From 498a20e6e26f2d1812245c212639ad29183a1547 Mon Sep 17 00:00:00 2001 From: Root <175176948+RKNF404@users.noreply.github.com> Date: Wed, 2 Oct 2024 01:45:20 -0400 Subject: [PATCH 1/2] Temporary work around for build error --- .../disable-gssapi-to-enable-network-service-sandbox.patch | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/patches/disable-gssapi-to-enable-network-service-sandbox.patch b/patches/disable-gssapi-to-enable-network-service-sandbox.patch index 094424ae..fe009b00 100644 --- a/patches/disable-gssapi-to-enable-network-service-sandbox.patch +++ b/patches/disable-gssapi-to-enable-network-service-sandbox.patch @@ -20,16 +20,14 @@ diff --git a/services/network/public/mojom/network_service.mojom b/services/netw index 3f3dac717be42..29a9946052308 100644 --- a/services/network/public/mojom/network_service.mojom +++ b/services/network/public/mojom/network_service.mojom -@@ -95,7 +95,11 @@ struct HttpAuthDynamicParams { +@@ -95,7 +95,9 @@ struct HttpAuthDynamicParams { // Indicates whether the GSSAPI library should be loaded. Only supported on // Chrome OS and Linux. - bool allow_gssapi_library_load = true; + // GSSAPI will disable the Network Service Sandbox when websites try to load + // it, not desirable from a security perspective. -+ bool allow_gssapi_library_load = base::CommandLine:: -+ ForCurrentProcess()->HasSwitch( -+ "enable-gssapi")); ++ bool allow_gssapi_library_load = false; // True if Basic authentication challenges should be allowed for non-secure // HTTP responses. From 108f7d3994c17220631f37da5c6b01cc97a5bac2 Mon Sep 17 00:00:00 2001 From: Rootkit404 <175176948+RKNF404@users.noreply.github.com> Date: Wed, 2 Oct 2024 10:43:30 -0400 Subject: [PATCH 2/2] Remove redundancy --- ...gssapi-to-enable-network-service-sandbox.patch | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/patches/disable-gssapi-to-enable-network-service-sandbox.patch b/patches/disable-gssapi-to-enable-network-service-sandbox.patch index fe009b00..cb86e92b 100644 --- a/patches/disable-gssapi-to-enable-network-service-sandbox.patch +++ b/patches/disable-gssapi-to-enable-network-service-sandbox.patch @@ -16,18 +16,3 @@ index 249ff5ecffa8d..c9c36e3226290 100644 } #endif // BUILDFLAG(IS_LINUX) -diff --git a/services/network/public/mojom/network_service.mojom b/services/network/public/mojom/network_service.mojom -index 3f3dac717be42..29a9946052308 100644 ---- a/services/network/public/mojom/network_service.mojom -+++ b/services/network/public/mojom/network_service.mojom -@@ -95,7 +95,9 @@ struct HttpAuthDynamicParams { - - // Indicates whether the GSSAPI library should be loaded. Only supported on - // Chrome OS and Linux. -- bool allow_gssapi_library_load = true; -+ // GSSAPI will disable the Network Service Sandbox when websites try to load -+ // it, not desirable from a security perspective. -+ bool allow_gssapi_library_load = false; - - // True if Basic authentication challenges should be allowed for non-secure - // HTTP responses.