GNU bug report logs - #34135
IceCat lacks WebGL support

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix; Reported by: Ludovic Courtès <ludo@HIDDEN>; dated Sat, 19 Jan 2019 15:50:02 UTC; Maintainer for guix is bug-guix@HIDDEN.

Message received at 34135 <at> debbugs.gnu.org:


Received: (at 34135) by debbugs.gnu.org; 24 Jan 2019 14:02:34 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jan 24 09:02:34 2019
Received: from localhost ([127.0.0.1]:43386 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gmfaU-0008AS-Gg
	for submit <at> debbugs.gnu.org; Thu, 24 Jan 2019 09:02:34 -0500
Received: from sender-of-o53.zoho.com ([135.84.80.218]:21714)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rekado@HIDDEN>) id 1gmfaS-0008AK-Th
 for 34135 <at> debbugs.gnu.org; Thu, 24 Jan 2019 09:02:33 -0500
ARC-Seal: i=1; a=rsa-sha256; t=1548079972; cv=none; d=zoho.com; s=zohoarc; 
 b=eP7lmXuAJDxBwvLuaucUKY3sIOf8xzvmpcidmAwCfqG6FWnwDskhEscUNL18b1ExIp+Sv3puIjfyS15kn0P17v92YBnjKKP7FCNEoxrUxM94LchoxGGuJxBUCmb4Zy+++92aH+zNLqrhBhJ+ne59XBSgnVYM7ttJmpbjS736140=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com;
 s=zohoarc; t=1548079972;
 h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results;
 bh=f5yTtu4HNiFQIoF5/o2hFjUq6A+1NL0IZvpPDLuV/RM=; 
 b=n72pPXZhfQFclUNfReSAEUFeW3/wFY6VggFSgthzGRCaOn/wqE/UBwuNx8AS7BjB1Lu1gADOvO80W6C6HASGvV7GeqvV8QvXl6dC4OTw0iCa92dpHNnwcl69TB3v9nLPlz7usqhbav+cMHwrap5Il+f9QS9grtLLr8AwEhqRVGE=
ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass  header.i=elephly.net;
 spf=pass  smtp.mailfrom=rekado@HIDDEN;
 dmarc=pass header.from=<rekado@HIDDEN> header.from=<rekado@HIDDEN>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1548079972; 
 s=zoho; d=elephly.net; i=rekado@HIDDEN;
 h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;
 l=300; bh=f5yTtu4HNiFQIoF5/o2hFjUq6A+1NL0IZvpPDLuV/RM=;
 b=acC7kjL9aXhu4K8rL3+nZYzYqV/hjzGy+Csezo3IjZ0qwAje8Ma9jkIlgOa2NKkJ
 km7fUM3hfRWn+aKnDXXhyQ3ja6ZqpnKPh4UYl8NScjhfz+HJBmuQNBpMlRFl7DjDyh6
 hhbfA0d5lVHUbgXz6p9XsCbM57YbZbG/vYZQlwQ4=
Received: from localhost (141.80.247.225 [141.80.247.225]) by mx.zohomail.com
 with SMTPS id 1548079971179794.3168740131227;
 Mon, 21 Jan 2019 06:12:51 -0800 (PST)
References: <87o98cr6kx.fsf@HIDDEN> <20190119180750.13c17654@HIDDEN>
 <87womzlzhm.fsf@HIDDEN> <87d0oqe7u2.fsf@HIDDEN>
 <7A88B01C-EAB9-47BA-98EC-16F91C7993E7@HIDDEN> <874la2l4j3.fsf@HIDDEN>
User-agent: mu4e 1.0; emacs 26.1
From: Ricardo Wurmus <rekado@HIDDEN>
To: Ludovic =?utf-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Subject: Re: bug#34135: IceCat lacks WebGL support
In-reply-to: <874la2l4j3.fsf@HIDDEN>
X-URL: https://elephly.net
X-PGP-Key: https://elephly.net/rekado.pubkey
X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
Date: Mon, 21 Jan 2019 15:12:45 +0100
Message-ID: <87bm4adrqa.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-ZohoMailClient: External
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: 34135
Cc: 34135 <at> debbugs.gnu.org, Julien Lepiller <julien@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)


Ludovic Court=C3=A8s <ludo@HIDDEN> writes:

> That said putting all of /gnu/store wouldn=E2=80=99t be that bad I think=
=E2=80=94at
> least user data remains inaccessible, which is much better than exposing
> /usr on FHS distros.
>
> Thoughts?

