Tor Browser: sync unveil changes from firefox-esr

Original commit message from landry@:
"www/firefox-esr:  add some missing unveils

- content process already accesses /etc/localtime, add /usr/share/zoneinfo
- main process already has /usr/share/zoneinfo, add /etc/localtime
- main process sometimes parses /etc/hosts (mostly on network.trr.mode
changes ?) so unveil it.
- unveil.socket is wrong but time is running out, and the socket process
isnt used much anyway (network.http.network_access_on_socket_process.enabled defaults to false)

required by upcoming changes to pledge/unveil"
This commit is contained in:
caspar
2026-03-10 18:28:14 +00:00
parent 6cc819c94a
commit 6b257c3318
3 changed files with 4 additions and 0 deletions
+1
View File
@@ -12,6 +12,7 @@ EXTRACT_SUFX = .tar.xz
PKGNAME = ${TB_PREFIX}-browser-${TB_VERSION:S/a/alpha/}
DISTNAME = src-firefox-tor-browser-140.8.0esr-15.0-1-build3
REVISION = 0
FIX_EXTRACT_PERMISSIONS = Yes
DISTFILES += ${DISTNAME}.tar.xz \
@@ -6,6 +6,7 @@
/usr/local/lib r
/usr/local/share r
/usr/share/locale r
/usr/share/zoneinfo r
/var/cache/fontconfig r
/usr/X11R6/lib r
/usr/lib r
@@ -14,6 +14,7 @@
# normally "pledge dns" exempts this from unveil, but pledge might be disabled
/etc/resolv.conf r
/etc/hosts r
/usr/local/bin/lyrebird rx
/usr/local/bin/tor rx
@@ -21,6 +22,7 @@
/usr/local/lib/tor-browser rx
/usr/local/share r
/usr/share/locale r
/etc/localtime r
/usr/share/zoneinfo r
/var/cache/fontconfig r
/usr/X11R6/lib r