[gnome-apps-nightly] Builder: make some sandbox adjustments



commit a94ce892719b959b886778e5905bed846cace5a2
Author: Christian Hergert <chergert redhat com>
Date:   Thu Sep 1 11:34:27 2016 -0700

    Builder: make some sandbox adjustments
    
     - We need access to SSL certificates for https.
     - We need access to the agents for SSH access.
     - We need remote file access via gvfs.

 org.gnome.Builder.json |   14 +++++++++++---
 1 files changed, 11 insertions(+), 3 deletions(-)
---
diff --git a/org.gnome.Builder.json b/org.gnome.Builder.json
index c763ad7..7ccd6d6 100644
--- a/org.gnome.Builder.json
+++ b/org.gnome.Builder.json
@@ -13,11 +13,19 @@
         "--socket=wayland",
         /* We want full fs access */
         "--filesystem=host",
-       /* Needs to talk to the network: */
-       "--share=network",
+        /* Needs to talk to the network: */
+        "--share=network",
+        "--talk-name=org.gtk.vfs.*",
         /* Needed for dconf to work (+ host or homedir read access from above) */
         "--filesystem=xdg-run/dconf", "--filesystem=~/.config/dconf:ro",
-        "--talk-name=ca.desrt.dconf", "--env=DCONF_USER_CONFIG_DIR=.config/dconf"
+        "--talk-name=ca.desrt.dconf", "--env=DCONF_USER_CONFIG_DIR=.config/dconf",
+        /* We need access to auth agents */
+        "--talk-name=org.freedesktop.secrets",
+        /* Needed for various SSL certificates to work */
+        "--env=SSL_CERT_DIR=/etc/ssl/certs",
+        "--env=SSL_CERT_FILE=/etc/ssl/cert.pem",
+        "--filesystem=/etc/ssl:ro",
+        "--filesystem=/etc/ca-certificates:ro"
     ],
     "build-options" : {
         "cflags": "-O2 -g",


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]