mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-25 03:17:13 +00:00
Code Issues Wiki Activity
nixpkgs/pkgs/applications/networking/browsers/chromium/sandbox.nix

22 lines
476 B
Nix
Raw Normal View History

chromium: Split off sandbox from the browser. Now, we no longer tie the sandbox directly to the browser derivation but wrap everything together into one derivation at the entry point at default.nix. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-03-22 16:05:14 +00:00
{ stdenv, source }:
chromium: Split sandbox off the main output path. Now the chromium derivation produces an extra output path for the sandbox in order to be properly used as a setuid wrapper in <nixos> without the need to include the full Chromium package. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-09-25 12:45:13 +01:00
stdenv.mkDerivation {
chromium: Split off sandbox from the browser. Now, we no longer tie the sandbox directly to the browser derivation but wrap everything together into one derivation at the entry point at default.nix. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-03-22 16:05:14 +00:00
name = "chromium-sandbox-${source.version}";
src = source.sandbox;
chromium: Split sandbox off the main output path. Now the chromium derivation produces an extra output path for the sandbox in order to be properly used as a setuid wrapper in <nixos> without the need to include the full Chromium package. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-09-25 12:45:13 +01:00
patchPhase = ''
sed -i -e '/#include.*base_export/c \
#define BASE_EXPORT __attribute__((visibility("default")))
chromium: Update beta and dev to latest versions. beta: 34.0.1847.60 -> 35.0.1916.47 (builds fine, tested) dev: 35.0.1883.0 -> 36.0.1941.0 (builds fine, tested) For the new version 36, we needed to rebase our user namespaces sandbox patch, because http://crbug.com/312380 is preparing for an upstream implementation of the same functionality. Also, we need to add ply and jinja2 to the depends on version 36. This is done unconditionally, because I want to avoid cluttering up the expressions with various versionOlder checks. The sandbox binary had to be fixed as well and we no longer use system zlib, as - who might have guessed it - it's a fast moving target at Chromium as well. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-03-27 08:53:01 +00:00
/#include/s|sandbox/linux|'"$(pwd)"'/linux|
chromium: Split sandbox off the main output path. Now the chromium derivation produces an extra output path for the sandbox in order to be properly used as a setuid wrapper in <nixos> without the need to include the full Chromium package. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-09-25 12:45:13 +01:00
' linux/suid/*.[hc]
'';
buildPhase = ''
gcc -Wall -std=gnu99 -o sandbox linux/suid/*.c
'';
installPhase = ''
chromium: Split off sandbox from the browser. Now, we no longer tie the sandbox directly to the browser derivation but wrap everything together into one derivation at the entry point at default.nix. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-03-22 16:05:14 +00:00
install -svD sandbox "$out/bin/chromium-sandbox"
chromium: Split sandbox off the main output path. Now the chromium derivation produces an extra output path for the sandbox in order to be properly used as a setuid wrapper in <nixos> without the need to include the full Chromium package. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-09-25 12:45:13 +01:00
'';
}
Copy permalink