Sounds fine to me then.

--=20
Ricardo





Information forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.

Message received at 34135 <at> debbugs.gnu.org:


Received: (at 34135) by debbugs.gnu.org; 21 Jan 2019 09:54:29 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Jan 21 04:54:29 2019
Received: from localhost ([127.0.0.1]:39431 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1glWHl-0006Q0-BB
	for submit <at> debbugs.gnu.org; Mon, 21 Jan 2019 04:54:29 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:52568)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1glWHi-0006Ps-Vz
 for 34135 <at> debbugs.gnu.org; Mon, 21 Jan 2019 04:54:27 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id 4FEEF3FC2;
 Mon, 21 Jan 2019 10:54:26 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id DKaJ_bGL9uKc; Mon, 21 Jan 2019 10:54:24 +0100 (CET)
Received: from ribbon (unknown [IPv6:2001:660:6102:320:e120:2c8f:8909:cdfe])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 933003FBB;
 Mon, 21 Jan 2019 10:54:24 +0100 (CET)
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN>
To: Julien Lepiller <julien@HIDDEN>
Subject: Re: bug#34135: IceCat lacks WebGL support
References: <87o98cr6kx.fsf@HIDDEN> <20190119180750.13c17654@HIDDEN>
 <87womzlzhm.fsf@HIDDEN> <87d0oqe7u2.fsf@HIDDEN>
 <7A88B01C-EAB9-47BA-98EC-16F91C7993E7@HIDDEN>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 2 =?utf-8?Q?Pluvi=C3=B4se?= an 227 de la =?utf-8?Q?R?=
 =?utf-8?Q?=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Mon, 21 Jan 2019 10:54:24 +0100
In-Reply-To: <7A88B01C-EAB9-47BA-98EC-16F91C7993E7@HIDDEN> (Julien
 Lepiller's message of "Mon, 21 Jan 2019 09:49:43 +0100")
Message-ID: <874la2l4j3.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: 34135
Cc: Ricardo Wurmus <rekado@HIDDEN>, 34135 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

Julien Lepiller <julien@HIDDEN> skribis:

> Le 21 janvier 2019 09:24:53 GMT+01:00, Ricardo Wurmus <rekado@HIDDEN=
> a =C3=A9crit :
>>
>>Ludovic Court=C3=A8s <ludo@HIDDEN> writes:
>>
>>> Hi Julien,
>>>
>>> Julien Lepiller <julien@HIDDEN> skribis:
>>>
>>>> Try setting security.sandbox.content.read_path_whitelist to
>>/gnu/store/
>>>> (with a leading /) in about:config.
>>>
>>> Setting it to =E2=80=9C/gnu/store/=E2=80=9D (with a trailing slash) wor=
ks, thank you!
>>>
>>> It turns out that setting LIBGL_DRIVERS_PATH is even unnecessary.
>>>
>>> I suppose we should patch the default value of
>>> =E2=80=98security.sandbox.content.read_path_whitelist=E2=80=99 in our p=
ackage.  What
>>do
>>> people think?
>>
>>It isn=E2=80=99t much of a sandbox if all of /gnu/store would be permitte=
d.=20
>>Can
>>this be reduced to the paths of store items that are known at build
>>time?
>
> You'll have to list every library and there dependencies. Is that
> possible?

