From 67fc595cead4d55175c774c1d1c1e9ee0b36e7550a625082f40ee0895160b246 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 25 Mar 2020 09:43:20 +0000 Subject: [PATCH] - mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled to be read, as openssl 1.1.1 FIPS aborts if it cannot access it (bsc#1167132) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=814 --- MozillaFirefox.changes | 5 +++-- MozillaFirefox.spec | 3 ++- firefox-fips.patch => mozilla-sandbox-fips.patch | 4 ++++ 3 files changed, 9 insertions(+), 3 deletions(-) rename firefox-fips.patch => mozilla-sandbox-fips.patch (81%) diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 78bd832..5e66782 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,8 +1,9 @@ ------------------------------------------------------------------- Wed Mar 25 07:30:39 UTC 2020 - Marcus Meissner -- firefox-fips.patch: allow /proc/sys/crypto/fips_enabled to be read, as openssl 1.1.1 - FIPS aborts if it cannot access it (bsc#1167132) +- mozilla-sandbox-fips.patch: allow /proc/sys/crypto/fips_enabled + to be read, as openssl 1.1.1 FIPS aborts if it cannot access it + (bsc#1167132) ------------------------------------------------------------------- Sat Mar 7 08:51:06 UTC 2020 - Wolfgang Rosenauer diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index 65b67e9..d593f83 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -169,6 +169,7 @@ Patch2: mozilla-kde.patch Patch3: mozilla-ntlm-full-path.patch Patch4: mozilla-aarch64-startup-crash.patch Patch5: mozilla-bmo1463035.patch +Patch6: mozilla-sandbox-fips.patch Patch7: mozilla-fix-aarch64-libopus.patch Patch8: mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch Patch9: mozilla-s390-context.patch @@ -186,7 +187,6 @@ Patch20: mozilla-fix-top-level-asm.patch Patch21: mozilla-bmo1504834-part4.patch Patch22: mozilla-bmo849632.patch Patch23: mozilla-bmo1609538.patch -Patch24: firefox-fips.patch # Firefox/browser Patch101: firefox-kde.patch Patch102: firefox-branded-icons.patch @@ -303,6 +303,7 @@ cd $RPM_BUILD_DIR/%{srcname}-%{orig_version} %patch3 -p1 %patch4 -p1 %patch5 -p1 +%patch6 -p1 %patch7 -p1 %patch8 -p1 %patch9 -p1 diff --git a/firefox-fips.patch b/mozilla-sandbox-fips.patch similarity index 81% rename from firefox-fips.patch rename to mozilla-sandbox-fips.patch index 3815ae2..b442676 100644 --- a/firefox-fips.patch +++ b/mozilla-sandbox-fips.patch @@ -1,3 +1,7 @@ +From: meissner@suse.com +Subject: allow Firefox to access addtional process information +Reference: http://bugzilla.suse.com/show_bug.cgi?id=1167132 + Index: firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp =================================================================== --- firefox-74.0.orig/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp