#18391 closed enhancement (fixed)

Add xdg-dbus-proxy to enable bubblewrap sandbox for webkitgtk

Reported by: Xi Ruoyao Owned by: Douglas R. Reno
Priority: normal Milestone: 12.0
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

Webkitgtk security issues appear frequently and it's often very difficult to patch them on the first day when the security issue is published. So it's better to enable the sandbox and make the security issues less harmful.

I'm setting the milestone to 12.0, but if it's not proper you can reset it to 12.1. And in 12.1 we'll likely archive libwpe and wpe-backend-fdo, so the exchange of package total number will be more acceptable.

Change History (2)

comment:1 by Douglas R. Reno, 10 months ago

Owner: changed from blfs-book to Douglas R. Reno
Status: newassigned

comment:2 by Douglas R. Reno, 10 months ago

Resolution: fixed
Status: assignedclosed

Tested on both x86_64 and i686 with Yelp, Epiphany, Evolution, and Balsa

xdg-dbus-proxy added at fb3323ad5a6ae2329d17120f8db670577fc26f78

WebKitGTK+ changed to use the sandbox at 92e53002d500e21c50a73760e7b81d7352569ae7

Note: See TracTickets for help on using tickets.