[Pkg-privacy-commits] [Git][pkg-privacy-team/torbrowser-launcher][debian/stretch-backports-sloppy] 16 commits: Set upstream metadata fields: Bug-Submit.

Roger Shimizu rosh at debian.org
Mon Sep 7 18:22:27 BST 2020 


Roger Shimizu pushed to branch debian/stretch-backports-sloppy at Privacy Maintainers / torbrowser-launcher


Commits:
5cd493c8 by Debian Janitor at 2020-04-26T19:04:50+00:00
Set upstream metadata fields: Bug-Submit.

Fixes: lintian: upstream-metadata-missing-bug-tracking
See-also: https://lintian.debian.org/tags/upstream-metadata-missing-bug-tracking.html

- - - - -
d567b540 by Debian Janitor at 2020-04-26T19:05:32+00:00
Fix field name typos in debian/copyright.

Fixes: lintian: field-name-typo-dep5-copyright
See-also: https://lintian.debian.org/tags/field-name-typo-dep5-copyright.html

- - - - -
6af79008 by Debian Janitor at 2020-04-26T19:06:20+00:00
Remove obsolete fields Contact, Name from debian/upstream/metadata (already present in machine-readable debian/copyright).
- - - - -
1536f22d by Roger Shimizu at 2020-04-29T14:26:03+00:00
Merge branch 'lintian-fixes' into 'debian/sid'

Fix some issues reported by lintian

See merge request pkg-privacy-team/torbrowser-launcher!2
- - - - -
c6d4fb10 by Roger Shimizu at 2020-05-05T21:19:42+09:00
d/patches: Add patch to append the apparmor rule for tbb fonts path

Thanks to Santiago R.R.

Closes: #959388

- - - - -
a58f2eee by Roger Shimizu at 2020-05-05T21:19:42+09:00
Add patch of apparmor to support obfs-meek

- - - - -
f153d25e by Roger Shimizu at 2020-05-16T20:33:55+09:00
Prepare to release 0.3.2-11

- - - - -
ee258471 by Roger Shimizu at 2020-05-16T20:51:41+09:00
d/changelog: Remove duplicated entry

- - - - -
c8295d17 by Roger Shimizu at 2020-05-16T20:53:38+09:00
Merge branch 'debian/sid' into debian/buster-backports

- - - - -
5362edd0 by Roger Shimizu at 2020-05-16T20:54:05+09:00
Rebuild as 0.3.2-11~bpo10+1 for buster-backports

- - - - -
940c7220 by Roger Shimizu at 2020-05-16T20:54:34+09:00
Rebuild as 0.3.2-11~bpo9+1 for stretch-backports-sloppy

- - - - -
ab8e9c19 by Roger Shimizu at 2020-09-08T00:14:49+09:00
d/patches: Add two patches from upstream pull-request

- Add patch to update Tor Browser Developers public key.
- Add patch to update AppArmor rule from upstream.

- - - - -
699d8f58 by Roger Shimizu at 2020-09-08T01:34:54+09:00
Prepare to release 0.3.2-12

- - - - -
c386f83a by Roger Shimizu at 2020-09-08T01:56:45+09:00
Merge tag 'debian/0.3.2-12' into debian/buster-backports

- - - - -
81deac2f by Roger Shimizu at 2020-09-08T01:57:06+09:00
Rebuild as 0.3.2-12~bpo10+1 for buster-backports

- - - - -
872a3541 by Roger Shimizu at 2020-09-08T02:09:53+09:00
Rebuild as 0.3.2-12~bpo9+1 for stretch-backports-sloppy

- - - - -


8 changed files:

- debian/changelog
- debian/copyright
- + debian/patches/0026-torbrowser-fails-to-start-due-to-lacking-fonts-entry.patch
- + debian/patches/0027-AppArmor-Support-pluggable-transports-especially-mee.patch
- + debian/patches/0028-Update-Tor-Browser-Developers-public-key-481.patch
- + debian/patches/0029-AppArmor-silence-sys_admin-capability.patch
- debian/patches/series
- debian/upstream/metadata


