On 7/11/22 17:53, Stuart Henderson wrote:
> I guess your locate database was last generated when firefox was
> installed but chromium was not
>
>> Wondering if something else is at play here...
> grep unveil /usr/local/share/doc/pkg-readmes/*
>
> ls /etc/*/*unveil*
$ grep unveil /usr/local/share/doc/pkg-readmes/*
/usr/local/share/doc/pkg-readmes/chromium:- each category of process
uses unveil(2) to limit filesystem access.
/usr/local/share/doc/pkg-readmes/chromium:Disabling pledge() or unveil()
is not recommended!
/usr/local/share/doc/pkg-readmes/chromium:- global unveil knob: invoke
chromium with --disable-unveil
/usr/local/share/doc/pkg-readmes/chromium:- specific unveil for specific
processes:
/usr/local/share/doc/pkg-readmes/chromium:/etc/chromium/unveil.*
/usr/local/share/doc/pkg-readmes/chromium:to /etc/chromium/unveil.main
and merge with changes in files in
/usr/local/share/doc/pkg-readmes/firefox:pledge(2) and unveil(2) Support
/usr/local/share/doc/pkg-readmes/firefox:Firefox on OpenBSD is secured
with pledge(2) and unveil(2) to limit
/usr/local/share/doc/pkg-readmes/firefox:following files to change the
pledge promises, unveil paths, and
/usr/local/share/doc/pkg-readmes/firefox:/etc/firefox/{unveil,pledge}.{main,content,gpu}
/usr/local/share/doc/pkg-readmes/firefox:As unveil() can't show
non-existing dirs, it is recommended to manually
/usr/local/share/doc/pkg-readmes/firefox:Due to unveil(2) limiting
filesystem access, special care has to be
/usr/local/share/doc/pkg-readmes/firefox:taken to unveil MIME handlers.
For example, to use the mupdf package
/usr/local/share/doc/pkg-readmes/firefox:And the corresponding binary
must be unveiled for it to appear as an
/usr/local/share/doc/pkg-readmes/firefox:line to /etc/firefox/unveil.main:
/usr/local/share/doc/pkg-readmes/firefox:/etc/firefox/unveil.main.
/usr/local/share/doc/pkg-readmes/firefox:To disable pledge and/or unveil
support when troubleshooting, set the
/usr/local/share/doc/pkg-readmes/firefox:corresponding pledge or unveil
file in
/usr/local/share/doc/pkg-readmes/firefox:/etc/firefox/{unveil,pledge}.{main,content,gpu}
to contain
$ ls /etc/*/*unveil*
/etc/chromium/unveil.gpu /etc/chromium/unveil.utility_audio
/etc/firefox/unveil.main
/etc/chromium/unveil.main
/etc/chromium/unveil.utility_network /etc/firefox/unveil.rdd
/etc/chromium/unveil.plugin /etc/chromium/unveil.utility_video
/etc/firefox/unveil.socket
/etc/chromium/unveil.renderer /etc/firefox/unveil.content
/etc/chromium/unveil.utility /etc/firefox/unveil.gpu
