From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id yMZqBqQZCmaD1wAAe85BDQ:P1 (envelope-from ) for ; Mon, 01 Apr 2024 04:19:16 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id yMZqBqQZCmaD1wAAe85BDQ (envelope-from ) for ; Mon, 01 Apr 2024 04:19:16 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=quic.us header.s=default header.b=DcPA7kC2; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1711937956; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=M3CURuoF9opPgOItnpa6LhLmuLqydIRIhLwI+oNjgxs=; b=rBylmiVIrYYd+87v8CHlehK98uVOJtglV2i52lcBA0wrGQSo7X5FZBmjGkkl/+zDOZEUKN paubvvQzy6x+d6w9CU8UOqAPNcTlB4uLYnHRU0KcGmLpmlexv8eVUxcdhweHTYbKPAc/4s pThLXLs7R/Or6CPTRwBzyNx2kXcgoCIP2u7IqasZu0HccJZabtZB+dWx/TvkjnLJhkoQXQ GUvvmMQvrJOJk51s6oI78TD9Z1fH1JoWePl8m0e79EdZsFN5bd9yTRnA4IiU1ARtWwviTG GHwCAnzTHWytATTgZPjmLaO68fwTynDPD+Ii9j/aMFkl3K7Vf1E0aaCFl6X6Jw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=quic.us header.s=default header.b=DcPA7kC2; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1711937956; a=rsa-sha256; cv=none; b=ECLx8PLWu9MQDIFU9VQy1Go4uoHcvgE3Nn9op6cBsUvBYZUrYQZs82ZH34RgTD8K59gUNI V65dAumaRA/OaYPrnvMacmORffCaD6BlH/Bt90n6UeCzP6qtAypzKwwwiUXyeYdzqwrZKa g9dBiNha7i4m0sTY5WSagh7/fQOou599S/QvufDe1PV+1wmOd3Y4jN7b8CacfrWh00i09J ViwXtqHFiEJJyZZL+b7jko++kmtj8lWjzQAQF2TK9rRBcL87vVCRIIrm5yeS6sXB0wXBBh R1hH8JKD6/b7yLHBuyVITM14of2bACURNM971xjv4Iot7pF48yvY7EzpS51Gdg== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E1427FE5E for ; Mon, 01 Apr 2024 04:19:15 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rr7GK-0006XZ-BA; Sun, 31 Mar 2024 22:19:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rr7GH-0006XN-T3 for guix-patches@gnu.org; Sun, 31 Mar 2024 22:19:01 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rr7GH-0003Yw-Io for guix-patches@gnu.org; Sun, 31 Mar 2024 22:19:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1rr7GI-0007vs-G9 for guix-patches@gnu.org; Sun, 31 Mar 2024 22:19:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#69971] [PATCH v2] gnu: webkitgtk: Add locale and dri access to gtk sandbox in order to silence gtk locale warnings and enable hardware accelerated video, respectively. Resent-From: Abhishek Cherath Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 01 Apr 2024 02:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 69971 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Maxim Cournoyer Cc: Raghav Gururajan , 69971@debbugs.gnu.org, Vivien Kraus , Liliana Marie Prikler Received: via spool by 69971-submit@debbugs.gnu.org id=B69971.171193789030163 (code B ref 69971); Mon, 01 Apr 2024 02:19:02 +0000 Received: (at 69971) by debbugs.gnu.org; 1 Apr 2024 02:18:10 +0000 Received: from localhost ([127.0.0.1]:49228 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rr7FR-0007qM-Gt for submit@debbugs.gnu.org; Sun, 31 Mar 2024 22:18:10 -0400 Received: from mta-12-4.privateemail.com ([198.54.127.107]:28495) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rr7FP-0007pm-5m for 69971@debbugs.gnu.org; Sun, 31 Mar 2024 22:18:08 -0400 Received: from mta-12.privateemail.com (localhost [127.0.0.1]) by mta-12.privateemail.com (Postfix) with ESMTP id 606471800261; Sun, 31 Mar 2024 22:17:57 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=quic.us; s=default; t=1711937877; bh=JflHZVgqnU+7Z6XETlYNV4zujl6C18eou9e+faPFlnc=; h=Date:From:To:CC:Subject:In-Reply-To:References:From; b=DcPA7kC2ZOC4ge7wnP4N1XCg093mM8IvNnNOZGR8uqR75RFEilgz78bq5Zoov18Et HV26cwlG/JSr14gUG0R+QajdHHQ9eUUFhjTJ2FeL5CO4gAiMiPafSwrZXhk+KbQDN2 kHgEAXPQGkW3aYuxDdRnG8TOMoTC3KzZWCGgT4RIpraEJOkYJkd2tiozqee4cIGWUS SKfQA7g0sA7dE6A3nMUg0prb/X8iupCFRRrHccqUFrQA3kYekbgdG1nBbcWZj5CaXn Y+2/de+RekN+FDjAY39Z1xDG314FoSt2hoxbVa4OjOSz+MmNKpPUv+z1HbqN2sXv65 IsRW38+F6RMPw== Received: from [127.0.0.1] (207-237-25-55.s5642.c3-0.wsd-cbr1.qens-wsd.ny.cable.rcncustomer.com [207.237.25.55]) by mta-12.privateemail.com (Postfix) with ESMTPA; Sun, 31 Mar 2024 22:17:52 -0400 (EDT) Date: Sun, 31 Mar 2024 22:17:50 -0400 From: Abhishek Cherath User-Agent: K-9 Mail for Android In-Reply-To: <87bk6tx3wq.fsf@gmail.com> References: <02189bbb2583491df0be62c56568caa4bf245997.1711245733.git.abhi@quic.us> <43974b799a22fd2b469494040b2ff02335f92315.1711259689.git.abhi@quic.us> <87bk6tx3wq.fsf@gmail.com> Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: E1427FE5E X-Migadu-Scanner: mx11.migadu.com X-Migadu-Spam-Score: -0.85 X-Spam-Score: -0.85 X-TUID: VtgMvUdK9c73 It was a conservative choice, but not made for security reasons, I'm just n= ot sure where and how this wrapper runs, and I was mildly tired of recompil= ing webkitgtk=2E I'm not opposed to having it be $HOME, if that works; I don't see what sec= urity issues there could be=2E On 31 March 2024 9:33:41=E2=80=AFpm GMT-04:00, Maxim Cournoyer wrote: >Hello! > >Abhishek Cherath writes: > >> * gnu/packages/patches/webkitgtk-adjust-bubblewrap-paths=2Epatch: >> Add @dridir@ and @localedir@ to bubblewrap gtk sandbox >> * gnu/packages/webkit=2Escm (webkitgtk)[arguments]: In the >> 'configure-bubblewrap-store-directory' phase, also supply locale >> and dri directory paths to webkitgtk-adjust-bubblewrap-paths=2Epatch >> template=2E > >This looks reasonable to me, thanks for your contribution! I suppose >for security reasons the file names must be static, e=2Eg=2E cannot be >$HOME/=2Eguix-profile/share/locale or similar? > >LGTM; Liliana, I remember you would prefer not having webkitgtk changes >happen on master; do you have a suggestion of which branch this should >be committed to? gnome-team? >