On Mon, Oct 28, 2019 at 09:26:09AM +0100, Klemens Nanni wrote:
> On Sun, Oct 27, 2019 at 12:56:40PM -0500, joshua stein wrote:
> > As a workaround, you can add this to
> > /usr/local/lib/thunderbird/defaults/pref/all-openbsd.js:
> >
> > pref("security.sandbox.pledge.main", "junk");
> >
> > That will cause pledge() to fail rather than continuing with an
> > empty list of pledge promises.
> I appended this line to ~/.thunderbird/*.default/prefs.js and
> thunderbird starts again, thanks. semarie also mentioned this as
> workaround off-list.
>
> However, prefs.js seems to be rewritten, so closing and opening
> Thunderbird results in SIGBART again. Won't happen with the global
> all-openbsd.js for sure, though.
>
Hi,
The following diff should unbreak mail/mozilla-thunderbird for now.
It is a quick fix to have usuable thunderbird, waiting for a proper fix.
It just adds invalid promises (instead of the default valid empty promise). It
will make thunderbird to show a warning and will effectively disable pledge(2)
(as before without sandbox).
Comments or OK ?
--
Sebastien Marie
diff b436a83da999a4084ff25dcf1e369d46323e095a /data/semarie/repos/openbsd/ports
blob - d51a055e80dad3159cd5f912c1cb6d4d2d58eb33
file + mail/mozilla-thunderbird/Makefile
--- mail/mozilla-thunderbird/Makefile
+++ mail/mozilla-thunderbird/Makefile
@@ -6,6 +6,7 @@ COMMENT-lightning = Mozilla Thunderbird calendar exten
# Don't forget to bump mail/thunderbird-i18n after updates.
+REVISION = 0
MOZILLA_VERSION = 68.2.0
MOZILLA_BRANCH = release
MOZILLA_PROJECT = thunderbird
blob - fa8943ff89953b08fce94e90039b8b211877eb8c
file + mail/mozilla-thunderbird/files/all-openbsd.js
--- mail/mozilla-thunderbird/files/all-openbsd.js
+++ mail/mozilla-thunderbird/files/all-openbsd.js
@@ -2,3 +2,6 @@
// enable systemwide extensions by default
pref("extensions.autoDisableScopes", 3);
pref("spellchecker.dictionary_path", "${LOCALBASE}/share/mozilla-dicts/");
+// quick fix to effectively disable sandbox for now
+pref("security.sandbox.pledge.main", "notyet");
+pref("security.sandbox.pledge.content", "notyet");