That would be possible, yes, though we=E2=80=99d have the build-time
dependencies rather than the run-time dependencies (since we cannot know
the run-time dependencies until IceCat is built.)

That said putting all of /gnu/store wouldn=E2=80=99t be that bad I think=E2=
=80=94at
least user data remains inaccessible, which is much better than exposing
/usr on FHS distros.

Thoughts?

Ludo=E2=80=99.




Information forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.

Message received at 34135 <at> debbugs.gnu.org:


Received: (at 34135) by debbugs.gnu.org; 21 Jan 2019 08:49:55 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Jan 21 03:49:55 2019
Received: from localhost ([127.0.0.1]:39399 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1glVHH-0004pw-Ev
	for submit <at> debbugs.gnu.org; Mon, 21 Jan 2019 03:49:55 -0500
Received: from lepiller.eu ([89.234.186.109]:50912)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <julien@HIDDEN>) id 1glVHE-0004pm-Ra
 for 34135 <at> debbugs.gnu.org; Mon, 21 Jan 2019 03:49:53 -0500
Received: from [100.108.161.89] (218.ip-51-77-193.eu [51.77.193.218])
 by lepiller.eu (OpenSMTPD) with ESMTPSA id e739c0fc
 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO); 
 Mon, 21 Jan 2019 08:45:38 +0000 (UTC)
Date: Mon, 21 Jan 2019 09:49:43 +0100
User-Agent: K-9 Mail for Android
In-Reply-To: <87d0oqe7u2.fsf@HIDDEN>
References: <87o98cr6kx.fsf@HIDDEN> <20190119180750.13c17654@HIDDEN>
 <87womzlzhm.fsf@HIDDEN> <87d0oqe7u2.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: bug#34135: IceCat lacks WebGL support
To: Ricardo Wurmus <rekado@HIDDEN>,
 =?ISO-8859-1?Q?Ludovic_Court=E8s?= <ludo@HIDDEN>
From: Julien Lepiller <julien@HIDDEN>
Message-ID: <7A88B01C-EAB9-47BA-98EC-16F91C7993E7@HIDDEN>
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 34135
Cc: 34135 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Le 21 janvier 2019 09:24:53 GMT+01:00, Ricardo Wurmus <rekado@elephly=2Enet=
> a =C3=A9crit :
>
>Ludovic Court=C3=A8s <ludo@gnu=2Eorg> writes:
>
>> Hi Julien,
>>
>> Julien Lepiller <julien@lepiller=2Eeu> skribis:
>>
>>> Try setting security=2Esandbox=2Econtent=2Eread_path_whitelist to
>/gnu/store/
>>> (with a leading /) in about:config=2E
>>
>> Setting it to =E2=80=9C/gnu/store/=E2=80=9D (with a trailing slash) wor=
ks, thank you!
>>
>> It turns out that setting LIBGL_DRIVERS_PATH is even unnecessary=2E
>>
>> I suppose we should patch the default value of
>> =E2=80=98security=2Esandbox=2Econtent=2Eread_path_whitelist=E2=80=99 in=
 our package=2E  What
>do
>> people think?
>
>It isn=E2=80=99t much of a sandbox if all of /gnu/store would be permitte=
d=2E=20
>Can
>this be reduced to the paths of store items that are known at build
>time?

You'll have to list every library and there dependencies=2E Is that possib=
le? Also I think icecat has read permission to /usr by default, so setting =
permission to the store is similar=2E




Information forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.

