From 6fac26961baefd33f9c833f1942d9cf02ef2a005 Mon Sep 17 00:00:00 2001
From: paladox <paladox@users.noreply.github.com>
Date: Mon, 17 Jul 2023 15:07:14 -0400
Subject: [PATCH] mediawiki: Add mediawiki-firejail-rsvg-convert script (#3299)

---
 .../firejail/mediawiki-firejail-rsvg-convert.py      | 12 ++++++++++++
 modules/mediawiki/manifests/firejail.pp              |  7 +++++++
 2 files changed, 19 insertions(+)
 create mode 100644 modules/mediawiki/files/firejail/mediawiki-firejail-rsvg-convert.py

diff --git a/modules/mediawiki/files/firejail/mediawiki-firejail-rsvg-convert.py b/modules/mediawiki/files/firejail/mediawiki-firejail-rsvg-convert.py
new file mode 100644
index 0000000000..8f3a073e22
--- /dev/null
+++ b/modules/mediawiki/files/firejail/mediawiki-firejail-rsvg-convert.py
@@ -0,0 +1,12 @@
+#! /usr/bin/python3
+
+import subprocess
+import sys
+subprocess.call(
+    [
+        '/usr/bin/firejail',
+        '--profile=/etc/firejail/mediawiki-converters.profile',
+        '/usr/bin/rsvg-convert',
+    ]
+    + sys.argv[1:],
+)
diff --git a/modules/mediawiki/manifests/firejail.pp b/modules/mediawiki/manifests/firejail.pp
index cd604e687d..0b7003bfa1 100644
--- a/modules/mediawiki/manifests/firejail.pp
+++ b/modules/mediawiki/manifests/firejail.pp
@@ -31,4 +31,11 @@
         group  => 'www-data',
         mode   => '0555',
     }
+
+    file { '/usr/local/bin/mediawiki-firejail-rsvg-convert':
+        source => 'puppet:///modules/mediawiki/firejail/mediawiki-firejail-rsvg-convert.py',
+        owner  => 'www-data',
+        group  => 'www-data',
+        mode   => '0555',
+    }
 }