Install spellchecker dictionaries for Tor Browser locales than now have a one in Stretch (refs: #15023).

Electrum 3.x instead uses python3-trezor (refs: #15390) and python3-qt5.

This in possible again since commit 8dd945ef.
Refs: #14594.

This reverts commit de15ff9b because this breaks
opening GNOME Settings in Tails 3.6 on some computers (only NVIDIA for now but
perhaps other hardware is affected). I'll come back to #14580 during the Tails
4.0~beta time.

Import current persistence-setup.git's and perl5lib.git's feature/14594-asp-gui branches; accordingly add new package dependencies.

Respectively at commit 85fe743ec9818bb77bb35dc133c019c955d02148
and f10204fa5035ebae6a2e682ede3518c7e3dd245c.

This reverts commit e0b24a21
and ensures we remove python3-setuptools later on.

Otherwise there's a cyclic dependency situation: to install tailslib in
config/chroot_local-hooks/00-install-tailslib we need to install
python3-setuptools, which triggers the APT hook for ASP, which depends on
tailslib to be available already.

Refs: #15370

.egg-info files in /usr/local/lib/python3.*/dist-packages/ are
automatically opened by Python when trying to import a package that
cannot be found. Opening these .egg-info files is currently not
allowed by the AppArmor abstractions/python rules.

 - tails-perl5lib:feature/14594-asp-gui at commit
   5c40ec86a62579573e3ec28e9c651ee1d649295e
 - tails-persistence-setup:feature/14594-asp-gui at commit
   07378a2ba5ed1821f8788adc50937aa14c1fdd67

Refs: #14594

anonym authored Feb 20, 2016 and segfault committed Feb 27, 2018

This library provides nice shell-like facilities, and an easy
interface to calling commandline tools, and so will be highly useful
in our effort to convert shell scripts into python.

Refs: #11198

Refs: #5684

While there's definitely some overlap between pdf-redact-tools and
MAT's mission, the UX and functionality pdf-redact-tools provides
would not really fit in MAT.

It complements MAT functions and is useful to journalists working
with sensitive documents.

refs: #15052

This change is relevant even if we decide to keep Florence: it makes ORCA work
in KeePassX.

This change is relevant even if we decide to keep Florence: it improves
accessibility of:

 * GTK+ 2.0 applications
 * possibly of Qt4 applications as well (see the log about keepassx on
   https://labs.riseup.net/code/issues/8281#note-30)

This change is relevant even if we decide to keep Florence: it improves
accessibility of GTK+ 2.0 applications for users who need this universal access
technology all the time, and might thus prefer GNOME's on-screen keyboard (that
pops up automatically) to Florence (that one has to toggle on/off manually).

We don't use gksu, and it was the only reason we installed
gconf. Removing these packages + deps will not only save quite some
space (30 MiB installed) but will also remove a source of
non-determinism in the filesystem (element order in
/var/lib/gconf/defaults/%gconf-tree-*.xml) which made Tails
unreproducible.

We also remove:

* libgnomevfs2-extra, which was previously used for SSH/FTP support in
  Nautilus, but isn't needed for that any more.

* libgnome2-bin which provides gnome-open. We'll find a replacement
  for that in a later commit.

* Configurations and scripts that become obsolete because of these
  removals.

Will-fix: #12738

On Stretch, vim-nox started pulling ruby and rake in the ISO. I think vim-tiny
would be good enough, and would save a few MiB in the ISO. Those who use vim
more intensively and want another flavour of vim are likely to need persistence
anyway, and can thus install a more featureful vim with the additional software
packages feature.

This reverts commit 56c81e5e.

It's not reliable enough and provides poor UX. Linux memory poisoning
works well enough to get rid of it.

As the debian/changelog for xorg (1:7.7+19) says: "we'd have liked to avoid
installing the setuid Xorg wrapper by default in stretch, but this seems to
break too much still".

This is just a massive 's/Icedove/Thunderbird/' both in terms of
content and filenames. No logic is changed, which should ease
reviewing of this massive commit.

Will-fix: #12242

... by patching the hack applied by the Tor Browser developers.

Will-fix: #11419

Due to this tor bug:

    https://trac.torproject.org/projects/tor/ticket/21892

which makes UNIX socket communication impossible in "bridge mode".

Note that we had to disable `PrivateNetwork=yes` in the systemd unit
file since to make the ControlPort accessible, so the use of tor.sh's
is_tor_working() won't break.