Message received at 34135 <at> debbugs.gnu.org:


Received: (at 34135) by debbugs.gnu.org; 21 Jan 2019 08:25:41 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Jan 21 03:25:41 2019
Received: from localhost ([127.0.0.1]:39390 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1glUtp-0004GN-5i
	for submit <at> debbugs.gnu.org; Mon, 21 Jan 2019 03:25:41 -0500
Received: from sender-of-o53.zoho.com ([135.84.80.218]:21725)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rekado@HIDDEN>) id 1glUtm-0004GE-CF
 for 34135 <at> debbugs.gnu.org; Mon, 21 Jan 2019 03:25:39 -0500
ARC-Seal: i=1; a=rsa-sha256; t=1548059098; cv=none; d=zoho.com; s=zohoarc; 
 b=jFVXMDYZlgc1d8MjZa2LVc/19HRAxwZhKFjK3OCWwNnVcwhG31381N3ccuhafd7VxY51741ev0bEKLoh2UBGg8mdd8K838juL04mdeM6LUdLH6BNGsXXf/C+W5Ttc+o59tNKmtMieKWxGRc5noCaq/+YbwjE4IJtcm5H+m4Z6z4=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com;
 s=zohoarc; t=1548059098;
 h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results;
 bh=b1+gTPoD913mEYg3MYFqifo6RdeLnSiSDS6jnoTVtzU=; 
 b=d7lRxT4m1VPHU8AvmT+FkFKC9yIQAElbdbAP1SRBDI2W/+A1lQPDs9GxC/cgRLk5AVGa4qlbigjrAbc/nXWe8RMaWUXJln2Y4MGlmLqaHxwLXWGRhP4kxpw9PCC5wgGQ6Ts4nOGpYG97QUoHBAYAFqDaPvLKZuZEAUeIbp+xlOk=
ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass  header.i=elephly.net;
 spf=pass  smtp.mailfrom=rekado@HIDDEN;
 dmarc=pass header.from=<rekado@HIDDEN> header.from=<rekado@HIDDEN>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1548059098; 
 s=zoho; d=elephly.net; i=rekado@HIDDEN;
 h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;
 l=744; bh=b1+gTPoD913mEYg3MYFqifo6RdeLnSiSDS6jnoTVtzU=;
 b=a94tBpiQ0IUr0PRnFKHmtmTZ3i8kJkfvOtjCzbmukTY3ZmKuOpjhXJ+8xz+rkEic
 pafgENpkemnmad2ls/cFdPvL3ebTM+FxqA7oQM13V66TMeI3X8+w7vXaA4Y4TyZ1wl3
 TVAtYir7fSDsvEFSz9zo8M+N/CbmhsUmgNNWdJUI=
Received: from localhost (p578E6D27.dip0.t-ipconnect.de [87.142.109.39]) by
 mx.zohomail.com with SMTPS id 1548059096694854.7982772463806;
 Mon, 21 Jan 2019 00:24:56 -0800 (PST)
References: <87o98cr6kx.fsf@HIDDEN> <20190119180750.13c17654@HIDDEN>
 <87womzlzhm.fsf@HIDDEN>
User-agent: mu4e 1.0; emacs 26.1
From: Ricardo Wurmus <rekado@HIDDEN>
To: Ludovic =?utf-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Subject: Re: bug#34135: IceCat lacks WebGL support
In-reply-to: <87womzlzhm.fsf@HIDDEN>
X-URL: https://elephly.net
X-PGP-Key: https://elephly.net/rekado.pubkey
X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
Date: Mon, 21 Jan 2019 09:24:53 +0100
Message-ID: <87d0oqe7u2.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-ZohoMailClient: External
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: 34135
Cc: 34135 <at> debbugs.gnu.org, Julien Lepiller <julien@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)


Ludovic Court=C3=A8s <ludo@HIDDEN> writes:

> Hi Julien,
>
> Julien Lepiller <julien@HIDDEN> skribis:
>
>> Try setting security.sandbox.content.read_path_whitelist to /gnu/store/
>> (with a leading /) in about:config.
>
> Setting it to =E2=80=9C/gnu/store/=E2=80=9D (with a trailing slash) works=
, thank you!
>
> It turns out that setting LIBGL_DRIVERS_PATH is even unnecessary.
>
> I suppose we should patch the default value of
> =E2=80=98security.sandbox.content.read_path_whitelist=E2=80=99 in our pac=
kage.  What do
> people think?

