[Pkg-privacy-commits] [Git][pkg-privacy-team/torbrowser-launcher][debian/experimental] 81 commits: d/control: Remove XS-Python-Version

Roger Shimizu rosh at debian.org
Wed Sep 23 17:12:02 BST 2020



Roger Shimizu pushed to branch debian/experimental at Privacy Maintainers / torbrowser-launcher


Commits:
ab8be5db by Roger Shimizu at 2018-09-20T09:33:22+09:00
d/control: Remove XS-Python-Version

- - - - -
75c9e6ba by Roger Shimizu at 2018-09-22T00:06:08+09:00
d/copyright: Add comment section to explain why this is contrib package

- - - - -
1b2e6aae by intrigeri at 2018-09-25T07:23:18+00:00
AppArmor: allow Web Content processes to check the update status.

Otherwise restarting after updating Tor Browser is broken.

- - - - -
6f7a6423 by Roger Shimizu at 2018-09-29T01:44:37+09:00
d/patches: Cherry-pick upstream patch to update Tor Browser Developers public key

- - - - -
d03ef42e by Roger Shimizu at 2018-09-29T01:45:32+09:00
Prepare to release 0.2.9-6

- - - - -
3cd8aeb0 by intrigeri at 2018-10-06T05:49:58+00:00
AppArmor: allow Web Content processes to read profile.ini and the updates' "updater" file.

Otherwise restarting after updating Tor Browser is broken.

- - - - -
a27237a9 by Rohan "HEXcube" Villoth at 2018-10-06T14:18:40+05:30
Update README.md to use the newer apt command

5 years back Debian introduced apt as the new “pleasant for end users” tool over apt-get. The newer apt command works on all currently supported Ubuntu and Debian releases. See https://itsfoss.com/apt-vs-apt-get-difference/
- - - - -
ab21c934 by Roger Shimizu at 2018-11-01T00:45:41+09:00
Merge branch 'debian/experimental' into debian/sid

- - - - -
a7fbc931 by Roger Shimizu at 2018-11-01T00:48:04+09:00
Prepare to release 0.3.1-1

- - - - -
9e89ca80 by Roger Shimizu at 2018-11-02T00:15:28+09:00
d/control: Remove Suggests for python-pygame

Closes: #912490

- - - - -
3b5a0352 by Roger Shimizu at 2018-11-11T00:01:20+09:00
d/patches: Add translation patches from pull-request of upstream

Translation:
- hu: https://github.com/micahflee/torbrowser-launcher/pull/359
- da: https://github.com/micahflee/torbrowser-launcher/pull/364
- sv: https://github.com/micahflee/torbrowser-launcher/pull/377

- - - - -
67c75839 by Roger Shimizu at 2018-11-11T00:56:41+09:00
d/patches: Add patch 0008 to remove mention of modem sound in docs & po

Thanks to Paul Wise for the information.

Closes: #913151

- - - - -
fb1bad4d by Roger Shimizu at 2018-11-11T01:08:56+09:00
d/patches: Cherry-pick 2 new appamor patch from pull-request of upstream

[1b2e6aa] AppArmor: allow Web Content processes to check
          the update status.
[3cd8aeb] AppArmor: allow Web Content processes to read
          profile.ini and the updates' "updater" file.

Thanks to intrigeri for the patches, and Diederik de Haas & Shirish
Agarwal for the bug report.

Closes: #910827, #913366

- - - - -
d3bddcea by Roger Shimizu at 2018-11-13T00:56:13+09:00
d/patches: Revert [b828bdf] to fix detecting system locale

Closes: #753173

- - - - -
0795e719 by Roger Shimizu at 2018-11-17T19:15:20+09:00
Prepare to release 0.3.1-2

- - - - -
b2ba5b44 by intrigeri at 2018-12-15T10:01:29+00:00
AppArmor: allow Web Content processes to create .parentwritetest.

Otherwise restarting after updating Tor Browser is broken.

- - - - -
326669f1 by Micah Lee at 2019-01-04T16:09:17-08:00
Add warning about errors to readme, and update screenshot

- - - - -
c5d37c0d by intrigeri at 2019-03-31T14:55:24+00:00
AppArmor: drop the profile dedicated to Web Content processes.

