crtxcr/looqs
1
0
複製 0
程式碼 問題管理 合併請求 1 版本發佈 Wiki Activity

gui sandbox: Allow wpath to improve poppler text rendering

瀏覽代碼 
Apparently poppler or something needs open() with write
flags to render pdfs with proper fonts.

Landlock guards file system write access, so this is fine.
This commit is contained in:
Albert S. 2022-12-06 11:59:24 +01:00
父節點 87e3cc3380
當前提交 dbe4061c58
共有 1 個文件被更改，包括 1 次插入 和 1 次删除
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
gui/main.cpp
查看文件

@ -28,7 +28,7 @@ void enableIpcSandbox()
policy->namespace_options = EXILE_UNSHARE_USER | EXILE_UNSHARE_MOUNT | EXILE_UNSHARE_NETWORK;
policy->no_new_privs = 1;
policy->drop_caps = 1;
policy->vow_promises = exile_vows_from_str("thread cpath rpath unix stdio proc error");
policy->vow_promises = exile_vows_from_str("thread cpath rpath wpath unix stdio proc error");
policy->mount_path_policies_to_chroot = 1;
QString ipcSocketPath = Common::ipcSocketPath();