It isn=E2=80=99t much of a sandbox if all of /gnu/store would be permitted.=
  Can
this be reduced to the paths of store items that are known at build
time?

--=20
Ricardo





Information forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.

Message received at 34135 <at> debbugs.gnu.org:


Received: (at 34135) by debbugs.gnu.org; 20 Jan 2019 22:45:50 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Jan 20 17:45:49 2019
Received: from localhost ([127.0.0.1]:39266 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1glLqf-00070G-LW
	for submit <at> debbugs.gnu.org; Sun, 20 Jan 2019 17:45:49 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:44988)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1glLqd-000707-Ve
 for 34135 <at> debbugs.gnu.org; Sun, 20 Jan 2019 17:45:48 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id 43E533B37;
 Sun, 20 Jan 2019 23:45:47 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id e5kQqD3A7PiD; Sun, 20 Jan 2019 23:45:42 +0100 (CET)
Received: from ribbon (unknown [IPv6:2a01:e0a:1d:7270:af76:b9b:ca24:c465])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id F41BE365B;
 Sun, 20 Jan 2019 23:45:41 +0100 (CET)
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN>
To: Julien Lepiller <julien@HIDDEN>
Subject: Re: bug#34135: IceCat lacks WebGL support
References: <87o98cr6kx.fsf@HIDDEN> <20190119180750.13c17654@HIDDEN>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 1 =?utf-8?Q?Pluvi=C3=B4se?= an 227 de la =?utf-8?Q?R?=
 =?utf-8?Q?=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Sun, 20 Jan 2019 23:45:41 +0100
In-Reply-To: <20190119180750.13c17654@HIDDEN> (Julien Lepiller's message
 of "Sat, 19 Jan 2019 18:07:50 +0100")
Message-ID: <87womzlzhm.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: 34135
Cc: 34135 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

Hi Julien,

Julien Lepiller <julien@HIDDEN> skribis:

> Try setting security.sandbox.content.read_path_whitelist to /gnu/store/
> (with a leading /) in about:config.

Setting it to =E2=80=9C/gnu/store/=E2=80=9D (with a trailing slash) works, =
thank you!

It turns out that setting LIBGL_DRIVERS_PATH is even unnecessary.

I suppose we should patch the default value of
=E2=80=98security.sandbox.content.read_path_whitelist=E2=80=99 in our packa=
ge.  What do
people think?

Thanks,
Ludo=E2=80=99.




Information forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.

Message received at 34135 <at> debbugs.gnu.org:


Received: (at 34135) by debbugs.gnu.org; 19 Jan 2019 17:08:07 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Jan 19 12:08:07 2019
Received: from localhost ([127.0.0.1]:38018 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gku6J-0002EI-IH
	for submit <at> debbugs.gnu.org; Sat, 19 Jan 2019 12:08:07 -0500
Received: from lepiller.eu ([89.234.186.109]:50644)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <julien@HIDDEN>) id 1gku6H-0002E8-5t
 for 34135 <at> debbugs.gnu.org; Sat, 19 Jan 2019 12:08:06 -0500
Received: from localhost (static-176-182-42-79.ncc.abo.bbox.fr [176.182.42.79])
 by lepiller.eu (OpenSMTPD) with ESMTPSA id 2c5ca479
 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO)
 for <34135 <at> debbugs.gnu.org>; Sat, 19 Jan 2019 17:03:55 +0000 (UTC)
Date: Sat, 19 Jan 2019 18:07:50 +0100
From: Julien Lepiller <julien@HIDDEN>
Subject: Re: bug#34135: IceCat lacks WebGL support
Message-ID: <20190119180750.13c17654@HIDDEN>
In-Reply-To: <87o98cr6kx.fsf@HIDDEN>
References: <87o98cr6kx.fsf@HIDDEN>
X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; x86_64-unknown-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 1.2 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Le Sat, 19 Jan 2019 16:49:02 +0100, Ludovic Courtès <ludo@HIDDEN>
    a écrit : > Hello, > > If you enable WebGL support in ‘about:config’,
    then stop it and run: > > --8<cut herestart>8--- > $ export LIBGL_DRIVERS_PATH=$(guix
    build m [...] 
 
