[Pkg-privacy-commits] [Git][pkg-privacy-team/torbrowser-launcher][debian/sid] 2 commits: Add patch of apparmor to support obfs-meek

[Roger Shimizu]

Roger Shimizu pushed to branch debian/sid at Privacy Maintainers / torbrowser-launcher


Commits:
a58f2eee by Roger Shimizu at 2020-05-05T21:19:42+09:00
Add patch of apparmor to support obfs-meek

- - - - -
f153d25e by Roger Shimizu at 2020-05-16T20:33:55+09:00
Prepare to release 0.3.2-11

- - - - -


3 changed files:

- debian/changelog
- + debian/patches/0027-AppArmor-Support-pluggable-transports-especially-mee.patch
- debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,5 +1,6 @@
-torbrowser-launcher (0.3.2-11) UNRELEASED; urgency=medium
+torbrowser-launcher (0.3.2-11) unstable; urgency=medium
 
+  [ Debian Janitor ]
   * Set upstream metadata fields: Bug-Submit.
   * Fix field name typos in debian/copyright.
   * Remove obsolete fields Contact, Name from debian/upstream/metadata
@@ -8,7 +9,13 @@ torbrowser-launcher (0.3.2-11) UNRELEASED; urgency=medium
     - Add patch to append the apparmor rule for tbb fonts path.
       Thanks to Santiago R.R. (Closes: #959388).
 
- -- Debian Janitor <janitor at jelmer.uk>  Sun, 26 Apr 2020 19:04:30 +0000
+  [ Roger Shimizu ]
+  * debian/patches:
+    - Add patch to append the apparmor rule for tbb fonts path.
+      Thanks to Santiago R.R. (Closes: #959388).
+    - Add patch of apparmor to support obfs-meek.
+
+ -- Roger Shimizu <rosh at debian.org>  Sat, 16 May 2020 20:33:55 +0900
 
 torbrowser-launcher (0.3.2-10) unstable; urgency=medium
 


=====================================
debian/patches/0027-AppArmor-Support-pluggable-transports-especially-mee.patch
=====================================
@@ -0,0 +1,31 @@
+From: Roger Shimizu <rosh at debian.org>
+Date: Wed, 6 May 2020 17:01:41 +0900
+Subject: AppArmor: Support pluggable transports especially meek
+Origin: https://github.com/micahflee/torbrowser-launcher/pull/469
+
+---
+ apparmor/torbrowser.Tor.tor | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/apparmor/torbrowser.Tor.tor b/apparmor/torbrowser.Tor.tor
+index b0bfce0..f5b8177 100644
+--- a/apparmor/torbrowser.Tor.tor
++++ b/apparmor/torbrowser.Tor.tor
+@@ -24,6 +24,7 @@ profile torbrowser_tor @{torbrowser_tor_executable} {
+   # Support some of the included pluggable transports
+   owner @{torbrowser_home_dir}/TorBrowser/Tor/PluggableTransports/** rix,
+   @{PROC}/sys/net/core/somaxconn r,
++  #include <abstractions/ssl_certs>
+ 
+   # Silence file_inherit logs
+   deny @{torbrowser_home_dir}/{browser/,}omni.ja r,
+@@ -31,6 +32,9 @@ profile torbrowser_tor @{torbrowser_tor_executable} {
+   deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/.parentlock rw,
+   deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/extensions/*.xpi r,
+   deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/startupCache/* r,
++  # Silence logs from included pluggable transports
++  deny /etc/hosts r,
++  deny /etc/services r,
+ 
+   @{PROC}/sys/kernel/random/uuid r,
+   /sys/devices/system/cpu/ r,


=====================================
debian/patches/series
=====================================
@@ -24,3 +24,4 @@
 0024-Added-hr.po.patch
 0025-Add-Chinese-Traditional-translation.patch
 0026-torbrowser-fails-to-start-due-to-lacking-fonts-entry.patch
+0027-AppArmor-Support-pluggable-transports-especially-mee.patch



View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/-/compare/c6d4fb10be647f482d1b53ec6feedae644ce58af...f153d25e325fd612ff1e177d3f05495f950fc512

-- 
View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/-/compare/c6d4fb10be647f482d1b53ec6feedae644ce58af...f153d25e325fd612ff1e177d3f05495f950fc512
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-commits/attachments/20200516/abff2b97/attachment-0001.html>