From: Denys Dmytriyenko <denis@denix.org>
To: Vivien Didelot <vivien.didelot@gmail.com>
Cc: meta-arago@arago-project.org, Denys Dmytriyenko <denys@konsulko.com>
Subject: Re: [PATCH v2 1/2] qtbase-conf: disable the seccomp filter sandbox
Date: Thu, 7 Oct 2021 14:12:10 -0400 [thread overview]
Message-ID: <20211007181210.GS1528@denix.org> (raw)
In-Reply-To: <20211007175730.152202-1-vdidelot@pbsc.com>
On Thu, Oct 07, 2021 at 01:57:29PM -0400, Vivien Didelot wrote:
> SECCOMP-BPF Sandbox is known to cause runtime issues so set the
> QTWEBENGINE_CHROMIUM_FLAGS environment variable to disable this
> feature temporarily until those issues are resolved.
>
> Signed-off-by: Vivien Didelot <vdidelot@pbsc.com>
Acked-by: Denys Dmytriyenko <denys@konsulko.com>
> ---
> meta-arago-distro/recipes-qt/qt5/qtbase-conf/qt_env.sh | 5 +++++
> meta-arago-distro/recipes-qt/qt5/qtbase-conf/ti33x/qt_env.sh | 5 +++++
> 2 files changed, 10 insertions(+)
>
> diff --git a/meta-arago-distro/recipes-qt/qt5/qtbase-conf/qt_env.sh b/meta-arago-distro/recipes-qt/qt5/qtbase-conf/qt_env.sh
> index 146ee07e..928e2cc7 100644
> --- a/meta-arago-distro/recipes-qt/qt5/qtbase-conf/qt_env.sh
> +++ b/meta-arago-distro/recipes-qt/qt5/qtbase-conf/qt_env.sh
> @@ -6,3 +6,8 @@ export QT_QPA_EGLFS_KMS_CONFIG=/etc/qt5/eglfs_kms_cfg.json
> export QT_QPA_EGLFS_INTEGRATION=eglfs_kms
> export QT_QPA_EGLFS_ALWAYS_SET_MODE=1
> export QT_WAYLAND_SHELL_INTEGRATION=wl-shell
> +
> +# SECCOMP-BPF Sandbox does not work due to unexpected FUTEX_UNLOCK_PI call
> +# from the pthread implementation. Disable this feature temporarily until
> +# those issues are resolved.
> +export QTWEBENGINE_CHROMIUM_FLAGS="--disable-seccomp-filter-sandbox"
> diff --git a/meta-arago-distro/recipes-qt/qt5/qtbase-conf/ti33x/qt_env.sh b/meta-arago-distro/recipes-qt/qt5/qtbase-conf/ti33x/qt_env.sh
> index 29fa2969..96526393 100644
> --- a/meta-arago-distro/recipes-qt/qt5/qtbase-conf/ti33x/qt_env.sh
> +++ b/meta-arago-distro/recipes-qt/qt5/qtbase-conf/ti33x/qt_env.sh
> @@ -7,3 +7,8 @@ export QT_QPA_EGLFS_KMS_CONFIG=/etc/qt5/eglfs_kms_cfg.json
> export QT_QPA_EGLFS_INTEGRATION=eglfs_kms
> export QT_QPA_EGLFS_ALWAYS_SET_MODE=1
> export QT_WAYLAND_SHELL_INTEGRATION=wl-shell
> +
> +# SECCOMP-BPF Sandbox does not work due to unexpected FUTEX_UNLOCK_PI call
> +# from the pthread implementation. Disable this feature temporarily until
> +# those issues are resolved.
> +export QTWEBENGINE_CHROMIUM_FLAGS="--disable-seccomp-filter-sandbox"
> --
> 2.33.0
next prev parent reply other threads:[~2021-10-07 18:11 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-07 17:57 [PATCH v2 1/2] qtbase-conf: disable the seccomp filter sandbox Vivien Didelot
2021-10-07 17:57 ` [PATCH v2 2/2] qtwebengine: remove seccomp filter sandbox hack Vivien Didelot
2021-10-07 18:12 ` Denys Dmytriyenko
2021-10-07 18:12 ` Denys Dmytriyenko [this message]
2021-10-18 16:01 ` [meta-arago] [PATCH v2 1/2] qtbase-conf: disable the seccomp filter sandbox Yogesh Siraswar
2021-10-18 21:43 ` Denys Dmytriyenko
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20211007181210.GS1528@denix.org \
--to=denis@denix.org \
--cc=denys@konsulko.com \
--cc=meta-arago@arago-project.org \
--cc=vivien.didelot@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.