Unverified Commit 1e1a5985 authored by Jan Tojnar's avatar Jan Tojnar Committed by GitHub
Browse files

Merge pull request #329622 from fedeinthemix/fix-tracker-miners 

tracker-miners: fix store permissions
parents e27a6b63 3b559281

pkgs/by-name/tr/tracker-miners/package.nix

+4 −0
Original line number Diff line number Diff line
@@ -54,6 +54,10 @@ stdenv.mkDerivation (finalAttrs: { 
    hash = "sha256-50OIFUtcGXtLfuQvDc6MX7vd1NNhCT74jU+zA+M9pf4=";

  };



  patches = [

    ./tracker-landlock-nix-store-permission.patch

  ];



  nativeBuildInputs = [

    asciidoc

    docbook-xsl-nons

pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch

0 → 100644
+15 −0
Original line number Diff line number Diff line 
diff --git a/src/libtracker-miners-common/tracker-landlock.c b/src/libtracker-miners-common/tracker-landlock.c

index 6d4510be1..1de5d5a90 100644

--- a/src/libtracker-miners-common/tracker-landlock.c

+++ b/src/libtracker-miners-common/tracker-landlock.c

@@ -184,6 +184,10 @@ gboolean

 tracker_landlock_init (const gchar * const *indexed_folders)

 {

 	TrackerLandlockRule stock_rules[] = {

+		{ "/nix/store",

+		 (LANDLOCK_ACCESS_FS_EXECUTE |

+		  LANDLOCK_ACCESS_FS_READ_FILE |

+		  LANDLOCK_ACCESS_FS_READ_DIR) },

 		/* Allow access to the executable itself */

 		{ LIBEXECDIR "/tracker-extract-3",

 		 LANDLOCK_ACCESS_FS_READ_FILE |