GitLab

Currently translated at 17.7% (11 of 62 strings)

Translation: Tails/wiki/src/news/version_3.14.1.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_3141po/pt/

Currently translated at 39.0% (16 of 41 strings)

Translation: Tails/wiki/src/news/version_3.11.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_311po/it/

8.5.4-build2 was published as 8.5.4 while the Tor Browser import was
being performed. Acknowledge there were no changes between both
versions.

This avoids the need to build and upload Thunderbird packages every now and
then. Instead, we'll need to refresh our patches when they don't apply
as-is anymore.

Current patchset imported from our icedove.git at
commit a3eab1e85558f2c9cf01d332920ac81fea3cd9fd.

sdhci and subdependencies initrd kernel modules loaded to support Heads kexec'ing Tails kernel from sdcard integrity validated iso, permitting Tails to boot from a Read Only sdcard (fromiso). Heads boot device is referred by device/by-uuid (fromiso) to continue Heads kexec boot process from OS initrd loaded modules, prerequisite to continue kernel booting.

This would permit measured boot (on-boot iso integrity validation from Read Only sdcard) on many tamper evident laptop models( RYF x200, QubesOS to be certified x230, x220 and many other laptops using those modules for memory extension slot support).

Linked to this discussion: https://lists.autistici.org/message/20190612.203305.bcc3b98b.en.html
Linked to this Heads ticket: https://github.com/osresearch/heads/issues/581

Not using -buildN as I'm importing the tarballs that were *already*
released, so in this case -buildN does not matter and this information
is not readily available anyway.

Fix-committed: #16780

Some programs expect this, which could lead to hard-to-debug issues
for front desk from users installing such a program.

Refs: #16148

We attempt to completely block it on the netfilter level but we have
seen ICMPv6 "leaks" any way (related to Router Solicitation, refs:
16148) so let's just completely disable.

Without arguments partprobe will scan all devices, and if it
encounters a device it doesn't support (e.g. fake raid-0 arrays) it
will return non-zero, thus aborting Tails' partitioning script,
resulting in an unbootable install.

Will-fix: #16389

To be consistent with other Tails apps (e.g. additional-software).

This reverts commit 2ad4585d.

The "let's disable TopIcons for one release" experiment was done in 3.13.2.
After analyzing the user feedback, sajolida's conclusion is that we
do need TopIcons for OpenPGP Applet.

Avoid new "render" group stealing a GID we have already statically allocated to another group (refs: #16649)

With the systemd 241-1~bpo9+1 → 241-3~bpo9+1 upgrade, udev.postinst
now creates a "render" system group, which shifts GIDs and makes
our devel branch FTBFS.

There is no environment variable UDISKS_PARTITION_LABEL, so the
rule never matched and the unlocked partition didn't have UDISKS_IGNORE set.

All Tails current branches now install onioncircuits 0.6-0.0tails1,
which ships a more current AppArmor profile than the one we
have in our own Git tree.

This extension causes crashes (#11188).

It does not work on Wayland (#8309, #12213) so long-term, we need to remove
it anyway.

So far we've been blocking on the WIP conversion of OpenPGP Applet into a proper
GNOME Shell extension (#8310) but it's no clear whether it's worth the effort.

In order to learn how much our users rely on this extension and — transitively —
on OpenPGP Applet, let's disable this extension for one Tails release. While
TopIcons is disabled by default:

 - Users can still use OpenPGP Applet via the system tray in the bottom
   left corner of the desktop.
 - Users who do need TopIcons for other reasons can enable it again
   with 1 command line.