01/02: gnu: icecat: Add system fonts directory to the sandbox whitelist.

[guix-commits]

mhw pushed a commit to branch gnuzilla-updates
in repository guix.

commit 5396c8146884f26cd7399e27c46bd5bfd44155c0
Author: Mark H Weaver <mhw@netris.org>
AuthorDate: Mon Nov 1 16:52:40 2021 -0400

    gnu: icecat: Add system fonts directory to the sandbox whitelist.
    
    Mitigates <https://bugs.gnu.org/51478#29>.
    
    * gnu/packages/gnuzilla.scm (icecat)[arguments]: In the
    'build-sandbox-whitelist' phase, add
    "/run/current-system/profile/share/fonts/" to the whitelist.
---
 gnu/packages/gnuzilla.scm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm
index 3aa39bc..a1f6b57 100644
--- a/gnu/packages/gnuzilla.scm
+++ b/gnu/packages/gnuzilla.scm
@@ -1138,6 +1138,7 @@ in C/C++.")
                                              "/share/mime")
                              ,(string-append (assoc-ref inputs "font-dejavu")
                                              "/share/fonts")
+                             "/run/current-system/profile/share/fonts"
                              ,@(append-map runpaths-of-input
                                            '("mesa" "ffmpeg"))))))
                     (whitelist-string (string-join whitelist ","))