SecBSD's official ports repository

This commit is contained in:
purplerain 2023-08-16 22:26:55 +00:00
commit 2c0afcbbf3
Signed by: purplerain
GPG key ID: F42C07F07E2E35B7
64331 changed files with 5339189 additions and 0 deletions

View file

@ -0,0 +1,39 @@
From 1926ae7021a2f8e842ad566a49f3a947c02cec92 Mon Sep 17 00:00:00 2001
From: Antoine Jacoutot <ajacoutot@gnome.org>
Date: Fri, 19 Jun 2020 10:12:04 +0200
Subject: [PATCH] pledge: add support to remaining utilities
Index: src/install.c
--- src/install.c.orig
+++ src/install.c
@@ -839,6 +839,13 @@ main (int argc, char **argv)
setlocale (LC_ALL, "");
+#ifdef HAVE_PLEDGE
+ if (pledge ("stdio rpath wpath cpath fattr", NULL) == -1) {
+ g_printerr ("pledge\n");
+ return 1;
+ }
+#endif
+
basename = g_path_get_basename (argv[0]);
if (g_strcmp0 (basename, "desktop-file-edit") == 0)
edit_mode = TRUE;
@@ -854,6 +861,16 @@ main (int argc, char **argv)
g_option_group_add_entries (group, install_options);
g_option_context_add_group (context, group);
}
+#ifdef HAVE_PLEDGE
+ else
+ {
+ /* In edit mode we can drop the fattr pledge. */
+ if (pledge ("stdio rpath wpath cpath", NULL) == -1) {
+ g_printerr ("pledge in edit_mode\n");
+ return 1;
+ }
+ }
+#endif
group = g_option_group_new ("edit", _("Edition options for desktop file"), _("Show desktop file edition options"), NULL, NULL);
g_option_group_add_entries (group, edit_options);

View file

@ -0,0 +1,44 @@
Unveil the required directory with .desktop files and where the cache file needs
to be written out to.
Index: src/update-desktop-database.c
--- src/update-desktop-database.c.orig
+++ src/update-desktop-database.c
@@ -451,8 +451,8 @@ main (int argc,
{ NULL }
};
-#if HAVE_PLEDGE
- if (pledge("stdio rpath wpath cpath fattr", NULL) == -1) {
+#ifdef HAVE_PLEDGE
+ if (pledge ("stdio rpath wpath cpath fattr unveil", NULL) == -1) {
g_printerr ("pledge\n");
return 1;
}
@@ -478,9 +478,15 @@ main (int argc,
print_desktop_dirs (desktop_dirs);
+ if (unveil ("${LOCALBASE}/share/locale/locale.alias", "r") == -1) {
+ g_printerr ("Can't unveil '${LOCALBASE}/share/locale/locale.alias': %s\n", g_strerror(errno));
+ }
found_processable_dir = FALSE;
for (i = 0; desktop_dirs[i] != NULL; i++)
{
+ if (unveil (desktop_dirs[i], "rwc") == -1) {
+ g_printerr ("Can't unveil '%s' directory: %s\n", desktop_dirs[i], g_strerror(errno));
+ }
error = NULL;
update_database (desktop_dirs[i], &error);
@@ -495,6 +501,10 @@ main (int argc,
found_processable_dir = TRUE;
}
g_option_context_free (context);
+
+ if (unveil (NULL, NULL) == -1) {
+ g_printerr ("unveil\n");
+ }
if (!found_processable_dir)
{

View file

@ -0,0 +1,32 @@
From 1926ae7021a2f8e842ad566a49f3a947c02cec92 Mon Sep 17 00:00:00 2001
From: Antoine Jacoutot <ajacoutot@gnome.org>
Date: Fri, 19 Jun 2020 10:12:04 +0200
Subject: [PATCH] pledge: add support to remaining utilities
Index: src/validator.c
--- src/validator.c.orig
+++ src/validator.c
@@ -28,6 +28,9 @@
#include <locale.h>
+#ifdef HAVE_PLEDGE
+#include <unistd.h>
+#endif
#include "validate.h"
static gboolean warn_kde = FALSE;
@@ -50,6 +53,13 @@ main (int argc, char *argv[])
GError *error;
int i;
gboolean all_valid;
+
+#ifdef HAVE_PLEDGE
+ if (pledge ("stdio rpath", NULL) == -1) {
+ g_printerr ("pledge\n");
+ return 1;
+ }
+#endif
setlocale (LC_ALL, "");