From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id wMtdJb1afGG0ngAAgWs5BA (envelope-from ) for ; Fri, 29 Oct 2021 22:34:05 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id qBsWIb1afGEUfgAA1q6Kng (envelope-from ) for ; Fri, 29 Oct 2021 20:34:05 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 3A84635193 for ; Fri, 29 Oct 2021 22:34:05 +0200 (CEST) Received: from localhost ([::1]:48340 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mgYZg-0005z3-Br for larch@yhetil.org; Fri, 29 Oct 2021 16:34:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:41870) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mgYM6-0000Sd-IJ for bug-guix@gnu.org; Fri, 29 Oct 2021 16:20:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:44510) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mgYM6-0005HF-9t for bug-guix@gnu.org; Fri, 29 Oct 2021 16:20:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mgYM6-000421-5J for bug-guix@gnu.org; Fri, 29 Oct 2021 16:20:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#51478: icecat 91 can't display chinese font in many web page Resent-From: Mark H Weaver Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 29 Oct 2021 20:20:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 51478 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Z572 <873216071@qq.com>, 51478@debbugs.gnu.org Received: via spool by 51478-submit@debbugs.gnu.org id=B51478.163553874615415 (code B ref 51478); Fri, 29 Oct 2021 20:20:02 +0000 Received: (at 51478) by debbugs.gnu.org; 29 Oct 2021 20:19:06 +0000 Received: from localhost ([127.0.0.1]:56056 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mgYLC-00040Y-GF for submit@debbugs.gnu.org; Fri, 29 Oct 2021 16:19:06 -0400 Received: from world.peace.net ([64.112.178.59]:48682) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mgYL9-000401-AF for 51478@debbugs.gnu.org; Fri, 29 Oct 2021 16:19:04 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mgYL3-00044y-0t; Fri, 29 Oct 2021 16:18:57 -0400 From: Mark H Weaver In-Reply-To: References: Date: Fri, 29 Oct 2021 16:16:56 -0400 Message-ID: <87tugzvb58.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1635539645; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post; bh=N07fFndks/PbAvDEkacliqasdEMvs0zHEua1p+fi7e8=; b=Taf09mqex1Pn8zgKy9cWF2PNby6oC2GuGlPaGNY49+evnHQzLwP5yZOaBJTfUzFASyAUMi YsNn8j1AGh5qDkX49gkmvl06+SwD/aNq+p2G1/wt/E3NjXRobIzcdXe2xG1HmZV7AsEbtY hXeOeF33Mo2EYuv97pDXcjnfmrSCOA4M01HhoFqkgCXMvHhNbS8Rppj0wyVjTsG+frII4Z kuIychtT2KRCjqYkwV/efkm7tpI9q+2TdSrbFLnKUQ5k7K1xRZYSYWrOPIYJIT6hfrz+vz TIakTHqQWs4TZuy9fbMIHdEhcEnhzVXUcCwIFRGylzGA5tXXu+MwanUFvIyfbw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1635539645; a=rsa-sha256; cv=none; b=WMhLfI/1oNPdk9TmzjTgAyEUpPhXQ/f5g9BGHoL+WlIxHRxZS1O3WB2NnCEdtg2AyHXU/3 lZT3cYAdlU2g6K7zxp1Fso9Ngu1o8xD7/euqshW5GRVmqxSfeDJJKtGrv1Me7ix2gFfD7A QXZsCTzpCsaziZVqpIO3d45OFxDFNWBuMtby2A99PDTRo8C+XvlzPaddehgO90iKkhOobF y7ekM5kinCrF54NEY08ejFhRIHpC/DXKba/wo5b4CKb07iPDMURx3kthI5yafiY6Go3lmi HStQ8Ue1PomixaRxJoSsbbFzhxOLcbX3dRuT0h7VnSNHIuZuweCRGYR5iHKY7A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -2.43 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 3A84635193 X-Spam-Score: -2.43 X-Migadu-Scanner: scn0.migadu.com X-TUID: bEr/c6j8l/pT Z572 via Bug reports for GNU Guix writes: > after update to 91, icecat can't display chinese font for many web page: Thanks for the report. As a temporary workaround, it might help to visit and change the setting for "security.sandbox.content.read_path_whitelist" to contain simply "/gnu/store/". Doing so will make your IceCat do what all other modern web browsers in Guix do: simply give the browser sandbox access to *all* of /gnu/store/. The disadvantage of doing so is that the sandbox will then able to see the complete list of Guix-installed software components installed on your system, as well as the precise version numbers of those software components. To my knowledge, IceCat is the only modern web browser packaged in Guix that attempts to build a precise whitelist of directories within /gnu/store/ that the sandbox is given access to. When updating our Guix package to IceCat 91, I discovered that it is now necessary to add font directories to the whitelist, whereas that was not needed in IceCat 78. For now, I've added 'font-dejavu' as an explicit input to our 'icecat' package, and added its font/share directory to the whitelist. However, I can see now that this solution is not adequate. To be continued... Mark -- Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about .