From efca45b88a852d6daebd915e5a8f6ab24009ce04 Mon Sep 17 00:00:00 2001 From: Albert S Date: Sun, 8 Jan 2023 17:37:28 +0100 Subject: [PATCH] gui sandbox: Allow wpath to improve poppler text rendering Apparently poppler or something needs open() with write flags to render pdfs with proper fonts. Landlock guards file system write access, so this is fine. --- gui/main.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gui/main.cpp b/gui/main.cpp index d7347d7..580529f 100644 --- a/gui/main.cpp +++ b/gui/main.cpp @@ -28,7 +28,7 @@ void enableIpcSandbox() policy->namespace_options = EXILE_UNSHARE_USER | EXILE_UNSHARE_MOUNT | EXILE_UNSHARE_NETWORK; policy->no_new_privs = 1; policy->drop_caps = 1; - policy->vow_promises = exile_vows_from_str("thread cpath rpath unix stdio proc error"); + policy->vow_promises = exile_vows_from_str("thread cpath rpath wpath unix stdio proc error"); policy->mount_path_policies_to_chroot = 1; QString ipcSocketPath = Common::ipcSocketPath();