 Content analysis details:   (1.2 points, 10.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 MISSING_HEADERS        Missing To: header
X-Debbugs-Envelope-To: 34135
Cc: 34135 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.2 (/)

Le Sat, 19 Jan 2019 16:49:02 +0100,
Ludovic Court=C3=A8s <ludo@HIDDEN> a =C3=A9crit :

> Hello,
>=20
> If you enable WebGL support in =E2=80=98about:config=E2=80=99, then stop =
it and run:
>=20
> --8<---------------cut here---------------start------------->8---
> $ export LIBGL_DRIVERS_PATH=3D$(guix build mesa)/lib/dri
> $ icecat https://get.webgl.org
> 1547912837231
> addons.webextension.tortm-browser-button@jeremybenthum  WARN
> Please specify whether you want browser_style or not in your
> browser_action options. 1547912837231
> addons.webextension.https-everywhere@HIDDEN    WARN    Please
> specify whether you want browser_style or not in your browser_action
> options. 1547912837232
> addons.webextension.{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
> WARN    Please specify whether you want browser_style or not in your
> browser_action options. JavaScript warning:
> moz-extension://b84ee99d-7e50-4975-9d16-3806d330a3b2/lib/adblockplus.js,
> line 0: Successfully compiled asm.js code (total compilation time
> 1ms; not stored in cache (too small ) libGL error: MESA-LOADER:
> failed to retrieve device information libGL error: unable to load
> driver: i915_dri.so libGL error: driver pointer missing libGL error:
> failed to load driver: i915 libGL error: MESA-LOADER: failed to
> retrieve device information libGL error: unable to load driver:
> i915_dri.so libGL error: driver pointer missing libGL error: failed
> to load driver: i915 libGL error: unable to load driver:
> swrast_dri.so libGL error: failed to load driver: swrast JavaScript
> warning: https://get.webgl.org/, line 193: Error: WebGL warning:
> Failed to create WebGL context: WebGL creation failed:=20
> * Error during native OpenGL init.
> * Exhausted GL driver caps.
> * Exhausted GL driver options.
> JavaScript warning: https://get.webgl.org/, line 197: Error: WebGL
> warning: Failed to create WebGL context: WebGL creation failed:=20
> * Error during native OpenGL init.
> * Exhausted GL driver caps.
> * Exhausted GL driver options.
> --8<---------------cut here---------------end--------------->8---
>=20
> and the web page reads:
>=20
>    While your browser seems to support WebGL, it is disabled or
>    unavailable.
>=20
> Weird thing is that glxgears and glxinfo (from =E2=80=98mesa-utils=E2=80=
=99) both work
> well.
>=20
> Thoughts?
>=20
> Ludo=E2=80=99.

Try setting security.sandbox.content.read_path_whitelist to /gnu/store/
(with a leading /) in about:config.