Before Firefox 60, Web Content processes were instances of a dedicated
binary (plugin-container). But since Firefox 60, the Web Content processes are
instances of the very same executable as the parent Firefox process,
which makes it impossible to apply a different AppArmor policy to:

 - Web Content processes, that should ideally be more strictly confined

 - the new parent Firefox process that's spawned while restarting
   during a self-upgrade of Tor Browser

And indeed, we had to drop this distinction with commit
678d083491ceba5201d96b514173890944928540.

As a result, the new parent Firefox process that's spawned while restarting
during a self-upgrade of Tor Browser runs under the torbrowser_plugin_container
profile, i.e. more strictly confined than it should be, which breaks all kinds
of things.

A Firefox release manager tells me there's no plan to give Web Content processes
a dedicated binary again; let's give up and go back to confining the entire
browser under one single AppArmor profile, and rely on Firefox' own sandboxing
systems to protect itself against rogue Web Content processes.

- - - - -
8a02a09f by intrigeri at 2019-03-31T15:07:02+00:00
AppArmor: silence denial logs for dconf access.

- - - - -
aab280fe by intrigeri at 2019-03-31T15:36:57+00:00
AppArmor: grant permissions needed for audio support.

It's 2019. Users want to watch videos in Tor Browser. Having to edit files and
run commands as root is not a realistic expectation for Tor Browser users..

- - - - -
af427c1d by marieismywaifu at 2019-07-04T13:01:21+00:00
Use non-vulnerable key server
- - - - -
a52b5a58 by intrigeri at 2019-07-19T20:59:47+00:00
Merge pull request #396 from intrigeri/apparmor-drop-plugin-container-profile

AppArmor: drop plugin container profile and allow audio
- - - - -
3d151fe2 by Micah Lee at 2019-07-19T17:25:18-07:00
Merge pull request #402 from marieismywaifu/patch-1

Use non-vulnerable key server
- - - - -
abaf8981 by Micah Lee at 2019-07-19T17:25:48-07:00
Merge pull request #370 from HEXcube/patch-1

Update README.md to use the newer apt command
- - - - -
6a5507a9 by Micah Lee at 2019-07-19T17:43:06-07:00
Version bump to 0.1.2, updated changelog, add new screenshot, and update logo

- - - - -
d6343012 by Micah Lee at 2019-07-19T17:49:17-07:00
Remove sks keyserver CA, and also remove unnecessary keyserver options

- - - - -
88e7cb28 by Roger Shimizu at 2019-07-27T01:14:27-03:00
Merge tag 'v0.3.2' into debian/sid

Version 0.3.2

- - - - -
1697639d by Roger Shimizu at 2019-08-07T01:40:52+09:00
Prepare to release 0.3.2-1

- - - - -
c4c1d912 by intrigeri at 2019-08-07T08:13:59+00:00
Don't try to install the obsolete torbrowser.Browser.plugin-container via dh_apparmor.

Without this change, the build output includes:

  cp: cannot stat 'apparmor/torbrowser.Browser.plugin-container': No such file or directory

- - - - -
9fdce2a5 by Roger Shimizu at 2019-08-17T13:17:12+09:00
Remove the obsolete appamor profile: torbrowser.Browser.plugin-container

- - - - -
07ca1cb1 by Roger Shimizu at 2019-08-22T02:06:21+09:00
Prepare to release 0.3.2-2

- - - - -
23e2d9cf by Roger Shimizu at 2019-08-25T00:27:30+09:00
d/patches: Add back patch origin

Patch origin is from git log.

