From 3b5592819c9691a15011cdf4156f7aa1bb7d7f15 Mon Sep 17 00:00:00 2001 From: Federico Beffa Date: Mon, 22 Jul 2024 22:09:06 +0200 Subject: [PATCH] tracker-miners: fix store permissions Add patch: tracker-landlock-nix-store-permission.patch See https://gitlab.gnome.org/GNOME/localsearch/-/issues/351 Fixes https://github.com/NixOS/nixpkgs/issues/319587 --- pkgs/by-name/tr/tracker-miners/package.nix | 4 ++++ .../tracker-landlock-nix-store-permission.patch | 15 +++++++++++++++ 2 files changed, 19 insertions(+) create mode 100644 pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch diff --git a/pkgs/by-name/tr/tracker-miners/package.nix b/pkgs/by-name/tr/tracker-miners/package.nix index caf2e36488b2..fb882da42b73 100644 --- a/pkgs/by-name/tr/tracker-miners/package.nix +++ b/pkgs/by-name/tr/tracker-miners/package.nix @@ -54,6 +54,10 @@ stdenv.mkDerivation (finalAttrs: { hash = "sha256-50OIFUtcGXtLfuQvDc6MX7vd1NNhCT74jU+zA+M9pf4="; }; + patches = [ + ./tracker-landlock-nix-store-permission.patch + ]; + nativeBuildInputs = [ asciidoc docbook-xsl-nons diff --git a/pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch b/pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch new file mode 100644 index 000000000000..4715241ee628 --- /dev/null +++ b/pkgs/by-name/tr/tracker-miners/tracker-landlock-nix-store-permission.patch @@ -0,0 +1,15 @@ +diff --git a/src/libtracker-miners-common/tracker-landlock.c b/src/libtracker-miners-common/tracker-landlock.c +index 6d4510be1..1de5d5a90 100644 +--- a/src/libtracker-miners-common/tracker-landlock.c ++++ b/src/libtracker-miners-common/tracker-landlock.c +@@ -184,6 +184,10 @@ gboolean + tracker_landlock_init (const gchar * const *indexed_folders) + { + TrackerLandlockRule stock_rules[] = { ++ { "/nix/store", ++ (LANDLOCK_ACCESS_FS_EXECUTE | ++ LANDLOCK_ACCESS_FS_READ_FILE | ++ LANDLOCK_ACCESS_FS_READ_DIR) }, + /* Allow access to the executable itself */ + { LIBEXECDIR "/tracker-extract-3", + LANDLOCK_ACCESS_FS_READ_FILE |