On Thu, 8 Nov 2018 09:03:51 +0100, Stefan Wollny <[email protected]> wrote:
> 
> I changed the 'exec' command in /usr/local/bin/iridium like so:
> - LANG=${_l} exec "/usr/local/iridium/iridium" "${@}"
> + LANG=${_l} exec "/usr/local/iridium/iridium" "--enable-unveil" "${@}"
> 
> With this change I can browse the web as before. BUT: My startpage is a
> html-file in the users home directory containing a huge collection of
> links to web sites. I use this file at home and at work where I am
> forced to use the most popular unsafe OS. With iridium unveiled this
> page is no longer accessible instead I get 'ERR_FILE_NOT_FOUND'.

With unveil enabled, your browser can only download files to your ~/Downloads 
sub-dir, and can only upload files from your ~/Uploads sub-dir.  So maybe put 
your HTML file in ~/Uploads and use the new location as the start page?

Disclaimer: I am not a user of Iridium or Chromium with unveil, but this is 
what I remember from Bob Beck's presentation on the subject at EuroBSDCon in 
September.  Hope I got the sub-dirs right!  Thinking about it, there should be 
write access to ~/.cache as well, maybe even /tmp, but these are just extra 
details.

Reply via email to