Changeset 866d8e15

Timestamp:

03/22/2021 04:50:25 PM (3 years ago)

Author:

Ken Moffat <ken@…>

Branches:

11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

639a5b9

Parents:

427b46a

Message:

QtWebEngine - rework kernel namespace options.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@24390 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (2 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)
• x/lib/qtwebengine.xml (modified) (2 diffs)

general.ent

@@ -1 +1 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "21">                   <!-- Always 2 digits -->
+<!ENTITY day          "22">                   <!-- Always 2 digits -->
 <!ENTITY month        "03">                   <!-- Always 2 digits -->
 <!ENTITY year         "2021">
@@ -7 +7 @@
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "March 21st, &year;">
+<!ENTITY releasedate  "March 22nd, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->

introduction/welcome/changelog.xml

@@ -43 +43 @@
     -->
     <listitem>
+      <para>March 22nd, 2021</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Revise the Kernel Configuration section of
+          QtWebEngine: User namespace works if PID namespace is enabled.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>March 21st, 2021</para>
       <itemizedlist>

x/lib/qtwebengine.xml

@@ -459 +459 @@
 
     <para>
-      Enable the following options in the kernel configuration and recompile the
-      kernel if necessary:
+      This package does not require any of the optional kernel namespace items,
+      but if User namespace is enabled <phrase revision="systemd">(as happens
+      in some unit files, for hardening)</phrase> PID namespace must also be
+      enabled. In that case enable the following options in the kernel
+      configuration and recompile the kernel if necessary:
     </para>
 
@@ -466 +469 @@
 <screen><literal>General setup ---&gt;
   -*- Namespaces support ---&gt;
-    [*]     UTS namespace                     [CONFIG_UTS_NS]
-    [*]     TIME namespace                    [CONFIG_TIME_NS]
-    [*]     IPC namespace                     [CONFIG_IPC_NS]
-    [ ]     User namespace                    #CONFIG_USER_NS is not set
-    [*]     PID namespace                     [CONFIG_PID_NS]
-    [*]     Network namespace                 [CONFIG_NET_NS]</literal></screen>
-
-    <para>
-      These are now the default options. Do <emphasis>NOT</emphasis> enable
-      User namespace (CONFIG_USER_NS), it <emphasis>will</emphasis> cause
-      libQtWebengineCore to crash.
-    </para>
+    [ ]     User namespace                    [CONFIG_USER_NS]
+    [*]     PID namespace                     [CONFIG_PID_NS]</literal></screen>
 
     <indexterm zone="qtwebengine qtwebengine-kernel">