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,51 @@
+torbrowser-launcher (0.3.2-12~bpo9+1) stretch-backports-sloppy; urgency=medium
+
+  * Rebuild for stretch-backports-sloppy.
+
+ -- Roger Shimizu <rosh at debian.org>  Tue, 08 Sep 2020 02:09:53 +0900
+
+torbrowser-launcher (0.3.2-12~bpo10+1) buster-backports; urgency=medium
+
+  * Rebuild for buster-backports.
+
+ -- Roger Shimizu <rosh at debian.org>  Tue, 08 Sep 2020 01:57:06 +0900
+
+torbrowser-launcher (0.3.2-12) unstable; urgency=high
+
+  * debian/patches:
+    - Add patch to update Tor Browser Developers public key.
+    - Add patch to update AppArmor rule from upstream.
+
+ -- Roger Shimizu <rosh at debian.org>  Tue, 08 Sep 2020 01:34:54 +0900
+
+torbrowser-launcher (0.3.2-11~bpo9+1) stretch-backports-sloppy; urgency=medium
+
+  * Rebuild for stretch-backports-sloppy.
+
+ -- Roger Shimizu <rosh at debian.org>  Sat, 16 May 2020 20:54:33 +0900
+
+torbrowser-launcher (0.3.2-11~bpo10+1) buster-backports; urgency=medium
+
+  * Rebuild for buster-backports.
+
+ -- Roger Shimizu <rosh at debian.org>  Sat, 16 May 2020 20:54:05 +0900
+
+torbrowser-launcher (0.3.2-11) unstable; urgency=medium
+
+  [ Debian Janitor ]
+  * Set upstream metadata fields: Bug-Submit.
+  * Fix field name typos in debian/copyright.
+  * Remove obsolete fields Contact, Name from debian/upstream/metadata
+    (already present in machine-readable debian/copyright).
+
+  [ Roger Shimizu ]
+  * debian/patches:
+    - Add patch to append the apparmor rule for tbb fonts path.
+      Thanks to Santiago R.R. (Closes: #959388).
+    - Add patch of apparmor to support obfs-meek.
+
+ -- Roger Shimizu <rosh at debian.org>  Sat, 16 May 2020 20:33:55 +0900
+
 torbrowser-launcher (0.3.2-10~bpo9+1) stretch-backports-sloppy; urgency=medium
 
   * Rebuild for stretch-backports-sloppy.


=====================================
debian/copyright
=====================================
@@ -1,8 +1,8 @@
 Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: torbrowser-launcher
-Upstream-contact: micah at micahflee.com
 Source: https://github.com/micahflee/torbrowser-launcher
 Comment: contrib package because it's just a downloader of prebuilt Tor Browser Bundle.
+Upstream-Contact: micah at micahflee.com
 
 Files: *
 Copyright: Copyright (c) 2013-2017 Micah Lee <micah at micahflee.com>


=====================================
debian/patches/0026-torbrowser-fails-to-start-due-to-lacking-fonts-entry.patch
=====================================
@@ -0,0 +1,21 @@
+From: "Santiago R.R" <santiagorr at riseup.net>
+Date: Fri, 1 May 2020 21:47:35 +0200
+Subject: torbrowser fails to start due to lacking fonts/* entry in apparmor
+Origin: https://bugs.debian.org/959388
+
+---
+ apparmor/torbrowser.Browser.firefox | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
+index e7ebddc..ece3159 100644
+--- a/apparmor/torbrowser.Browser.firefox
++++ b/apparmor/torbrowser.Browser.firefox
+@@ -68,6 +68,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
+   owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/profiles.ini r,
+   owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/{,**} rwk,
+   owner @{torbrowser_home_dir}/TorBrowser/Data/fontconfig/fonts.conf r,
++  owner @{torbrowser_home_dir}/fonts/* l,
+   owner @{torbrowser_home_dir}/TorBrowser/Tor/tor px,
+   owner @{torbrowser_home_dir}/TorBrowser/Tor/ r,
+   owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so mr,


