Hello community, here is the log from the commit of package MozillaFirefox for openSUSE:Factory checked in at 2020-03-26 23:30:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/MozillaFirefox (Old) and /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3160 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "MozillaFirefox" Thu Mar 26 23:30:31 2020 rev:308 rq:788189 version:74.0 Changes: -------- --- /work/SRC/openSUSE:Factory/MozillaFirefox/MozillaFirefox.changes 2020-03-18 12:16:41.571815559 +0100 +++ /work/SRC/openSUSE:Factory/.MozillaFirefox.new.3160/MozillaFirefox.changes 2020-03-26 23:30:34.630716610 +0100 @@ -1,0 +2,7 @@ +Wed Mar 25 07:30:39 UTC 2020 - Marcus Meissner <[email protected]> + +- mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled + to be read, as openssl 1.1.1 FIPS aborts if it cannot access it + (bsc#1167132) + +------------------------------------------------------------------- New: ---- mozilla-sandbox-fips.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MozillaFirefox.spec ++++++ --- /var/tmp/diff_new_pack.UbNEbi/_old 2020-03-26 23:30:40.146718602 +0100 +++ /var/tmp/diff_new_pack.UbNEbi/_new 2020-03-26 23:30:40.146718602 +0100 @@ -169,6 +169,7 @@ Patch3: mozilla-ntlm-full-path.patch Patch4: mozilla-aarch64-startup-crash.patch Patch5: mozilla-bmo1463035.patch +Patch6: mozilla-sandbox-fips.patch Patch7: mozilla-fix-aarch64-libopus.patch Patch8: mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch Patch9: mozilla-s390-context.patch @@ -302,6 +303,7 @@ %patch3 -p1 %patch4 -p1 %patch5 -p1 +%patch6 -p1 %patch7 -p1 %patch8 -p1 %patch9 -p1 ++++++ mozilla-sandbox-fips.patch ++++++ From: [email protected] Subject: allow Firefox to access addtional process information Reference: http://bugzilla.suse.com/show_bug.cgi?id=1167132 Index: firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp =================================================================== --- firefox-74.0.orig/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp +++ firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp @@ -276,6 +276,7 @@ SandboxBrokerPolicyFactory::SandboxBroke // Read permissions policy->AddPath(rdonly, "/dev/urandom"); + policy->AddPath(rdonly, "/proc/sys/crypto/fips_enabled"); policy->AddPath(rdonly, "/proc/cpuinfo"); policy->AddPath(rdonly, "/proc/meminfo"); policy->AddDir(rdonly, "/sys/devices/cpu");
