From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id RsVvHaarfGFRSwEAgWs5BA (envelope-from ) for ; Sat, 30 Oct 2021 04:19:18 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id yE2kGKarfGGrcwAA1q6Kng (envelope-from ) for ; Sat, 30 Oct 2021 02:19:18 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 3FF883903D for ; Sat, 30 Oct 2021 04:19:18 +0200 (CEST) Received: from localhost ([::1]:44434 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mgdxl-0005JK-Ad for larch@yhetil.org; Fri, 29 Oct 2021 22:19:17 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:49370) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mgdxX-0005JC-KH for bug-guix@gnu.org; Fri, 29 Oct 2021 22:19:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:44821) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mgdxW-00080V-Nt for bug-guix@gnu.org; Fri, 29 Oct 2021 22:19:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mgdxW-0005kg-CS for bug-guix@gnu.org; Fri, 29 Oct 2021 22:19:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#51478: icecat 91 can't display chinese font in many web page Resent-From: Z572 <873216071@qq.com> Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 30 Oct 2021 02:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 51478 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Mark H Weaver Cc: 51478@debbugs.gnu.org Received: via spool by 51478-submit@debbugs.gnu.org id=B51478.163556032122079 (code B ref 51478); Sat, 30 Oct 2021 02:19:02 +0000 Received: (at 51478) by debbugs.gnu.org; 30 Oct 2021 02:18:41 +0000 Received: from localhost ([127.0.0.1]:56367 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mgdxA-0005k3-W0 for submit@debbugs.gnu.org; Fri, 29 Oct 2021 22:18:41 -0400 Received: from out203-205-221-202.mail.qq.com ([203.205.221.202]:44378) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <873216071@qq.com>) id 1mgdx5-0005ji-2t for 51478@debbugs.gnu.org; Fri, 29 Oct 2021 22:18:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1635560306; bh=hr4IUMcQ6eMl93sV9SGfTkfgkXIh96cxoFtlLi0Otzc=; h=References:From:To:Cc:Subject:Date:In-reply-to; b=vsnCtwnbKdKrIih9tYUm0PDa4YET9ToiVq1Z/w7QcmJ6OJ6BFRJvLszTm8tuVr52/ 2t7Kqttp8kYQchL2ogHLjRFykphApU+18wacglTPlcu2hfwkJ5lqyf0NYglF/spoh7 cMVhgk/LYWzYxNuloU51XVIO+yRz8v8V8qy7j768= Received: from asus ([2409:8928:12b2:1ae2:4b81:7b88:7db5:8a95]) by newxmesmtplogicsvrsza9.qq.com (NewEsmtp) with SMTP id 497836D2; Sat, 30 Oct 2021 10:18:23 +0800 X-QQ-mid: xmsmtpt1635560303tcb0vez7d Message-ID: X-QQ-XMAILINFO: MntsAqBg2ZZ50HK7gbRP9XdHn53/rl28lQ/LnvnB4TSQ7JHNkYTjFTsGllhwsv N24qKvI/NDNJKPuStd/zsdN7m8ELg3HvVX0IqbwGqlg5I/8/d46LUAxWzwiOIWYeMoF9KCvZjuqb h1Ud6gUdJ4UqS/duhMDYxuYzPXMYJhQtIzhe625jcwI98mQY3OVF8Cg2prTTaVOzNl7wtv+m70Wp lCWe2aj1E+fC7l/vB8U65hdTtte3pfwlrfpiHufXU0Rsub8oThWU0TJq1gmXaCZhrV01zbJR8P5b 8gDTjtgTe3nTkqhNwZsv7ZQU0uMuplaC89yNyE+x1IMgZWT/teHGhXyIPpwvlYVIJXoDa2YsGDz6 L1SFPCXxy1MoheuqC/SqXrge986AsukpwVnLKZs+qaitv2GOHMhgZsbDs6jTwB4CPrpdW/5DYag5 eJyrHn6AC56GWa+0bYTrTY/d7suFh/ZW6QFOBMQEP2TehsHw+X+W61BT0yvXFHitXFVng5GyVa9H xHigNlIBOdO4sXTjjcFH1B7Epqbsg/9LXejxi1+zBtIxoJqDP4sGv/w+g3PrjvWrrQtNt5PPPBkv weiKp06lKAvo+aTMeaMsl40YVKdIG4TubA91cAOS7MYQho8lJc20yZ1hzf5RHt3IVrZYxvcm6/f5 jIsjdstA0gkzIg752SUMfevX4U8vk17uTeKp34CGPlcoz9iQfpc4iXrj2WsD/6oNFWMlFnSB2+ER 