diff options
| author | Ian Eure <ian@retrospec.tv> | 2025-04-19 17:03:39 -0700 |
|---|---|---|
| committer | Ian Eure <ian@retrospec.tv> | 2025-04-20 19:52:55 -0700 |
| commit | ab24e2ebe51720f332215b110c1bb151718d16bd (patch) | |
| tree | af1bb0f2bc70eed49f83a0d23fcd60a4e95ddf0f /gnu/packages/librewolf.scm | |
| parent | 674880d12220fa47ed9676ff219fc4a7d8f78321 (diff) | |
gnu: librewolf: Add the store to the RDD allowlist.
* gnu/packages/librewolf.scm (librewolf):
[patches]: Add librewolf-add-store-to-rdd-allowlist.patch.
[phase 'wrap-program]: Remove rdd allowlist manipulation.
* gnu/packages/patches/librewolf-add-store-to-rdd-allowlist.patch: Add.
Diffstat (limited to 'gnu/packages/librewolf.scm')
| -rw-r--r-- | gnu/packages/librewolf.scm | 22 |
1 files changed, 3 insertions, 19 deletions
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index cfa315071cf..7cb47ba0ad4 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -192,7 +192,8 @@ (patches (search-patches "torbrowser-compare-paths.patch" - "librewolf-use-system-wide-dir.patch"))))) + "librewolf-use-system-wide-dir.patch" + "librewolf-add-store-to-rdd-allowlist.patch"))))) ;;; Define the versions of rust needed to build firefox, trying to match ;;; upstream. See table at [0], `Uses' column for the specific version. @@ -541,28 +542,11 @@ "pulseaudio" "libpciaccess"))) - ;; VA-API is run in the RDD (Remote Data Decoder) sandbox - ;; and must be explicitly given access to files it needs. - ;; Rather than adding the whole store (as Nix had - ;; upstream do, see - ;; <https://github.com/NixOS/nixpkgs/pull/165964> and - ;; linked upstream patches), we can just follow the - ;; runpaths of the needed libraries to add everything to - ;; LD_LIBRARY_PATH. These will then be accessible in the - ;; RDD sandbox. - (rdd-whitelist - (map (cut string-append <> "/") - (delete-duplicates - (append-map runpaths-of-input - '("mesa" - "ffmpeg" - "libpciaccess"))))) (gtk-share (string-append (assoc-ref inputs "gtk+") "/share"))) (wrap-program (car (find-files lib "^librewolf$")) - `("LD_LIBRARY_PATH" prefix - (,@libs ,@rdd-whitelist)) + `("LD_LIBRARY_PATH" prefix ,libs) `("XDG_DATA_DIRS" prefix (,gtk-share)) `("MOZ_LEGACY_PROFILES" = |