crtxcr/looqs
1
0
Förgrening 0
Kod Ärenden Pull-förfrågningar 1 Släpp Wiki Aktiviteter

gui sandbox: Allow wpath to improve poppler text rendering

Bläddra i källkod 
Apparently poppler or something needs open() with write
flags to render pdfs with proper fonts.

Landlock guards file system write access, so this is fine.
This commit is contained in:
Albert S. 2022-12-06 11:59:24 +01:00
förälder 87e3cc3380
incheckning dbe4061c58
1 ändrade filer med 1 tillägg och 1 borttagningar
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
gui/main.cpp
Visa fil

@ -28,7 +28,7 @@ void enableIpcSandbox()
policy->namespace_options = EXILE_UNSHARE_USER | EXILE_UNSHARE_MOUNT | EXILE_UNSHARE_NETWORK;
policy->no_new_privs = 1;
policy->drop_caps = 1;
policy->vow_promises = exile_vows_from_str("thread cpath rpath unix stdio proc error");
policy->vow_promises = exile_vows_from_str("thread cpath rpath wpath unix stdio proc error");
policy->mount_path_policies_to_chroot = 1;
QString ipcSocketPath = Common::ipcSocketPath();