73 lines
2.1 KiB
JavaScript
73 lines
2.1 KiB
JavaScript
const fs = require('fs/promises');
|
|
const path = require('path');
|
|
|
|
function log(message) {
|
|
console.log(` - ${message}`);
|
|
}
|
|
|
|
function createLoaderScript({ executableName, productName }) {
|
|
return `#!/usr/bin/env bash
|
|
set -u
|
|
|
|
UNPRIVILEGED_USERNS_ENABLED=$(cat /proc/sys/kernel/unprivileged_userns_clone 2>/dev/null)
|
|
RESTRICT_UNPRIVILEGED_USERNS=$(cat /proc/sys/kernel/apparmor_restrict_unprivileged_userns 2>/dev/null)
|
|
|
|
SCRIPT_PATH="\${BASH_SOURCE[0]}"
|
|
if command -v readlink >/dev/null 2>&1; then
|
|
RESOLVED_SCRIPT_PATH=$(readlink -f "$SCRIPT_PATH" 2>/dev/null || true)
|
|
if [ -n "$RESOLVED_SCRIPT_PATH" ]; then
|
|
SCRIPT_PATH="$RESOLVED_SCRIPT_PATH"
|
|
fi
|
|
fi
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$SCRIPT_PATH")" && pwd)"
|
|
|
|
APPLY_NO_SANDBOX_FLAG=0
|
|
if [ "$UNPRIVILEGED_USERNS_ENABLED" != 1 ] || [ "$RESTRICT_UNPRIVILEGED_USERNS" = 1 ]; then
|
|
APPLY_NO_SANDBOX_FLAG=1
|
|
fi
|
|
|
|
if [ "$SCRIPT_DIR" = "/usr/bin" ]; then
|
|
SCRIPT_DIR="/opt/${productName}"
|
|
fi
|
|
|
|
EXEC_ARGS=()
|
|
if [ "$APPLY_NO_SANDBOX_FLAG" = 1 ]; then
|
|
echo "Note: Running with --no-sandbox since unprivileged_userns_clone is disabled or apparmor_restrict_unprivileged_userns is enabled."
|
|
EXEC_ARGS+=(--no-sandbox)
|
|
fi
|
|
|
|
exec "$SCRIPT_DIR/${executableName}.bin" "\${EXEC_ARGS[@]}" "$@"
|
|
`;
|
|
}
|
|
|
|
async function afterPackHook(params) {
|
|
if (params.electronPlatformName !== 'linux') {
|
|
return;
|
|
}
|
|
|
|
log('applying Linux launcher sandbox fix');
|
|
|
|
const executable = path.join(params.appOutDir, params.packager.executableName);
|
|
|
|
try {
|
|
await fs.rename(executable, `${executable}.bin`);
|
|
await fs.writeFile(
|
|
executable,
|
|
createLoaderScript({
|
|
executableName: params.packager.executableName,
|
|
productName: params.packager.appInfo.productName,
|
|
})
|
|
);
|
|
await fs.chmod(executable, 0o755);
|
|
} catch (error) {
|
|
log(`failed to create launcher wrapper: ${error.message}`);
|
|
throw new Error('Failed to create launcher wrapper');
|
|
}
|
|
|
|
log('Linux launcher sandbox fix applied');
|
|
}
|
|
|
|
module.exports = afterPackHook;
|
|
module.exports.createLoaderScript = createLoaderScript;
|