# --- T2-COPYRIGHT-NOTE-BEGIN --- # This copyright note is auto-generated by scripts/Create-CopyPatch. # # T2 SDE: package/.../firefox/sandbox-fonts.patch # Copyright (C) 2020 The T2 SDE Project # # More information can be found in the files COPYING and README. # # This patch file is dual-licensed. It is available under the license the # patched project is licensed under, as long as it is an OpenSource license # as defined at http://www.opensource.org/ (e.g. BSD, X11) or under the terms # of the GNU General Public License as published by the Free Software # Foundation; either version 2 of the License, or (at your option) any later # version. # --- T2-COPYRIGHT-NOTE-END --- Adapt sandbox broker policy allow-list to the font path we usually use. -- Signed-off-by: René Rebe --- firefox-57.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp.vanilla 2017-11-16 17:56:45.091951171 +0100 +++ firefox-57.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp 2017-11-16 17:57:11.287951481 +0100 @@ -161,7 +161,8 @@ policy->AddDir(rdonly, "/usr/tmp"); policy->AddDir(rdonly, "/var/tmp"); // Various places where fonts reside - policy->AddDir(rdonly, "/usr/X11R6/lib/X11/fonts"); + policy->AddDir(rdonly, "/usr/X11/share/fonts"); + policy->AddDir(rdonly, "/usr/X11/lib/X11/fonts"); policy->AddDir(rdonly, "/nix/store"); policy->AddDir(rdonly, "/run/host/fonts"); policy->AddDir(rdonly, "/run/host/user-fonts");