tUpdate unveil rules to fix upstart issue after new X session - surf - customized build of surf, the suckless webkit browser (HTM) git clone git://src.adamsgaard.dk/surf (DIR) Log (DIR) Files (DIR) Refs (DIR) README (DIR) LICENSE --- (DIR) commit 90c835416e14473f0d3931df14f3e9ce6e24e829 (DIR) parent 92b7936f4746136a1f4c24774ecbcc3bfb4c1ba9 (HTM) Author: Anders Damsgaard <anders@adamsgaard.dk> Date: Sun, 5 Jan 2020 08:33:56 +0100 Update unveil rules to fix upstart issue after new X session Diffstat: M surf.c | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) --- (DIR) diff --git a/surf.c b/surf.c t@@ -2043,19 +2043,25 @@ main(int argc, char *argv[]) if (unveil("/etc/aspell.conf", "r") == -1) err(1, "unveil"); + if (unveil("/etc/localtime", "r") == -1) + err(1, "unveil"); + if (unveil("/etc/machine-id", "r") == -1) err(1, "unveil"); if (unveil("/tmp", "rwc") == -1) err(1, "unveil /tmp"); + if (unveil("/proc", "rw") == -1) + err(1, "unveil"); + if (unveil("/usr/libexec", "r") == -1) err(1, "unveil"); - if (unveil("/usr/local/bin", "x") == -1) + if (unveil("/usr/local/bin", "rx") == -1) err(1, "unveil"); - if (unveil("/usr/local/lib", "r") == -1) + if (unveil("/usr/local/lib", "rx") == -1) err(1, "unveil"); if (unveil("/usr/local/libexec/webkit2gtk-4.0", "x") == -1) t@@ -2076,7 +2082,7 @@ main(int argc, char *argv[]) if (unveil("/usr/X11R6/lib", "rx") == -1) err(1, "unveil"); - if (unveil("/var/run", "r") == -1) + if (unveil("/var", "rw") == -1) err(1, "unveil"); if (pledge("stdio rpath wpath cpath dpath tmppath fattr chown flock unix "