avoid cascaded "(allow sysctl-read (if" statement, this fixes "Seatbe…

…ltExecServer: Failed to initialize sandbox: line 198: car: argument 1 must be: pair"
blueboxd · Jul 21, 2023 · 6fc8028 · 6fc8028
1 parent 2e71fd8
commit 6fc8028
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/sandbox/policy/mac/common.sb b/sandbox/policy/mac/common.sb
@@ -281,11 +281,14 @@
     (sysctl-name "kern.usrstack64")
     (sysctl-name "kern.version")
     (sysctl-name "sysctl.proc_cputype")
-    (if (defined? 'sysctl-name-prefix)
-      (sysctl-name-prefix "hw.perflevel"))
   )
 )
 
+(if (>= os-version 1100)
+  (allow sysctl-read
+  (sysctl-name-prefix "hw.perflevel"))
+)
+
 (allow network-outbound
   (literal "/private/var/run/asl_input")
   (literal "/private/var/run/syslog")