From: "Sven M. Hallberg" <pesco@khjk.org>
Subject: chromium needs to unveil dns files
To: ports@openbsd.org
Date: Sat, 21 Mar 2026 21:05:16 +0100

After upgrading my snapshot yesterday, chromium and ungoogled-chromium
stopped working, throwing ERR_NAME_NOT_RESOLVED on every site.

Turns out it's a case of "rolling its own DNS and wanting to open
resolv.conf", cf. https://marc.info/?l=openbsd-ports&m=177389567528083.
So I've added

  /etc/resolv.conf r
  /etc/hosts r
  /etc/services r
  /etc/protocols r

to unveil.main and that seems to fix things. Should these also be in
the other unveil files?

Thanks to Bryan and Claudio for the quick pointers.


--- /usr/local/share/examples/chromium/unveil.main      Thu Mar 19 06:46:08 2026
+++ /etc/chromium/unveil.main   Sat Mar 21 20:43:40 2026
@@ -15,6 +15,12 @@
 
 /dev/null rw
 
+# needed for self-implemented DNS resolution
+/etc/resolv.conf r
+/etc/hosts r
+/etc/services r
+/etc/protocols r
+
 # needed for chromium
 /etc/chromium r