)
 (deny file-write*)
-(allow file-write*
+(allow file-write* file-write-setugid
 @@MACOSSANDBOX_PATHS@@)
 (allow file-write-data
 @@MACOSSANDBOX_PATHS_CONTENT_ONLY@@)'''
-- 
2.14.3 (Apple Git-98)