summaryrefslogtreecommitdiff
path: root/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch
diff options
context:
space:
mode:
Diffstat (limited to 'nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch')
-rw-r--r--nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch36
1 files changed, 0 insertions, 36 deletions
diff --git a/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch b/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch
deleted file mode 100644
index 4bdaa7d..0000000
--- a/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch
+++ /dev/null
@@ -1,36 +0,0 @@
1diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
2index 4eff5e6..42171eb 100644
3--- a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
4+++ b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
5@@ -476,6 +476,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
6 // Various places where fonts reside
7 policy->AddTree(rdonly, "/usr/X11R6/lib/X11/fonts");
8 policy->AddTree(rdonly, "/nix/store");
9+ policy->AddTree(rdonly, "/gnu/store");
10 // https://gitlab.com/freedesktop-sdk/freedesktop-sdk/-/blob/e434e680d22260f277f4a30ec4660ed32b591d16/files/fontconfig-flatpak.conf
11 policy->AddTree(rdonly, "/run/host/fonts");
12 policy->AddTree(rdonly, "/run/host/user-fonts");
13@@ -485,6 +486,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
14 // Bug 1848615
15 policy->AddPath(rdonly, "/usr");
16 policy->AddPath(rdonly, "/nix");
17+ policy->AddPath(rdonly, "/gnu");
18
19 AddLdconfigPaths(policy);
20 AddLdLibraryEnvPaths(policy);
21@@ -934,6 +936,7 @@ SandboxBrokerPolicyFactory::GetRDDPolicy(int aPid) {
22 policy->AddTree(rdonly, "/usr/lib64");
23 policy->AddTree(rdonly, "/run/opengl-driver/lib");
24 policy->AddTree(rdonly, "/nix/store");
25+ policy->AddTree(rdonly, "/gnu/store");
26
27 // Bug 1647957: memory reporting.
28 AddMemoryReporting(policy.get(), aPid);
29@@ -1079,6 +1082,7 @@ SandboxBrokerPolicyFactory::GetUtilityProcessPolicy(int aPid) {
30 // Required to make sure ffmpeg loads properly, this is already existing on
31 // Content and RDD
32 policy->AddTree(rdonly, "/nix/store");
33+ policy->AddTree(rdonly, "/gnu/store");
34
35 // glibc will try to stat64("/") while populating nsswitch database
36 // https://sourceware.org/git/?p=glibc.git;a=blob;f=nss/nss_database.c;h=cf0306adc47f12d9bc761ab1b013629f4482b7e6;hb=9826b03b747b841f5fc6de2054bf1ef3f5c4bdf3#l396