Commit graph

31 commits

Author SHA1 Message Date
Florian Klink 1efaa03d95 firefoxPackages.tor-browser*, tor-browser-bundle: remove
These are all based on firefox versions with known vulnerabilities
exploited in the wild.

We seriously shouldn't ship this in nixpkgs, especially not for
sensitive applications as the Tor Browser.

`tor-browser-bundle` is just a wrapper around
`firefoxPackages.tor-browser`, so let's remove it too.

`tor-browser-bundle-bin` is the much safer bet, which is individually
downloaded from `dist.torproject.org` and just `patchelf`-ed locally to
work on NixOS.

Co-Authored-By: Alyssa Ross <hi@alyssa.is>
Co-Authored-By: Andreas Rammhold <andreas@rammhold.de>
Co-Authored-By: Graham Christensen <graham@grahamc.com>
2020-01-10 18:34:22 +01:00
volth 08f68313a4 treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
volth 46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
worldofpeace 3f4a353737 treewide: use dontUnpack 2019-07-01 04:23:51 -04:00
volth f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Kai Harries ceee963080 tor-browser-bundle: set default value for XAUTHORITY
XAUTHORITY is not set on systems using wayland. Therefore set a
default value for XAUTHORITY.
2019-06-04 21:07:00 +02:00
Will Dietz 63a13cce7c tor-browser-bundle: use obfs4proxy 2019-04-30 22:26:48 -05:00
Jan Malakhovski e975d058cd tor-browser-bundle: inherit meta 2019-03-24 18:40:38 +00:00
Piotr Bogdan 3e7b6b5bfa firefoxen: remove unused gstreamer dependencies
Firefox and, by extension, Tor browser don't support gstreamer any more, this
removes what are effectively unused dependencies.

https://bugzilla.mozilla.org/show_bug.cgi?id=1234092 "Remove gstreamer support"
2018-11-14 22:29:48 +00:00
Jan Malakhovski e4babb32d5 treewide: write better docstrings for tor-browser things 2018-08-31 03:33:25 +00:00
Matthew Bauer 08655b16f2 firefox: fix darwin wrapper
- add execdir passthru
  usually this is /bin on macOS it is different.
2018-08-11 22:54:48 -05:00
Alyssa Ross a269e5ab92
tor-browser-bundle: update license to free
The Tor Browser Bundle is free software under various licenses:

> Can I distribute Tor?
> 
> Yes.
> 
> The Tor software is free software. This means we give you the rights
> to redistribute the Tor software, either modified or unmodified,
> either for a fee or gratis. You don't have to ask us for specific
> permission.
> 
> However, if you want to redistribute the Tor software you must follow
> our LICENSE. Essentially this means that you need to include our
> LICENSE file along with whatever part of the Tor software you're
> distributing.
> 
> Most people who ask us this question don't want to distribute just the
> Tor software, though. They want to distribute the Tor Browser. This
> includes Firefox Extended Support Release, and the NoScript and
> HTTPS-Everywhere extensions. You will need to follow the license for
> those programs as well. Both of those Firefox extensions are
> distributed under the GNU General Public License, while Firefox ESR is
> released under the Mozilla Public License. The simplest way to obey
> their licenses is to include the source code for these programs
> everywhere you include the bundles themselves. 

(https://www.torproject.org/docs/faq.html.en#DistributingTor)

tor-browser-bundle-bin is already marked as licenses.free, so it doesn't
really make sense that this one is marked as unfree.
2018-07-11 23:55:58 +02:00
Jan Tojnar a31d98f312
tree-wide: autorename gnome packages to use dashes 2018-02-25 17:41:16 +01:00
Joachim Fasting 6d31872885
tor-browser-bundle.noscript: 5.0.10 -> 5.1.2 2017-10-18 22:11:28 +02:00
Joachim Fasting 9cf5492a7b
tor-browser-bundle.https-everywhere: 2017.9.12 -> 2017.10.4 2017-10-18 22:11:23 +02:00
Joachim Fasting 9c8a0c0bcc
tor-browser-bundle.tor-launcher: 0.2.12.3 -> 0.2.13 2017-10-18 22:11:17 +02:00
Joachim Fasting f4f594e359
tor-browser-bundle: geoip support 2017-10-03 02:42:48 +02:00
Joachim Fasting ba689a2740
tor-browser-bundle: support transports obfs2,obfs3 2017-10-03 02:42:47 +02:00
Joachim Fasting ae4c8e0889
tor-browser-bundle: bump https-everywhere to 2017.9.12 2017-10-03 02:42:41 +02:00
Joachim Fasting 387f1c75f5
tor-browser-bundle: minor refactorings 2017-09-28 15:40:18 +02:00
Joachim Fasting 3ec05d6237
tor-browser-bundle: feature parity with the binary bundle
This will be factored later (eventually both will be subsumed by a more
generic construct).

Don't bother with pulseaudio support, however.
2017-09-28 15:40:10 +02:00
Joachim Fasting 931da53e50
tor-browser-bundle: support passing additional extensions 2017-09-27 22:58:12 +02:00
Joachim Fasting 2651602c17
tor-browser-bundle: factor out extensions 2017-09-27 22:58:07 +02:00
Joachim Fasting 206e4a6d69
tor-browser-bundle: basic checks for the wrapper script 2017-09-26 23:17:12 +02:00
Joachim Fasting fc44e91ad5
tor-browser-bundle: use fonts from Nixpkgs 2017-09-26 23:17:11 +02:00
Joachim Fasting f05d50f36c
tor-browser-bundle: approximate upstream bundle & purity control 2017-09-26 23:17:10 +02:00
Joachim Fasting 93b9109b46
tor-browser-bundle: clear pref bootstrappedAddons for purity 2017-09-26 23:17:09 +02:00
Joachim Fasting 0c26be5bd2
tor-browser-bundle: improve organization of distribution dir
Store TBB specific files under TorBrowser-Data
2017-09-26 23:17:08 +02:00
Joachim Fasting 346661d77b
tor-browser-bundle: redo extensions 2017-09-26 23:17:08 +02:00
Joachim Fasting fe3b95e749
tor-browser-bundle: customization via extraPrefs 2017-09-26 23:17:02 +02:00
Joachim Fasting 19ecb7f287
tor-browser-bundle: init at 7.0.1 (from source)
The original browser bundle expects to run from a bundled directory,
typically under user's home.  This version creates a firefox distribution
with preloaded extensions and settings that functions more like an
ordinary firefox installation.

The approach used here could be generalized to allow specification of
custom firefox distributions.  Eventually, the code will be factored so
that the tbb is just an instance of that more general construct (firefox
base + extensions + prefs).

Currently, we use the latest upstream versions of extensions and so on.
Eventually we want to track the upstream bundle more closely and ideally
use the exact same inputs (firefox source, extension sources).

To avoid mixing up profile data, all runtime state is stored under
$XDG_DATA_HOME/tor-browser.

Major TODO items
- Pluggable transports
- Upstream TBB version parity
- Avoid fetchgit
- Build NoScript from source (no upstream source repo, however, must rely
  on third-parties)
- Improved notation for packaging extensions
- Feature parity with the binary bundle (apulse and runtime purity, in
  particular)
2017-09-26 14:55:49 +02:00