Alex James
cc6ed6d742
Modern versions of macOS link the system-provided curl library against the system-provided libressl library. On recent versions of macOS, the system libressl library reads from /private/etc/ssl/openssl.cnf. As this path is not included in the default Nix sandbox profile, applications that use the system curl library will report a permission error [1]. PR #300521 previously addressed this for the prebuilt cargo binary used by the bootstrap version of cargo. It appears that rustc-unwrapped, which includes its own cargo binary, has the same issue [2]. Similarly patch it with `install_name_tool` to replace use of the system curl library with one from nixpkgs. [1]: https://github.com/NixOS/nix/issues/9625 [2]: https://gist.github.com/al3xtjames/645c8be2c23021aadfe062cfc319c8c4