fix, do not run chmod --recursive 700 "${app_homedir}"

https://forums.whonix.org/t/system-wide-sandboxing-framework-sandbox-app-launcher/9008/224
Kicksecure · Oct 31, 2020 · 921e2d0 · 921e2d0
1 parent 5ea42f5
commit 921e2d0
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/usr/bin/sandbox-app-launcher b/usr/bin/sandbox-app-launcher
@@ -108,7 +108,15 @@ setup() {
   fi
 
   if ! [ "$(stat -c %a "${app_homedir}")" = "700" ]; then
-    chmod 700 -R "${app_homedir}"
+    ## command:
+    ## find /home/sandbox-app-launcher-appdata/torbrowser/.tb/tor-browser -executable -type f
+    ## output:
+    ## /home/sandbox-app-launcher-appdata/torbrowser/.tb/tor-browser/start-tor-browser.desktop
+    ## /home/sandbox-app-launcher-appdata/torbrowser/.tb/tor-browser/Browser/libmozavcodec.so
+    ## ...
+    #chmod --recursive 700 "${app_homedir}"
+    ## Therefore do not use --recursive.
+    chmod 700 "${app_homedir}"
   fi
 
   ## Generate seccomp filter.