Spencer BullandGPT-6 Codex
2fb9ab2ba9
Use the same direct executable path for menu launches and URLs, require working user namespaces, and retain only the first-update relaunch gate backport. This avoids the upstream CLI fallback that makes a helper in the user runtime setuid-root. Co-Authored-By: GPT-6 Codex (xhigh) <noreply@openai.com>
12 lines
551 B
Diff
12 lines
551 B
Diff
--- a/scripts/desktop-update/posix.sh
|
|
+++ b/scripts/desktop-update/posix.sh
|
|
@@ -317,6 +317,8 @@
|
|
if [ ! -e "$sb" ]; then GATE=relaunch; return; fi
|
|
if [ -u "$sb" ] && [ "$(stat -c %u "$sb" 2>/dev/null)" = "0" ]; then GATE=relaunch; return; fi
|
|
|
|
+ if unshare --user --map-root-user true 2>/dev/null; then GATE=relaunch; return; fi
|
|
+
|
|
case "${ELECTRON_DISABLE_SANDBOX:-}" in 1|true|TRUE|True) GATE=relaunch; return ;; esac
|
|
[ "$SANDBOX_FALLBACK" -eq 1 ] && { GATE=relaunch; return; }
|
|
for arg in ${RELAUNCH_ARGS[@]+"${RELAUNCH_ARGS[@]}"}; do
|