diff options
| author | Jan Tojnar <jtojnar@gmail.com> | 2024-07-31 23:15:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-07-31 23:15:56 +0200 |
| commit | b87dfeec0dd13dd7bdea01877df48a8d7eb46091 (patch) | |
| tree | ed13b32e2f61dbd48293078a9a63610cf8e28ecc | |
| parent | Merge pull request #331314 from NixOS/backport-330734-to-release-24.05 (diff) | |
| parent | tracker-miners: fix store permissions (diff) | |
| download | nixpkgs-b87dfeec0dd13dd7bdea01877df48a8d7eb46091.tar.gz | |
Merge pull request #329729 from NixOS/backport-329622-to-release-24.05
[Backport release-24.05] tracker-miners: fix store permissions
| -rw-r--r-- | pkgs/by-name/tr/tracker-miners/package.nix | 4 | ||||
| -rw-r--r-- | pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch | 15 |
2 files changed, 19 insertions, 0 deletions
diff --git a/pkgs/by-name/tr/tracker-miners/package.nix b/pkgs/by-name/tr/tracker-miners/package.nix index caf2e36488b2..fb882da42b73 100644 --- a/pkgs/by-name/tr/tracker-miners/package.nix +++ b/pkgs/by-name/tr/tracker-miners/package.nix @@ -54,6 +54,10 @@ stdenv.mkDerivation (finalAttrs: { hash = "sha256-50OIFUtcGXtLfuQvDc6MX7vd1NNhCT74jU+zA+M9pf4="; }; + patches = [ + ./tracker-landlock-nix-store-permission.patch + ]; + nativeBuildInputs = [ asciidoc docbook-xsl-nons diff --git a/pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch b/pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch new file mode 100644 index 000000000000..4715241ee628 --- /dev/null +++ b/pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch @@ -0,0 +1,15 @@ +diff --git a/src/libtracker-miners-common/tracker-landlock.c b/src/libtracker-miners-common/tracker-landlock.c +index 6d4510be1..1de5d5a90 100644 +--- a/src/libtracker-miners-common/tracker-landlock.c ++++ b/src/libtracker-miners-common/tracker-landlock.c +@@ -184,6 +184,10 @@ gboolean + tracker_landlock_init (const gchar * const *indexed_folders) + { + TrackerLandlockRule stock_rules[] = { ++ { "/nix/store", ++ (LANDLOCK_ACCESS_FS_EXECUTE | ++ LANDLOCK_ACCESS_FS_READ_FILE | ++ LANDLOCK_ACCESS_FS_READ_DIR) }, + /* Allow access to the executable itself */ + { LIBEXECDIR "/tracker-extract-3", + LANDLOCK_ACCESS_FS_READ_FILE | |