[packages/firefox] - really lower sandbox level to 2 for glibc 2.34, rel 3
baggins
baggins at pld-linux.org
Wed Oct 6 19:21:37 CEST 2021
commit aa5cc6df7e5804ab07dcf4e31ff98c589aabd874
Author: Jan Rękorajski <baggins at pld-linux.org>
Date: Wed Oct 6 19:20:51 2021 +0200
- really lower sandbox level to 2 for glibc 2.34, rel 3
firefox.spec | 2 +-
glibc-2.34.patch | 14 ++++++++++++++
2 files changed, 15 insertions(+), 1 deletion(-)
---
diff --git a/firefox.spec b/firefox.spec
index 9a41133..7af62a8 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -49,7 +49,7 @@ Summary(hu.UTF-8): Firefox web böngésző
Summary(pl.UTF-8): Firefox - przeglądarka WWW
Name: firefox
Version: 93.0
-Release: 2
+Release: 3
License: MPL v2.0
Group: X11/Applications/Networking
Source0: https://releases.mozilla.org/pub/firefox/releases/%{version}/source/firefox-%{version}.source.tar.xz
diff --git a/glibc-2.34.patch b/glibc-2.34.patch
index d2cef94..916a879 100644
--- a/glibc-2.34.patch
+++ b/glibc-2.34.patch
@@ -12,3 +12,17 @@
pref("general.useragent.compatMode.firefox", false);
pref("general.config.obscure_value", 13); // for MCD .cfg files
+--- firefox-93.0/browser/app/profile/firefox.js~ 2021-10-06 09:50:42.000000000 +0200
++++ firefox-93.0/browser/app/profile/firefox.js 2021-10-06 19:19:15.409293732 +0200
+@@ -1233,7 +1233,10 @@
+ // the sandbox while we fix their problems, or to allow running Firefox with
+ // exotic configurations we can't reasonably support out of the box.
+ //
+- pref("security.sandbox.content.level", 4);
++// Lower from 4 to 2 due to extension problems on glibc 2.34
++// https://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2021-October/026375.html
++// https://wiki.mozilla.org/Security/Sandbox#Content_Levels
++ pref("security.sandbox.content.level", 2);
+ // Introduced as part of bug 1608558. Linux is currently the only platform
+ // that uses a sandbox level for the socket process. There are currently
+ // only 2 levels:
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/firefox.git/commitdiff/aa5cc6df7e5804ab07dcf4e31ff98c589aabd874
More information about the pld-cvs-commit
mailing list