[Pkg-privacy-commits] [Git][pkg-privacy-team/torbrowser-launcher][debian/sid] 2 commits: d/patches: Cherry-pick two upstream commits to fix appamor profile

[Roger Shimizu]

Roger Shimizu pushed to branch debian/sid at Privacy Maintainers / torbrowser-launcher


Commits:
7ff9b5bd by Roger Shimizu at 2018-09-09T07:29:09Z
d/patches: Cherry-pick two upstream commits to fix appamor profile

Fix appamor profile to support Tor Browser 8.0a9

Closes: #908068

- - - - -
6e1b7e18 by Roger Shimizu at 2018-09-09T07:43:19Z
Prepare to release 0.2.9-4

- - - - -


4 changed files:

- debian/changelog
- + debian/patches/0017-AppArmor-allow-Firefox-to-read-usr-share-glib-2.0-sc.patch
- + debian/patches/0018-AppArmor-adjust-Firefox-binary-path-for-Tor-Browser-.patch
- debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,16 @@
+torbrowser-launcher (0.2.9-4) unstable; urgency=medium
+
+  [ Ulrike Uhlig ]
+  * debian/control:
+    - Remove myself from uploaders.
+
+  [ Roger Shimizu ]
+  * debian/patches:
+    - Cherry-pick two upstream commits to fix appamor profile for
+      Tor Browser 8.0a9 (Closes: #908068).
+
+ -- Roger Shimizu <rosh at debian.org>  Sun, 09 Sep 2018 16:43:19 +0900
+
 torbrowser-launcher (0.2.9-3) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/patches/0017-AppArmor-allow-Firefox-to-read-usr-share-glib-2.0-sc.patch
=====================================
@@ -0,0 +1,24 @@
+From: intrigeri <intrigeri at boum.org>
+Date: Tue, 3 Jul 2018 15:43:10 +0000
+Subject: AppArmor: allow Firefox to read
+ /usr/share/glib-2.0/schemas/gschemas.compiled.
+
+Otherwise, Tor Browser 8.0a9 crashes when clicking "Save Page As".
+
+(cherry picked from commit ad95bbda69045f3c9ace241939ee9e1fccc16ac8)
+---
+ apparmor/torbrowser.Browser.firefox | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
+index d0aded9..c145d06 100644
+--- a/apparmor/torbrowser.Browser.firefox
++++ b/apparmor/torbrowser.Browser.firefox
+@@ -68,6 +68,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
+   /etc/mime.types r,
+ 
+   /usr/share/ r,
++  /usr/share/glib-2.0/schemas/gschemas.compiled r,
+   /usr/share/mime/ r,
+   /usr/share/themes/ r,
+   /usr/share/applications/** rk,


=====================================
debian/patches/0018-AppArmor-adjust-Firefox-binary-path-for-Tor-Browser-.patch
=====================================
@@ -0,0 +1,32 @@
+From: intrigeri <intrigeri at boum.org>
+Date: Sat, 18 Aug 2018 19:23:13 +0000
+Subject: AppArmor: adjust Firefox binary path for Tor Browser 8.0a10.
+
+At this point it seems unlikely that the develop branch will be released
+before Tor Browser 8.0 so here we go, let's get ready.
+
+Note that I could have written firefox{,.real} instead, to support both Tor
+Browser 7.5 and 8.0, but then we would have to open the profile more broadly so
+the new shell wrapper installed as "firefox" by Tor Browser 8.0a10 can do its
+job. This does not seem worth the hassle and will be fine as long as this new
+torbrowser-launcher is released approximately at the same time as, or after, Tor
+Browser 8.
+
+(cherry picked from commit a67f026cc14c0a52decda0250890ee776a35f8a1)
+---
+ apparmor/torbrowser.Browser.firefox | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
+index c145d06..69354d1 100644
+--- a/apparmor/torbrowser.Browser.firefox
++++ b/apparmor/torbrowser.Browser.firefox
+@@ -1,7 +1,7 @@
+ #include <tunables/global>
+ #include <tunables/torbrowser>
+ 
+-@{torbrowser_firefox_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox
++@{torbrowser_firefox_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox.real
+ 
+ profile torbrowser_firefox @{torbrowser_firefox_executable} {
+   #include <abstractions/gnome>


=====================================
debian/patches/series
=====================================
@@ -14,3 +14,5 @@
 0014-AppArmor-support-some-of-the-included-pluggable-tran.patch
 0015-AppArmor-remove-boilerplate-from-local-override-file.patch
 0016-Remove-apparmor-local-path-from-setup.py.patch
+0017-AppArmor-allow-Firefox-to-read-usr-share-glib-2.0-sc.patch
+0018-AppArmor-adjust-Firefox-binary-path-for-Tor-Browser-.patch



View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/compare/5648d7d884cc20066684c59bb0d93f031d3d8a49...6e1b7e180746f815abee1bb1332eef77256db163

-- 
View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/compare/5648d7d884cc20066684c59bb0d93f031d3d8a49...6e1b7e180746f815abee1bb1332eef77256db163
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-commits/attachments/20180909/e22b90b1/attachment-0001.html>