diff options
author | Marius Bakke <mbakke@fastmail.com> | 2020-05-06 23:37:40 +0200 |
---|---|---|
committer | Marius Bakke <mbakke@fastmail.com> | 2020-05-06 23:37:40 +0200 |
commit | c263cfdcde0402cf44be7b14841d567f00e0af11 (patch) | |
tree | 311052b6ad6e391571f4e45631f5c3ca991b0cda /gnu/packages/patches/webkitgtk-share-store.patch | |
parent | 3b7f3108e0ebd459ec9c75717988fc61755e7185 (diff) | |
parent | 13c18af1d835db11f3f4cf34e65c7da706625a3f (diff) | |
download | guix-patches-c263cfdcde0402cf44be7b14841d567f00e0af11.tar guix-patches-c263cfdcde0402cf44be7b14841d567f00e0af11.tar.gz |
Merge branch 'master' into core-updates
Diffstat (limited to 'gnu/packages/patches/webkitgtk-share-store.patch')
-rw-r--r-- | gnu/packages/patches/webkitgtk-share-store.patch | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/gnu/packages/patches/webkitgtk-share-store.patch b/gnu/packages/patches/webkitgtk-share-store.patch new file mode 100644 index 0000000000..053d86fcf4 --- /dev/null +++ b/gnu/packages/patches/webkitgtk-share-store.patch @@ -0,0 +1,19 @@ +Tell bubblewrap to share the store. Required for programs that use the +sandboxing features such as Epiphany. + +See <https://bugs.gnu.org/40837>. +Author: Jack Hill <jackhill@jackhill.us> +--- +diff --git a/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp b/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp +--- a/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp ++++ b/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp +@@ -737,6 +737,9 @@ GRefPtr<GSubprocess> bubblewrapSpawn(GSubprocessLauncher* launcher, const Proces + "--ro-bind-try", "/usr/local/share", "/usr/local/share", + "--ro-bind-try", DATADIR, DATADIR, + ++ // Bind mount the store inside the WebKitGTK sandbox. ++ "--ro-bind", "@storedir@", "@storedir@", ++ + // We only grant access to the libdirs webkit is built with and + // guess system libdirs. This will always have some edge cases. + "--ro-bind-try", "/lib", "/lib", |