diff --git a/pkgs/applications/editors/vim/default.nix b/pkgs/applications/editors/vim/default.nix
index 363413a698e8..a09eb846e500 100644
--- a/pkgs/applications/editors/vim/default.nix
+++ b/pkgs/applications/editors/vim/default.nix
@@ -43,7 +43,7 @@ stdenv.mkDerivation rec {
     ];
   };
 
-  sandboxProfile = stdenv.lib.sandbox.allowFileRead "/dev/ptmx";
+  __impureHostDeps = [ "/dev/ptmx" ];
 
   # To fix the trouble in vim73, that it cannot cross-build with this patch
   # to bypass a configure script check that cannot be done cross-building.
diff --git a/pkgs/os-specific/darwin/apple-sdk/default.nix b/pkgs/os-specific/darwin/apple-sdk/default.nix
index 847738158dab..c18d3f6cc6d3 100644
--- a/pkgs/os-specific/darwin/apple-sdk/default.nix
+++ b/pkgs/os-specific/darwin/apple-sdk/default.nix
@@ -96,9 +96,7 @@ let
     propagatedBuildInputs = deps;
 
     # allows building the symlink tree
-    sandboxProfile = ''
-      (allow file-read* (subpath "/System/Library/Frameworks/${name}.framework"))
-    '';
+    __impureHostDeps = [ "/System/Library/Frameworks/${name}.framework" ];
 
     __propagatedImpureHostDeps = stdenv.lib.optional (name != "Kernel") "/System/Library/Frameworks/${name}.framework/${name}";