package/www/firefox/sandbox-x11.patch

   1 --- firefox-127.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp.vanilla  2024-06-14 14:48:51.851243892 +0200
   2 +++ firefox-127.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp  2024-06-14 15:24:11.735169676 +0200
   3 @@ -446,6 +446,9 @@
   4    policy->AddDir(rdonly, "/usr/lib");
   5    policy->AddDir(rdonly, "/usr/lib32");
   6    policy->AddDir(rdonly, "/usr/lib64");
   7 +  policy->AddDir(rdonly, "/usr/X11/lib");
   8 +  policy->AddDir(rdonly, "/usr/X11/lib32");
   9 +  policy->AddDir(rdonly, "/usr/X11/lib64");
  10    policy->AddDir(rdonly, "/etc");
  11    policy->AddDir(rdonly, "/usr/share");
  12    policy->AddDir(rdonly, "/usr/local/share");
  13 @@ -461,7 +462,6 @@
  14
  15    // Bug 1848615
  16    policy->AddPath(rdonly, "/usr");
  17 -  policy->AddPath(rdonly, "/nix");
  18
  19    AddLdconfigPaths(policy);
  20    AddLdLibraryEnvPaths(policy);
  21 @@ -984,6 +984,9 @@
  22    policy->AddDir(rdonly, "/usr/lib");
  23    policy->AddDir(rdonly, "/usr/lib32");
  24    policy->AddDir(rdonly, "/usr/lib64");
  25 +  policy->AddDir(rdonly, "/usr/X11/lib");
  26 +  policy->AddDir(rdonly, "/usr/X11/lib32");
  27 +  policy->AddDir(rdonly, "/usr/X11/lib64");
  28    policy->AddDir(rdonly, "/usr/share");
  29    policy->AddDir(rdonly, "/usr/local/share");
  30    policy->AddDir(rdonly, "/etc");
  31 @@ -1038,6 +1041,9 @@
  32    policy->AddDir(rdonly, "/usr/lib");
  33    policy->AddDir(rdonly, "/usr/lib32");
  34    policy->AddDir(rdonly, "/usr/lib64");
  35 +  policy->AddDir(rdonly, "/usr/X11/lib");
  36 +  policy->AddDir(rdonly, "/usr/X11/lib32");
  37 +  policy->AddDir(rdonly, "/usr/X11/lib64");
  38    policy->AddDir(rdonly, "/usr/share");
  39    policy->AddDir(rdonly, "/usr/local/share");
  40    policy->AddDir(rdonly, "/etc");