crtxcr/looqs
1
0
Forka 0
Codice Problemi Pull Requests 1 Rilasci Wiki Attività

gui sandbox: Allow wpath to improve poppler text rendering

Sfoglia il codice sorgente 
Apparently poppler or something needs open() with write
flags to render pdfs with proper fonts.

Landlock guards file system write access, so this is fine.
This commit is contained in:
Albert S. 2022-12-06 11:59:24 +01:00
parent 87e3cc3380
commit dbe4061c58
1 ha cambiato i file con 1 aggiunte e 1 eliminazioni
Mostra statistiche Scarica il file Patch Scarica il file Diff Expand all files Collapse all files

2
gui/main.cpp
Vedi File

@ -28,7 +28,7 @@ void enableIpcSandbox()
policy->namespace_options = EXILE_UNSHARE_USER | EXILE_UNSHARE_MOUNT | EXILE_UNSHARE_NETWORK;
policy->no_new_privs = 1;
policy->drop_caps = 1;
policy->vow_promises = exile_vows_from_str("thread cpath rpath unix stdio proc error");
policy->vow_promises = exile_vows_from_str("thread cpath rpath wpath unix stdio proc error");
policy->mount_path_policies_to_chroot = 1;
QString ipcSocketPath = Common::ipcSocketPath();