>From adf7fdeffaa806edcd8abdac0746c06dad52c495 Mon Sep 17 00:00:00 2001 From: Julien Lepiller Date: Tue, 14 Jan 2020 01:48:42 +0100 Subject: [PATCH] gnu: icecat: Give access to the store to the sandbox. * gnu/packages/gnuzilla.scm (icecat): Add punch-hole-in-sandbox phase. --- gnu/packages/gnuzilla.scm | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 62b4390eab..14f446ee0a 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -971,6 +971,14 @@ from forcing GEXP-PROMISE." (("libavcodec\\.so") (string-append (assoc-ref inputs "ffmpeg") "/lib/libavcodec.so"))) #t)) + (add-after 'fix-ffmpeg-runtime-linker 'punch-hole-in-sandbox + (lambda _ + (substitute* "browser/app/profile/icecat.js" + (("\"security.sandbox.content.read_path_whitelist\", \"\"") + (string-append + "\"security.sandbox.content.read_path_whitelist\", \"" + (%store-directory) "/\""))) + #t)) (replace 'bootstrap (lambda _ (invoke "sh" "-c" "autoconf old-configure.in > old-configure") -- 2.24.0