package/www/firefox/sandbox-fonts.patch

   1 # --- T2-COPYRIGHT-NOTE-BEGIN ---
   2 # This copyright note is auto-generated by scripts/Create-CopyPatch.
   3 #
   4 # T2 SDE: package/.../firefox/sandbox-fonts.patch
   5 # Copyright (C) 2020 The T2 SDE Project
   6 #
   7 # More information can be found in the files COPYING and README.
   8 #
   9 # This patch file is dual-licensed. It is available under the license the
  10 # patched project is licensed under, as long as it is an OpenSource license
  11 # as defined at http://www.opensource.org/ (e.g. BSD, X11) or under the terms
  12 # of the GNU General Public License as published by the Free Software
  13 # Foundation; either version 2 of the License, or (at your option) any later
  14 # version.
  15 # --- T2-COPYRIGHT-NOTE-END ---
  16
  17 Adapt sandbox broker policy allow-list to the font path we usually use.
  18
  19 -- Signed-off-by: René Rebe <rene@exactcode.de>
  20
  21 --- firefox-57.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp.vanilla   2017-11-16 17:56:45.091951171 +0100
  22 +++ firefox-57.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp   2017-11-16 17:57:11.287951481 +0100
  23 @@ -161,7 +161,8 @@
  24    policy->AddDir(rdonly, "/usr/tmp");
  25    policy->AddDir(rdonly, "/var/tmp");
  26    // Various places where fonts reside
  27 -  policy->AddDir(rdonly, "/usr/X11R6/lib/X11/fonts");
  28 +  policy->AddDir(rdonly, "/usr/X11/share/fonts");
  29 +  policy->AddDir(rdonly, "/usr/X11/lib/X11/fonts");
  30    policy->AddDir(rdonly, "/nix/store");
  31    policy->AddDir(rdonly, "/run/host/fonts");
  32    policy->AddDir(rdonly, "/run/host/user-fonts");