CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2023/09/13 00:12:18
Modified files:
www/mozilla-firefox: Makefile
www/mozilla-firefox/files: unveil.content unveil.gpu unveil.main
Log message:
mozilla-firefox: fix unveil for DRM device nodes
Instead of unveiling /dev/dri/card0, unveil the entire /dev/dri directory.
It contains four card* and and four renderD* nodes with tight permissions.
This is also the approach taken by the chromium based browsers.
According to kettenis, acceleration on rare multi-graphics card setups
can require multiple renderD* devices. Starting with firefox 118, if the
directory isn't present, fallback code can exercise ioctls that aren't
permitted by the kernel, leading to crashes.
ok landry
