home:tittiatcoke:branches:openSUSE:11.3:Contrib/chromium -> openSUSE:11.3:Contrib/chromium https://build.opensuse.org/request/diff/83873 Description: Create a full working build as that the package in Factory is still crippled due to the setuid bit changes files: -------------- new: ---- chromium-browser-rpmlintrc spec files: ----------- --- chromium.spec +++ chromium.spec @@ -27,6 +27,9 @@ Group: Productivity/Networking/Web/Browsers Url: http://code.google.com/p/chromium/ Source0: %{name}.%{version}.svn%{svn_rev}.tar.lzma +%if 0%{?suse_version} <= 1140 +Source1: chromium-browser-rpmlintrc +%endif Source8: ffmpeg-0.6-headers.tar.bz2 Source20: chromium-vendor.patch.in Source30: master_preferences @@ -415,6 +418,10 @@ %files suid-helper %defattr(-,root,root,-) +%if 0%{?suse_version} <= 1140 +%attr(4755,root,root) %{_prefix}/lib/chrome_sandbox +%else %verify(not mode) %{_prefix}/lib/chrome_sandbox +%endif %changelog other changes: -------------- ++++++ chromium-browser-rpmlintrc (new) --- chromium-browser-rpmlintrc +++ chromium-browser-rpmlintrc @@ -0,0 +1 @@ +setBadness("permissions-file-setuid-bit", 0) ++++++ chromium-browser.sh --- chromium-browser.sh +++ chromium-browser.sh @@ -9,6 +9,7 @@ APPNAME=chromium LIBDIR=/usr/lib/chromium GDB=/usr/bin/gdb +CHROME_SANDBOX=/usr/lib/chrome_sandbox # Let the Chromium aware MeeGo desktop environment. # For system proxy setting integration. @@ -98,6 +99,11 @@ $LIBDIR/xdg-settings set default-web-browser chromium-browser.desktop fi +if [ ! -u $CHROME_SANDBOX ] ; then + SANDBOX="--no-sandbox" +fi + + if [ $want_debug -eq 1 ] ; then if [ ! -x $GDB ] ; then echo "Sorry, can't find usable $GDB. Please install it." @@ -112,6 +118,6 @@ $GDB "$LIBDIR/$APPNAME" -x $tmpfile exit $? else - exec $LIBDIR/$APPNAME "--password-store=detect" "--enable-experimental-extension-apis" "--enable-plugins" "--enable-extensions" "--enable-user-scripts" "--enable-printing" "--enable-sync" "--auto-ssl-client-auth" "$@" + exec $LIBDIR/$APPNAME $SANDBOX "--password-store=detect" "--enable-experimental-extension-apis" "--enable-plugins" "--enable-extensions" "--enable-user-scripts" "--enable-printing" "--enable-sync" "--auto-ssl-client-auth" "$@" fi To REVIEW against the previous version: osc request show --diff 83873 To ACCEPT the request: osc request accept 83873 --message="reviewed ok." To DECLINE the request: osc request decline 83873 --message="declined for reason xyz (see ... for background / policy / ...)." To REVOKE the request: osc request revoke 83873 --message="retracted because ..., sorry / thx / see better version ..." -- Hermes messaging (http://hermes.opensuse.org) openSUSE Build Service (https://build.opensuse.org/) Collaboration: http://en.opensuse.org/Build_Service/Collaboration -- To unsubscribe, e-mail: opensuse-contrib+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-contrib+help@opensuse.org