GitLab

Will-Fix: #10112

The 'testing' one is not an appropriate base branch, since it's not meant
to continuously be building fine.

The old one doesn't apply on top of testing's torbrowser-launcher anymore.
Our Jenkins job didn't warn us in advance because the changes made in Debian
were made with quilt patches, and that job only tests Git merging.

cp + rm == mv in this case. Also let's make that section separate from
the "Remove unwanted" one since it does something else. It's important
that we first clean it up from the unwanted Wikipedia plugin from the
Tor Browser.

This will make the generation deterministic, which is important for a
smaller IUK delta, and reproducible builds. Inspired by patch provided
on Debian bug #783933.

The new (ESR38) search bar only shows icons, which is problematic when
we want to include several locales of some search engine at the same
time, like Wikipedia (we want to include English in non-English
locales). Now we also generate localized Wikipedia search engine
plugin icons, which has an indicator of which language is used (by
language code) which should mitigate this.

Will-fix: #9955

Fix-committed: #5623
Fix-committed: #9886

It was introduced (#9381) for reasons that ended up being wrong (#9594).

Here, we also remove amd64 APT sources and dpkg's support for amd64 as a foreign
architecture. We'll need them again when we want to ship Linux 4.x, but once
we're there we can perhaps enable amd64 sources only for selected APT
repositories, to avoid re-introducing #9381.

Reverts:
e9d2e345
181c6d26
e1d331aa

Will-fix: #9748

These profiles come from the apparmor-profiles package, and we don't ship the
corresponding executables. The goal here is to avoid increasing boot time.
Note that they are installed in complain mode by default anyway.

Will-fix: #9757

Fix-committed: #7525

Refs: #7525

By default, it uses /tmp/, but we want to deny it access to there.

Will-fix: #9558

Will-fix: #9558

In the past, we had "exit 1" in there. This problem was identified (#8571) and
fixed (commit 1b46b5b1) in Tails 1.2.3, by replacing this "exit 1"
with "return 1".

Then, while working on another, minor problem (#8687), the "exit 1" was
reintroduced (commit 4ea050ab) in Tails 1.3.2, presumably because we pasted
sample code from the ticket, that had been drafted *before* #8571 was fixed.
Sadly, nobody noticed in time.

I cannot easily reproduce the bug on Tails/Wheezy (because I lack hardware whose
MAC address fails to be spoofed there), but I could reproduce it with
Tails/Jessie ("thanks" to the fact we're currently shipping the buggy 'wl'
kernel module in there).

Will-Fix: #9531

I.e. hide the same things we hide in the Tor Browser. These features
wouldn't work in the I2P Browser, and would encourage unsupported
usage of the Unsafe Browser.

... like we are for the I2P Browser.

It shouldn't be able to fetch those URLs, but it shouldn't even try.

Thanks, kytv, for providing a patch!