On Mon, Feb 25, 2019 at 02:35:04PM +0100, Solene Rapenne wrote:
> > thanks for feedback. I'm unsure about wording, I reworked it a bit from
> > your suggestions.
> >
> >
> > Index: pkg/README
> > ===================================================================
> > RCS file: pkg/README
> > diff -N pkg/README
> > --- /dev/null 1 Jan 1970 00:00:00 -0000
> > +++ pkg/README 12 Feb 2019 18:13:05 -0000
> > @@ -0,0 +1,27 @@
> > +$OpenBSD: README-main,v 1.2 2018/09/04 12:46:25 espie Exp $
> > +
> > ++-----------------------------------------------------------------------
> > +| Running ${PKGSTEM} on OpenBSD
> > ++-----------------------------------------------------------------------
> > +
> > +Unveil
> > +=================
> > +Iridium has been patched to use pledge and unveil, so it can only
> > +display paths allowed in /etc/iridium/unveil.main, this includes
> > +the following paths:
> > +
> > + ~/Documents ~/Downloads ~/Music
> > + ~/Pictures ~/Videos /tmp
> > +
> > +If you need to upload a file, you need to make the file available
> > +in one of those folders.
> > +
> > +When iridium file browser is showing up, it may be displaying an
> > +unauthorized folder which will appear empty, which mean it is not
> > +possible to browse to some other location. One can use the keyboard
> > +shortcut Ctrl+L and type a path in the upper address bar to reach a
> > +whitelisted path.
> > +
> > +If you want your browser to be able to walk through your filesystem,
> > +which is discouraged, unveil can be disabled at runtime by using the
> > +parameter --disable-unveil
I think the allowed paths should be synced with chromium first.
--
Antoine
