 +  (subpath "/private/etc/opt/cprocsp")
 +  (subpath "/private/var/opt/cprocsp")
 +  (subpath "/Applications/CryptoPro")
++  (subpath "/Library")
 +)
 +
 +(allow mach-lookup

 bssl::UniquePtr<EVP_PKEY> GetClientCertPublicKey(
     const X509Certificate* certificate);
diff --git a/sandbox/policy/mac/common.sb b/sandbox/policy/mac/common.sb
index 349fc080221b..94a7184a9e37 100644
--- a/sandbox/policy/mac/common.sb
+++ b/sandbox/policy/mac/common.sb
@@ -124,6 +124,21 @@
   (subpath "/usr/lib")
 )
 

From 30591a69a18a4cdbaca01ea84a1211ab1d4f5549 Mon Sep 17 00:00:00 2001
From: Dmitrii Pichulin <deem@deem.ru>
Date: Wed, 18 Nov 2020 14:39:28 +0300
Subject: [PATCH] chromium GOSTSSL

---
 chrome/app/app-entitlements.plist             |   6 +
 .../native_process_launcher_posix.cc          |  12 ++
 .../resources/local_ntp/local_ntp.html        |   4 +-
 .../browser/resources/local_ntp/local_ntp.js  |   2 +-