- - - - -
59c1b2da by Roger Shimizu at 2019-11-20T00:43:23+09:00
d/patches: Backports a few patches from upstream

[0bd4779] pt_BR translation
[f12222d] pt_BR translation
[88046fb] Update French translation
[0b78aea] AppArmor: allow new path for the Firefox 68 IPC
[73fc84b] AppArmor: Pass the environment to Firefox content processes
[b8a13f9] AppArmor: allow running the Firefox updater from its new path

Closes: #942901

- - - - -
57277301 by Roger Shimizu at 2019-11-21T00:32:41+09:00
d/changelog: Create entry for 0.3.2-3

- - - - -
fffb55b3 by Roger Shimizu at 2019-11-21T01:49:28+09:00
d/patches: Cherry-pick a patch to fix FTBFS issue

https://github.com/micahflee/torbrowser-launcher/pull/444

This also introduces another change:
  debian/control: Add python3-distro to Build-Depends.

Thanks to Carl Joseph Hirner III.

- - - - -
57cc75de by Roger Shimizu at 2019-11-21T02:01:05+09:00
Prepare to release 0.3.2-3

- - - - -
552dc267 by Roger Shimizu at 2019-11-24T12:55:30+09:00
d/tests: Add a simple test command

- - - - -
d5dbf142 by Roger Shimizu at 2019-11-24T13:38:59+09:00
d/control: Add Rules-Requires-Root: no

- - - - -
d918bb4d by Roger Shimizu at 2019-11-28T00:24:07+09:00
d/copyright: Merge MIT with Expat license

- - - - -
9e713120 by Roger Shimizu at 2019-11-28T00:30:04+09:00
Add debian/upstream/metadata

- - - - -
04bd7e37 by Roger Shimizu at 2019-11-28T00:37:10+09:00
Prepare to release 0.3.2-4

- - - - -
21b06ea8 by Roger Shimizu at 2020-01-05T22:10:48+09:00
d/maintscript: Remove two rm_conffile lines

- Move from torbrowser-launcher.maintscript to maintscript.
- The following files are still shipped by this package, so remove them
  from rm_conffile line:
    /etc/apparmor.d/local/torbrowser.Browser.firefox
    /etc/apparmor.d/local/torbrowser.Tor.tor

- - - - -
0b71b7d4 by Roger Shimizu at 2020-01-05T22:23:25+09:00
d/manpages: Move from torbrowser-launcher.manpages to manpages

- - - - -
1136ea4b by Roger Shimizu at 2020-01-05T22:51:19+09:00
d/rules: Remove copying apparmor profile

Apparmor profile copying is handled by setup.py

- - - - -
6b234fe6 by Roger Shimizu at 2020-01-05T22:59:29+09:00
d/preinst: Remove old apparmor profiles shipped not as conffile before

Below apparmor profiles is to be removed if the checksum matches, which
means without user modification:
  /etc/apparmor.d/local/torbrowser.Browser.firefox
  /etc/apparmor.d/local/torbrowser.Tor.tor

Closes: #934119

- - - - -
240db263 by Roger Shimizu at 2020-01-06T01:07:36+09:00
Prepare to release 0.3.2-5

- - - - -
a0aead1b by Roger Shimizu at 2020-01-08T00:51:58+09:00
Do not ship local apparmor profile as conffile

* debian/rules:
  - Remove override_dh_auto_test, it seems fine without it.
  - Add override_dh_auto_install, to exclude local apparmor profile
    from shipping as conffile nor normal file.
* debian/preinst:
  - Create dummy local apparmor profile if it's nonexisting.

Closes: #934119

- - - - -
bb599c04 by Roger Shimizu at 2020-01-08T00:57:39+09:00
d/preinst: Update the commit SHA-1

- - - - -
9ca54226 by Roger Shimizu at 2020-01-20T01:06:01+09:00
Prepare to release 0.3.2-6

- - - - -
0eb21a22 by Roger Shimizu at 2020-01-26T14:25:13+09:00
Prepare to release 0.3.2-7

debian/rules:
- Skip test for i386, since gpgme is broken on 32bit system.