Information forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 19 Jan 2019 15:49:16 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Jan 19 10:49:16 2019
Received: from localhost ([127.0.0.1]:38008 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gkss0-0000Lj-Dh
	for submit <at> debbugs.gnu.org; Sat, 19 Jan 2019 10:49:16 -0500
Received: from eggs.gnu.org ([209.51.188.92]:44490)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1gksry-0000LU-OX
 for submit <at> debbugs.gnu.org; Sat, 19 Jan 2019 10:49:15 -0500
Received: from lists.gnu.org ([209.51.188.17]:39543)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <ludo@HIDDEN>) id 1gksrt-0003Iw-7f
 for submit <at> debbugs.gnu.org; Sat, 19 Jan 2019 10:49:09 -0500
Received: from eggs.gnu.org ([209.51.188.92]:54684)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <ludo@HIDDEN>) id 1gksrs-00061O-8k
 for bug-guix@HIDDEN; Sat, 19 Jan 2019 10:49:09 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE
 autolearn=disabled version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <ludo@HIDDEN>) id 1gksrr-0003HP-Bf
 for bug-guix@HIDDEN; Sat, 19 Jan 2019 10:49:08 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:33534)
 by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <ludo@HIDDEN>) id 1gksrr-0003Et-4l
 for bug-guix@HIDDEN; Sat, 19 Jan 2019 10:49:07 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id 016052FAE
 for <bug-guix@HIDDEN>; Sat, 19 Jan 2019 16:49:05 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id iFfynkck1W-H for <bug-guix@HIDDEN>;
 Sat, 19 Jan 2019 16:49:03 +0100 (CET)
Received: from ribbon (unknown [IPv6:2a01:e0a:1d:7270:af76:b9b:ca24:c465])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 789132FAD
 for <bug-guix@HIDDEN>; Sat, 19 Jan 2019 16:49:03 +0100 (CET)
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN>
To: Bug Guix <bug-guix@HIDDEN>
Subject: IceCat lacks WebGL support
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 30 =?utf-8?Q?Niv=C3=B4se?= an 227 de la =?utf-8?Q?R?=
 =?utf-8?Q?=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Sat, 19 Jan 2019 16:49:02 +0100
Message-ID: <87o98cr6kx.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 185.233.100.1
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hello,

If you enable WebGL support in =E2=80=98about:config=E2=80=99, then stop it=
 and run:

--8<---------------cut here---------------start------------->8---
$ export LIBGL_DRIVERS_PATH=3D$(guix build mesa)/lib/dri
$ icecat https://get.webgl.org
1547912837231   addons.webextension.tortm-browser-button@jeremybenthum  WAR=
N    Please specify whether you want browser_style or not in your browser_a=
ction options.
1547912837231   addons.webextension.https-everywhere@HIDDEN    WARN    Ple=
ase specify whether you want browser_style or not in your browser_action op=
tions.
1547912837232   addons.webextension.{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} =
     WARN    Please specify whether you want browser_style or not in your b=
rowser_action options.
JavaScript warning: moz-extension://b84ee99d-7e50-4975-9d16-3806d330a3b2/li=
b/adblockplus.js, line 0: Successfully compiled asm.js code (total compilat=
ion time 1ms; not stored in cache (too small )
libGL error: MESA-LOADER: failed to retrieve device information
libGL error: unable to load driver: i915_dri.so
libGL error: driver pointer missing
libGL error: failed to load driver: i915
libGL error: MESA-LOADER: failed to retrieve device information
libGL error: unable to load driver: i915_dri.so
libGL error: driver pointer missing
libGL error: failed to load driver: i915
libGL error: unable to load driver: swrast_dri.so
libGL error: failed to load driver: swrast
JavaScript warning: https://get.webgl.org/, line 193: Error: WebGL warning:=
 Failed to create WebGL context: WebGL creation failed:=20
* Error during native OpenGL init.
* Exhausted GL driver caps.
* Exhausted GL driver options.
JavaScript warning: https://get.webgl.org/, line 197: Error: WebGL warning:=
 Failed to create WebGL context: WebGL creation failed:=20
* Error during native OpenGL init.
* Exhausted GL driver caps.
* Exhausted GL driver options.
--8<---------------cut here---------------end--------------->8---

and the web page reads:

   While your browser seems to support WebGL, it is disabled or
   unavailable.

Weird thing is that glxgears and glxinfo (from =E2=80=98mesa-utils=E2=80=99=
) both work
well.

Thoughts?

Ludo=E2=80=99.




Acknowledgement sent to Ludovic Courtès <ludo@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-guix@HIDDEN. Full text available.
Report forwarded to bug-guix@HIDDEN:
bug#34135; Package guix. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.