diff options
| author | Daiki Ueno <dueno@redhat.com> | 2021-06-23 10:47:12 +0200 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2021-07-12 13:38:30 +0200 |
| commit | e4a12e3825990a9428f23b0344b6caad2526317e (patch) | |
| tree | f7613eb7823459aead48ea7089d7d373b1a7e22a /firefox-nss-addon-hack.patch | |
| parent | changelog fix (diff) | |
| download | librewolf-fedora-ff-e4a12e3825990a9428f23b0344b6caad2526317e.tar.gz librewolf-fedora-ff-e4a12e3825990a9428f23b0344b6caad2526317e.tar.bz2 librewolf-fedora-ff-e4a12e3825990a9428f23b0344b6caad2526317e.zip | |
flatpak: Enable loading system trust store on the host
This directs the libnssckbi.so symlink to p11-kit-client.so, instead
of p11-kit-trust.so, so Firefox flatpak can access the system trust
store on the host. Since the /usr filesystem is read-only, this
creates the link in /app/lib64, which is added to LD_LIBRARY_PATH
inside flatpak. A symlink to libnss3.so also needs to be created in
the same directory, to trick the directory search order in
ListPossibleLoadableRootsLocations:
https://hg.mozilla.org/mozilla-central/file/8e850fd29a957f505e0355c1326279e06e9040bb/security/manager/ssl/nsNSSComponent.cpp#l970
Signed-off-by: Daiki Ueno <dueno@redhat.com>
Diffstat (limited to 'firefox-nss-addon-hack.patch')
0 files changed, 0 insertions, 0 deletions