- - - - -
01a5e33a by Roger Shimizu at 2020-02-05T01:28:24+09:00
d/rules: Revert the workaround for skipping test on i386

- - - - -
3052e657 by Birger Schacht at 2020-04-04T18:18:50+02:00
Add AppArmor patch to allow U2F devices

- - - - -
2f63d83d by Roger Shimizu at 2020-04-08T16:23:52+00:00
Merge branch '944821-AppArmor-Allow-U2F-devices' into 'debian/sid'

Add AppArmor patch to allow U2F devices

See merge request pkg-privacy-team/torbrowser-launcher!1
- - - - -
cb56b766 by Roger Shimizu at 2020-04-09T02:28:57+09:00
d/changelog: Add note to the last merge from salsa

- - - - -
99826515 by Roger Shimizu at 2020-04-12T16:30:00+09:00
d/NEWS: rename from NEWS.Debian

- - - - -
ed6d8b30 by Roger Shimizu at 2020-04-12T16:30:34+09:00
Prepare to release 0.3.2-8

- - - - -
445bb485 by Roger Shimizu at 2020-04-12T16:46:35+09:00
test

- - - - -
bb60c727 by Roger Shimizu at 2020-04-18T16:47:10+09:00
d/patches: Refresh patches and amend 0017 patch to add more description

Thanks to intrigeri's review and help.

Closes: #913104

- - - - -
d3518348 by Roger Shimizu at 2020-04-18T16:53:22+09:00
d/rules: Minor fix for FTBFS on ubuntu

Closes: #958063

- - - - -
30f4b7ab by Roger Shimizu at 2020-04-18T17:33:13+09:00
d/control: Bump debhelper and policy version

Also remove debian/compat accordingly.

- - - - -
559b13b7 by Roger Shimizu at 2020-04-18T17:38:14+09:00
Prepare to release 0.3.2-9

- - - - -
70b9bc85 by Roger Shimizu at 2020-04-26T00:00:33+09:00
d/patches: Cherry-pick patch 0017 to fix the locale issue for python

Also remove 0008 patch, which conflicts with the fix.

Closes: #943922

- - - - -
309b512e by Roger Shimizu at 2020-04-26T19:41:38+09:00
d/patches: Add patch 0018

Fix use case that enforce install of EN version on non-EN user session.

Closes: #842021

- - - - -
af95b278 by Roger Shimizu at 2020-04-26T23:26:44+09:00
d/patches: Cherry-pick patch 0019 - 0025 patch from github pull request

Add several translation po.

- - - - -
e5ef4100 by Roger Shimizu at 2020-04-26T23:27:41+09:00
Prepare to release 0.3.2-10

- - - - -
5cd493c8 by Debian Janitor at 2020-04-26T19:04:50+00:00
Set upstream metadata fields: Bug-Submit.

Fixes: lintian: upstream-metadata-missing-bug-tracking
See-also: https://lintian.debian.org/tags/upstream-metadata-missing-bug-tracking.html

- - - - -
d567b540 by Debian Janitor at 2020-04-26T19:05:32+00:00
Fix field name typos in debian/copyright.

Fixes: lintian: field-name-typo-dep5-copyright
See-also: https://lintian.debian.org/tags/field-name-typo-dep5-copyright.html

- - - - -
6af79008 by Debian Janitor at 2020-04-26T19:06:20+00:00
Remove obsolete fields Contact, Name from debian/upstream/metadata (already present in machine-readable debian/copyright).
- - - - -
1536f22d by Roger Shimizu at 2020-04-29T14:26:03+00:00
Merge branch 'lintian-fixes' into 'debian/sid'

Fix some issues reported by lintian

See merge request pkg-privacy-team/torbrowser-launcher!2
- - - - -
c6d4fb10 by Roger Shimizu at 2020-05-05T21:19:42+09:00
d/patches: Add patch to append the apparmor rule for tbb fonts path

Thanks to Santiago R.R.

Closes: #959388

- - - - -
a58f2eee by Roger Shimizu at 2020-05-05T21:19:42+09:00
Add patch of apparmor to support obfs-meek

- - - - -
f153d25e by Roger Shimizu at 2020-05-16T20:33:55+09:00
Prepare to release 0.3.2-11

- - - - -
ee258471 by Roger Shimizu at 2020-05-16T20:51:41+09:00
d/changelog: Remove duplicated entry

- - - - -
ab8e9c19 by Roger Shimizu at 2020-09-08T00:14:49+09:00
d/patches: Add two patches from upstream pull-request

- Add patch to update Tor Browser Developers public key.
- Add patch to update AppArmor rule from upstream.