=====================================
debian/patches/0027-AppArmor-Support-pluggable-transports-especially-mee.patch
=====================================
@@ -0,0 +1,31 @@
+From: Roger Shimizu <rosh at debian.org>
+Date: Wed, 6 May 2020 17:01:41 +0900
+Subject: AppArmor: Support pluggable transports especially meek
+Origin: https://github.com/micahflee/torbrowser-launcher/pull/469
+
+---
+ apparmor/torbrowser.Tor.tor | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/apparmor/torbrowser.Tor.tor b/apparmor/torbrowser.Tor.tor
+index b0bfce0..f5b8177 100644
+--- a/apparmor/torbrowser.Tor.tor
++++ b/apparmor/torbrowser.Tor.tor
+@@ -24,6 +24,7 @@ profile torbrowser_tor @{torbrowser_tor_executable} {
+   # Support some of the included pluggable transports
+   owner @{torbrowser_home_dir}/TorBrowser/Tor/PluggableTransports/** rix,
+   @{PROC}/sys/net/core/somaxconn r,
++  #include <abstractions/ssl_certs>
+ 
+   # Silence file_inherit logs
+   deny @{torbrowser_home_dir}/{browser/,}omni.ja r,
+@@ -31,6 +32,9 @@ profile torbrowser_tor @{torbrowser_tor_executable} {
+   deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/.parentlock rw,
+   deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/extensions/*.xpi r,
+   deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/startupCache/* r,
++  # Silence logs from included pluggable transports
++  deny /etc/hosts r,
++  deny /etc/services r,
+ 
+   @{PROC}/sys/kernel/random/uuid r,
+   /sys/devices/system/cpu/ r,


=====================================
debian/patches/0028-Update-Tor-Browser-Developers-public-key-481.patch
=====================================
The diff for this file was not included because it is too large.

=====================================
debian/patches/0029-AppArmor-silence-sys_admin-capability.patch
=====================================
@@ -0,0 +1,25 @@
+From: Jonas Witschel <diabonas at archlinux.org>
+Date: Sun, 12 Jul 2020 20:10:39 +0200
+Subject: AppArmor: silence sys_admin capability
+Origin: https://github.com/micahflee/torbrowser-launcher/pull/479
+
+This permission is unsuccessfully requested during every start of Tor
+Browser 9.5.3, silence it for cleaner logs.
+
+(cherry picked from commit bdfe50b9988c0183c4d98343b43087a0b2dc79cf)
+---
+ apparmor/torbrowser.Browser.firefox | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
+index ece3159..4363cdf 100644
+--- a/apparmor/torbrowser.Browser.firefox
++++ b/apparmor/torbrowser.Browser.firefox
+@@ -124,6 +124,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
+   deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
+   deny /run/user/[0-9]*/dconf/user rw,
+   deny /usr/bin/lsb_release x,
++  deny capability sys_admin,
+ 
+   # Silence denial logs about PulseAudio
+   deny /etc/pulse/client.conf r,


=====================================
debian/patches/series
=====================================
@@ -23,3 +23,7 @@
 0023-Added-de.po.patch
 0024-Added-hr.po.patch
 0025-Add-Chinese-Traditional-translation.patch
+0026-torbrowser-fails-to-start-due-to-lacking-fonts-entry.patch
+0027-AppArmor-Support-pluggable-transports-especially-mee.patch
+0028-Update-Tor-Browser-Developers-public-key-481.patch
+0029-AppArmor-silence-sys_admin-capability.patch


=====================================
debian/upstream/metadata
=====================================
@@ -1,6 +1,5 @@
-Name: torbrowser-launcher
+Bug-Submit: https://github.com/micahflee/torbrowser-launcher/issues/new
 Homepage: https://github.com/micahflee/torbrowser-launcher
 Repository: https://github.com/micahflee/torbrowser-launcher.git
 Repository-Browse: https://github.com/micahflee/torbrowser-launcher
 Bug-Database: https://github.com/micahflee/torbrowser-launcher/issues
-Contact: Micah Lee <micah at micahflee.com>



View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/-/compare/13af5a162c17822fea091dd5fb9089d6938b0fd6...872a3541cf63ba378bf4544270fa7e4e29afa739

-- 
View it on GitLab: https://salsa.debian.org/pkg-privacy-team/torbrowser-launcher/-/compare/13af5a162c17822fea091dd5fb9089d6938b0fd6...872a3541cf63ba378bf4544270fa7e4e29afa739
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-commits/attachments/20200907/96c43f82/attachment-0001.html>

More information about the Pkg-privacy-commits mailing list