c38d03ba25
Compositor still needs to decode font resources from display-list IPC after startup. Let its sandbox grant read-only access to configured font directories and bundled resource fonts through Landlock, and allow read-only open plus metadata syscalls in the seccomp policy. Preload the same font directories before installing the sandbox so the Compositor can handle display lists that reference system-backed fonts. The full test-web suite completes without Compositor sandbox crashes. |
||
|---|---|---|
| .. | ||
| Compositor | ||
| ImageDecoder | ||
| RequestServer | ||
| WebContent | ||
| WebDriver | ||
| WebWorker | ||
| CMakeLists.txt | ||