pkg/54892: www/firefox sandbox blocks access to rest of pkgsrc prefix, preventing fonts from loading

[mforney%mforney.org@localhost]

>Number:         54892
>Category:       pkg
>Synopsis:       www/firefox sandbox blocks access to rest of pkgsrc prefix, preventing fonts from loading
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 25 02:20:00 +0000 2020
>Originator:     Michael Forney
>Release:        pkgsrc trunk, 2020-01-24
>Organization:
>Environment:
Linux arrow 5.4.13+ #104 SMP Tue Jan 21 15:51:57 PST 2020 x86_64
>Description:
On Linux, firefox uses a seccomp-bpf sandbox to restrict access to various parts of the filesystem. However, only some locations for fonts are exposed, even though pkgsrc might be installed in some arbitrary prefix.

The result is that firefox fails to load any fonts at all, rendering placeholder characters instead:
https://mforney.org/firefox-bug.png
>How-To-Repeat:
Install firefox on an operating system that uses the seccomp sandbox (such as Linux). Note that there are a couple of other issues preventing firefox from building on Linux, I'll file separate PRs for those.
>Fix:
https://github.com/NetBSD/pkgsrc/compare/trunk...michaelforney:firefox-sandbox.patch