From 5765d8aca9dc8af8ce1970c89e02eab663bd8e2a Mon Sep 17 00:00:00 2001
From: Robo <hop2deep@gmail.com>
Date: Wed, 23 Jun 2021 00:42:30 +0900
Subject: [PATCH] fix: setuid helper permission (#126798)

* ci: fix setuid helper binary permission

* ci: allow privilege for CLONE_NEWPID | CLONE_NEWNET

* ci: fix chrome-sandbox permission with rpm

* ci: fix permissions on snap

* ci: download electron earlier for arm builds
---
 linux/rpm/code.spec.template | 1 +
 linux/snap/snapcraft.yaml    | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/linux/rpm/code.spec.template b/linux/rpm/code.spec.template
index 578339b87f9c1..79c8c43022f8a 100644
--- a/linux/rpm/code.spec.template
+++ b/linux/rpm/code.spec.template
@@ -65,6 +65,7 @@ update-mime-database /usr/share/mime &> /dev/null || :
 
 %files
 %defattr(-,root,root)
+%attr(4755, root, root) /usr/share/@@NAME@@/chrome-sandbox
 
 /usr/share/@@NAME@@/
 /usr/share/applications/@@NAME@@.desktop
diff --git a/linux/snap/snapcraft.yaml b/linux/snap/snapcraft.yaml
index c24d0af3ea762..b40b6a6ae7ae3 100644
--- a/linux/snap/snapcraft.yaml
+++ b/linux/snap/snapcraft.yaml
@@ -27,6 +27,9 @@ parts:
       - gnome
     plugin: dump
     source: .
+    override-build: |
+      snapcraftctl build
+      chmod 4755 $SNAPCRAFT_PART_INSTALL/usr/share/@@NAME@@/chrome-sandbox
     stage-packages:
       - ibus-gtk3
       - fcitx-frontend-gtk3