viyatb-oai 696b4502df Allow semaphore limit queries in the macOS sandbox (#39976) ...

## Why

Python's `ProcessPoolExecutor` queries `SEM_NSEMS_MAX` through `sysconf`, which reads the `kern.sysv.semmns` sysctl on macOS.

## What changed

- Allow reads of `kern.sysv.semmns` in the base Seatbelt policy.
- Verify `/usr/bin/getconf SEM_NSEMS_MAX` succeeds with both read-only and workspace-write sandbox policies.

GitOrigin-RevId: ab3ae92dc8991729f90a47c1994eedb6c7a2b9cd

2026-08-21 17:16:51 +00:00

..

src

Allow semaphore limit queries in the macOS sandbox (#39976)

2026-08-21 17:16:51 +00:00

BUILD.bazel

Restrict macOS preference reads to full-disk policies (#39811)

2026-08-20 23:18:55 +00:00

Cargo.toml

Support Windows sandboxing in the exec server (#34423)

2026-07-20 22:35:14 +00:00