fix: setuid helper permission (microsoft#126798)

* ci: fix setuid helper binary permission * ci: allow privilege for CLONE_NEWPID | CLONE_NEWNET * ci: fix chrome-sandbox permission with rpm * ci: fix permissions on snap * ci: download electron earlier for arm builds
code-oss-dev · Jun 22, 2021 · 5765d8a · 5765d8a
1 parent dc29a02
commit 5765d8a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/linux/rpm/code.spec.template b/linux/rpm/code.spec.template
@@ -65,6 +65,7 @@ update-mime-database /usr/share/mime &> /dev/null || :
 
 %files
 %defattr(-,root,root)
+%attr(4755, root, root) /usr/share/@@NAME@@/chrome-sandbox
 
 /usr/share/@@NAME@@/
 /usr/share/applications/@@NAME@@.desktop

diff --git a/linux/snap/snapcraft.yaml b/linux/snap/snapcraft.yaml
@@ -27,6 +27,9 @@ parts:
       - gnome
     plugin: dump
     source: .
+    override-build: |
+      snapcraftctl build
+      chmod 4755 $SNAPCRAFT_PART_INSTALL/usr/share/@@NAME@@/chrome-sandbox
     stage-packages:
       - ibus-gtk3
       - fcitx-frontend-gtk3