This commit is contained in:
Laura Hausmann 2023-10-29 01:31:10 +02:00
parent 3fd3079b0f
commit a1f1d7cc46
Signed by untrusted user: zotan
GPG key ID: D044E84C5BE01605
3 changed files with 32 additions and 0 deletions

View file

@ -11,6 +11,7 @@ ac_add_options --enable-jxl
ac_add_options --with-app-name=snowleopard
ac_add_options --with-unsigned-addon-scopes=app,system
ac_add_options --with-ccache=sccache
export MOZ_REQUIRE_SIGNING=

View file

@ -4,6 +4,7 @@ lockPref("browser.startup.homepage", "about:blank");
lockPref("toolkit.legacyUserProfileCustomizations.stylesheets", true);
lockPref("browser.uidensity", 1);
lockPref("browser.startup.page", 3);
lockPref("layout.css.system-ui.enabled", false);
// Workaround for https://bugzilla.mozilla.org/show_bug.cgi?id=1420777
lockPref("network.http.http2.coalesce-hostnames", false);

View file

@ -23,3 +23,33 @@ index dac063c8a17fc..4bdd21bca9588 100644
} else if (!strcmp(aProperty, NS_APP_PREFS_50_DIR)) {
rv = GetProfileDir(getter_AddRefs(file));
if (NS_FAILED(rv)) {
diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
index 0e5358e68e573..83bb97ae837d3 100644
--- a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
+++ b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
@@ -696,6 +696,25 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
// userContent.css and the extensions dir sit in the profile, which is
// normally blocked.
+
+ nsCOMPtr<nsIFile> greDir;
+ bool persistent = false;
+ rv = GetFile(NS_GRE_DIR, &persistent, getter_AddRefs(greDir));
+ if (NS_SUCCEEDED(rv)) {
+ nsCOMPtr<nsIFile> workDir;
+ rv = greDir->Clone(getter_AddRefs(workDir));
+ if (NS_SUCCEEDED(rv)) {
+ rv = workDir->AppendNative("distribution"_ns);
+ if (NS_SUCCEEDED(rv)) {
+ nsAutoCString tmpPath;
+ rv = workDir->GetNativePath(tmpPath);
+ if (NS_SUCCEEDED(rv)) {
+ policy->AddDir(rdonly, tmpPath.get());
+ }
+ }
+ }
+ }
+
nsCOMPtr<nsIFile> profileDir;
rv = NS_GetSpecialDirectory(NS_APP_USER_PROFILE_50_DIR,
getter_AddRefs(profileDir));