7mOWWkmpwiTxvSEDa/3i4M+Yt1x2o7AliAtOHQQgiqzg5JqW9zbrCmp1Beulq906LHWay23aSAtG 63GzBqO1A/IA== References: <87tugzvb58.fsf@netris.org> User-agent: mu4e 1.6.6; emacs 28.0.50 Date: Sat, 30 Oct 2021 10:15:29 +0800 In-reply-to: <87tugzvb58.fsf@netris.org> Message-ID: <87cznnuufk.fsf@qq.com> MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" Reply-to: Z572 <873216071@qq.com> From: Z572 via Bug reports for GNU Guix X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1635560358; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:message-id:to:to:cc:cc: mime-version:mime-version:content-type:content-type:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=hr4IUMcQ6eMl93sV9SGfTkfgkXIh96cxoFtlLi0Otzc=; b=EaTU5b+YvcydaFahPrG/ZfM8bUAcISGinZ8jTX+mfQLx1nJL+0y53sD21WgfBmLdMePsTV 4lq3R1ucVN67wdxcnyenJI+855qxXBiMd4ayzcyO/yBrPDKXPdsTfFDNwu7HmQt5/1kdpl 6aHI3P52dhYPt6XfjnmieC1UrVnzFtUQOAJLtBndUJpkLoLUuRkE5tgYctrWo/eEN3qoNf 5z9m1Yx5jjekHvvGERzofm/FAJkantc0JDuwHng6yMTNh9FZFbV/h58iEMl1Jfd0Uf59rW 83t2UR9s/CawEBHzM0YCirpvzaxirxDE2IPX5wPkaOxDOYv1AwdDOyu035G6yw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1635560358; a=rsa-sha256; cv=none; b=enTKccwHk4lGnLa6vrI8+syCEQQ2v1YcQISktZAH2jeukFNO1S0LLzKlPRAJfAO9YA/gJg 2D2dcj3D/P5XA3T8sau3Bsg+9vGBP+UAwT9dLJ8OoQf5yKC4KeYsv3iEF91Zxr5uXuaiYW qHV0xlo3u1LZYga/Sq9UiVVKXnPDBoXiRmIHsy664RQolYdnkl6oTrWCn+gOtwtY/ns/U9 jk2qoWgAHNFmbcTOkGOvK5dgU/+sTwOw8A8bYKHbxwKLIiTKRfEEbUsoj2RFMVBuFX02vI EtDGbOYHFCf28Fin+mcl302L6MxZYUEGU+/DuFAEsHW257sWqnhYq/1CFDApGQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=qq.com header.s=s201512 header.b=vsnCtwnb; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: 1.98 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=qq.com header.s=s201512 header.b=vsnCtwnb; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 3FF883903D X-Spam-Score: 1.98 X-Migadu-Scanner: scn0.migadu.com X-TUID: DOVkVj8mt+Eu I add "/run/current-system/profile/share/fonts/" to "security.sandbox.content.read_path_whitelist" fixed it for me. Thanks for the help. Mark H Weaver writes: > Z572 via Bug reports for GNU Guix writes: >> after update to 91, icecat can't display chinese font for many web page: > > Thanks for the report. > > As a temporary workaround, it might help to visit and > change the setting for "security.sandbox.content.read_path_whitelist" > to contain simply "/gnu/store/". > > Doing so will make your IceCat do what all other modern web browsers in > Guix do: simply give the browser sandbox access to *all* of /gnu/store/. > The disadvantage of doing so is that the sandbox will then able to see > the complete list of Guix-installed software components installed on > your system, as well as the precise version numbers of those software > components. > > To my knowledge, IceCat is the only modern web browser packaged in Guix > that attempts to build a precise whitelist of directories within > /gnu/store/ that the sandbox is given access to. > > When updating our Guix package to IceCat 91, I discovered that it is now > necessary to add font directories to the whitelist, whereas that was not > needed in IceCat 78. For now, I've added 'font-dejavu' as an explicit > input to our 'icecat' package, and added its font/share directory to the > whitelist. However, I can see now that this solution is not adequate. > > To be continued... > > Mark -- over