diff options
Diffstat (limited to 'nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch')
| -rw-r--r-- | nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch | 36 |
1 files changed, 0 insertions, 36 deletions
diff --git a/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch b/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch deleted file mode 100644 index 4bdaa7d..0000000 --- a/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch +++ /dev/null | |||
| @@ -1,36 +0,0 @@ | |||
| 1 | diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp | ||
| 2 | index 4eff5e6..42171eb 100644 | ||
| 3 | --- a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp | ||
| 4 | +++ b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp | ||
| 5 | @@ -476,6 +476,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() { | ||
| 6 | // Various places where fonts reside | ||
| 7 | policy->AddTree(rdonly, "/usr/X11R6/lib/X11/fonts"); | ||
| 8 | policy->AddTree(rdonly, "/nix/store"); | ||
| 9 | + policy->AddTree(rdonly, "/gnu/store"); | ||
| 10 | // https://gitlab.com/freedesktop-sdk/freedesktop-sdk/-/blob/e434e680d22260f277f4a30ec4660ed32b591d16/files/fontconfig-flatpak.conf | ||
| 11 | policy->AddTree(rdonly, "/run/host/fonts"); | ||
| 12 | policy->AddTree(rdonly, "/run/host/user-fonts"); | ||
| 13 | @@ -485,6 +486,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() { | ||
| 14 | // Bug 1848615 | ||
| 15 | policy->AddPath(rdonly, "/usr"); | ||
| 16 | policy->AddPath(rdonly, "/nix"); | ||
| 17 | + policy->AddPath(rdonly, "/gnu"); | ||
| 18 | |||
| 19 | AddLdconfigPaths(policy); | ||
| 20 | AddLdLibraryEnvPaths(policy); | ||
| 21 | @@ -934,6 +936,7 @@ SandboxBrokerPolicyFactory::GetRDDPolicy(int aPid) { | ||
| 22 | policy->AddTree(rdonly, "/usr/lib64"); | ||
| 23 | policy->AddTree(rdonly, "/run/opengl-driver/lib"); | ||
| 24 | policy->AddTree(rdonly, "/nix/store"); | ||
| 25 | + policy->AddTree(rdonly, "/gnu/store"); | ||
| 26 | |||
| 27 | // Bug 1647957: memory reporting. | ||
| 28 | AddMemoryReporting(policy.get(), aPid); | ||
| 29 | @@ -1079,6 +1082,7 @@ SandboxBrokerPolicyFactory::GetUtilityProcessPolicy(int aPid) { | ||
| 30 | // Required to make sure ffmpeg loads properly, this is already existing on | ||
| 31 | // Content and RDD | ||
| 32 | policy->AddTree(rdonly, "/nix/store"); | ||
| 33 | + policy->AddTree(rdonly, "/gnu/store"); | ||
| 34 | |||
| 35 | // glibc will try to stat64("/") while populating nsswitch database | ||
| 36 | // https://sourceware.org/git/?p=glibc.git;a=blob;f=nss/nss_database.c;h=cf0306adc47f12d9bc761ab1b013629f4482b7e6;hb=9826b03b747b841f5fc6de2054bf1ef3f5c4bdf3#l396 | ||