- - - - -
699d8f58 by Roger Shimizu at 2020-09-08T01:34:54+09:00
Prepare to release 0.3.2-12

- - - - -
72b87f50 by Roger Shimizu at 2020-09-08T21:56:44+09:00
Update TBB signing key by removing spammed sigs

And clean the key, and export to text armor by command:
  TEMP=temp_gpg
  mkdir -p $TEMP
  chmod 700 $TEMP
  gpg --homedir $TEMP -v --import new.key
  gpg --homedir $TEMP -a --export-options export-minimal --export '4E2C6E8793298290' > share/torbrowser-launcher/tor-browser-developers.asc
  rm -rf $TEMP

- - - - -
f83349ae by Roger Shimizu at 2020-09-09T01:47:28+09:00
d/patches: Add patch to use /usr/bin/gpg instead of /usr/bin/gpg2

Closes: #969901

- - - - -
68908ebd by Roger Shimizu at 2020-09-09T02:04:29+09:00
d/control: Add gnupg as depends

- - - - -
92bf2ef1 by Roger Shimizu at 2020-09-09T02:04:53+09:00
Prepare to release 0.3.2-13

- - - - -
fa3115fb by Roger Shimizu at 2020-09-24T00:11:26+09:00
d/patches: Add patch 0031 to improve version string comparison

Closes: #970768

- - - - -
8d3547ec by Roger Shimizu at 2020-09-24T00:28:42+09:00
Prepare to release 0.3.2-14~exp1 to experimental

- - - - -


30 changed files:

- CHANGELOG.md
- README.md
- − apparmor/local/torbrowser.Browser.plugin-container
- apparmor/torbrowser.Browser.firefox
- − apparmor/torbrowser.Browser.plugin-container
- debian/NEWS.Debian → debian/NEWS
- debian/changelog
- − debian/compat
- debian/control
- debian/copyright
- debian/torbrowser-launcher.maintscript → debian/maintscript
- debian/torbrowser-launcher.manpages → debian/manpages
- − debian/patches/0001-Remove-apparmor-local-path-from-setup.py.patch
- debian/patches/0002-show-gui-only-if-tbb-not-installed.patch → debian/patches/0001-show-gui-only-if-tbb-not-installed.patch
- debian/patches/0003-remove-double-common-assignment.patch → debian/patches/0002-remove-double-common-assignment.patch
- + debian/patches/0003-Update-Hungarian-translation.patch
- + debian/patches/0004-Create-da.po.patch
- + debian/patches/0005-Fix-two-spelling-errors.patch
- + debian/patches/0006-Add-Swedish-translation.patch
- + debian/patches/0007-Remove-mention-of-modem-sound-in-docs-and-translatio.patch
- + debian/patches/0008-pt_BR-translation.patch
- + debian/patches/0009-pt_BR-translation.patch
- + debian/patches/0010-Update-French-translation.patch
- + debian/patches/0011-AppArmor-allow-new-path-for-the-Firefox-68-IPC.patch
- + debian/patches/0012-AppArmor-Pass-the-environment-to-Firefox-content-pro.patch
- + debian/patches/0013-AppArmor-allow-running-the-Firefox-updater-from-its-.patch
- + debian/patches/0014-Update-setup.py.patch
- + debian/patches/0015-AppArmor-allow-u2f-devices.patch
- + debian/patches/0016-Silence-the-deny-apparmor-log-from-lsb_release.patch
- + debian/patches/0017-Set-language-from-LC_MESSAGES-not-LC_CTYPE.patch


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/-/compare/b724de3b0c33caa7e49e5adeb4d6290e036bb37f...8d3547ec7ce0e9106641fac6f7c55e0bcd4df2ed

-- 
View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/-/compare/b724de3b0c33caa7e49e5adeb4d6290e036bb37f...8d3547ec7ce0e9106641fac6f7c55e0bcd4df2ed
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-commits/attachments/20200923/d280487b/attachment-0001.html>


More information about the Pkg-privacy-commits mailing list