Allowlist mac indexing directory

We were checking every directory in the sandbox to make sure we keep track of
everything that is stored there. On macOS .DS_Store is a valid
file that shouldn't trigger a crash.

Fixes #23963

RELNOTES:none
PiperOrigin-RevId: 691061742
Change-Id: I085a38fa174cd71682bb599ab3cb1ade0dcd350d

src/main/java/com/google/devtools/build/lib/sandbox/SandboxModule.java

@@ -67,8 +67,11 @@
 /** This module provides the Sandbox spawn strategy. */
 public final class SandboxModule extends BlazeModule {
 
+  private static final String MAC_INDEX_FILE = ".DS_Store";
+
   private static final ImmutableSet<String> SANDBOX_BASE_PERSISTENT_DIRS =
       ImmutableSet.of(
+          MAC_INDEX_FILE,
           SandboxStash.SANDBOX_STASH_BASE,
           SandboxStash.TEMPORARY_SANDBOX_STASH_BASE,
           AsynchronousTreeDeleter.MOVED_TRASH_DIR);