diff --git a/pkgs/development/haskell-modules/configuration-common.nix b/pkgs/development/haskell-modules/configuration-common.nix
index 32098b0c7dbe..0ea34e55cb89 100644
--- a/pkgs/development/haskell-modules/configuration-common.nix
+++ b/pkgs/development/haskell-modules/configuration-common.nix
@@ -194,6 +194,7 @@ self: super: {
   # on darwin: https://github.com/NixOS/cabal2nix/issues/146
   hinotify = if pkgs.stdenv.isDarwin then self.hfsevents else super.hinotify;
 
+  # hfsevents needs CoreServices in scope
   hfsevents = if pkgs.stdenv.isDarwin
     then addBuildTool super.hfsevents pkgs.darwin.apple_sdk.frameworks.CoreServices
     else super.hfsevents;
@@ -202,6 +203,9 @@ self: super: {
   # http://openradar.appspot.com/10207999 and similar issues
   fsnotify = if pkgs.stdenv.isDarwin then dontCheck super.fsnotify else super.fsnotify;
 
+  # the system-fileio tests use canonicalizePath, which fails in the sandbox
+  system-fileio = if pkgs.stdenv.isDarwin then dontCheck super.system-fileio else super.system-fileio;
+
   # Prevents needing to add security_tool as a build tool to all of x509-system's
   # dependencies.
   # TODO: use pkgs.darwin.security_tool once we can build it