Commit Graph

31 Commits

Author SHA1 Message Date
Florian Klink
1efaa03d95 firefoxPackages.tor-browser*, tor-browser-bundle: remove
These are all based on firefox versions with known vulnerabilities
exploited in the wild.

We seriously shouldn't ship this in nixpkgs, especially not for
sensitive applications as the Tor Browser.

`tor-browser-bundle` is just a wrapper around
`firefoxPackages.tor-browser`, so let's remove it too.

`tor-browser-bundle-bin` is the much safer bet, which is individually
downloaded from `dist.torproject.org` and just `patchelf`-ed locally to
work on NixOS.

Co-Authored-By: Alyssa Ross <hi@alyssa.is>
Co-Authored-By: Andreas Rammhold <andreas@rammhold.de>
Co-Authored-By: Graham Christensen <graham@grahamc.com>
2020-01-10 18:34:22 +01:00
volth
08f68313a4 treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
volth
46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
worldofpeace
3f4a353737 treewide: use dontUnpack 2019-07-01 04:23:51 -04:00
volth
f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Kai Harries
ceee963080 tor-browser-bundle: set default value for XAUTHORITY
XAUTHORITY is not set on systems using wayland. Therefore set a
default value for XAUTHORITY.
2019-06-04 21:07:00 +02:00
Will Dietz
63a13cce7c tor-browser-bundle: use obfs4proxy 2019-04-30 22:26:48 -05:00
Jan Malakhovski
e975d058cd tor-browser-bundle: inherit meta 2019-03-24 18:40:38 +00:00
Piotr Bogdan
3e7b6b5bfa firefoxen: remove unused gstreamer dependencies
Firefox and, by extension, Tor browser don't support gstreamer any more, this
removes what are effectively unused dependencies.

https://bugzilla.mozilla.org/show_bug.cgi?id=1234092 "Remove gstreamer support"
2018-11-14 22:29:48 +00:00
Jan Malakhovski
e4babb32d5 treewide: write better docstrings for tor-browser things 2018-08-31 03:33:25 +00:00
Matthew Bauer
08655b16f2 firefox: fix darwin wrapper
- add execdir passthru
  usually this is /bin on macOS it is different.
2018-08-11 22:54:48 -05:00
Alyssa Ross
a269e5ab92
tor-browser-bundle: update license to free
The Tor Browser Bundle is free software under various licenses:

> Can I distribute Tor?
> 
> Yes.
> 
> The Tor software is free software. This means we give you the rights
> to redistribute the Tor software, either modified or unmodified,
> either for a fee or gratis. You don't have to ask us for specific
> permission.
> 
> However, if you want to redistribute the Tor software you must follow
> our LICENSE. Essentially this means that you need to include our
> LICENSE file along with whatever part of the Tor software you're
> distributing.
> 
> Most people who ask us this question don't want to distribute just the
> Tor software, though. They want to distribute the Tor Browser. This
> includes Firefox Extended Support Release, and the NoScript and
> HTTPS-Everywhere extensions. You will need to follow the license for
> those programs as well. Both of those Firefox extensions are
> distributed under the GNU General Public License, while Firefox ESR is
> released under the Mozilla Public License. The simplest way to obey
> their licenses is to include the source code for these programs
> everywhere you include the bundles themselves. 

(https://www.torproject.org/docs/faq.html.en#DistributingTor)

tor-browser-bundle-bin is already marked as licenses.free, so it doesn't
really make sense that this one is marked as unfree.
2018-07-11 23:55:58 +02:00
Jan Tojnar
a31d98f312
tree-wide: autorename gnome packages to use dashes 2018-02-25 17:41:16 +01:00
Joachim Fasting
6d31872885
tor-browser-bundle.noscript: 5.0.10 -> 5.1.2 2017-10-18 22:11:28 +02:00
Joachim Fasting
9cf5492a7b
tor-browser-bundle.https-everywhere: 2017.9.12 -> 2017.10.4 2017-10-18 22:11:23 +02:00
Joachim Fasting
9c8a0c0bcc
tor-browser-bundle.tor-launcher: 0.2.12.3 -> 0.2.13 2017-10-18 22:11:17 +02:00
Joachim Fasting
f4f594e359
tor-browser-bundle: geoip support 2017-10-03 02:42:48 +02:00
Joachim Fasting
ba689a2740
tor-browser-bundle: support transports obfs2,obfs3 2017-10-03 02:42:47 +02:00
Joachim Fasting
ae4c8e0889
tor-browser-bundle: bump https-everywhere to 2017.9.12 2017-10-03 02:42:41 +02:00
Joachim Fasting
387f1c75f5
tor-browser-bundle: minor refactorings 2017-09-28 15:40:18 +02:00
Joachim Fasting
3ec05d6237
tor-browser-bundle: feature parity with the binary bundle
This will be factored later (eventually both will be subsumed by a more
generic construct).

Don't bother with pulseaudio support, however.
2017-09-28 15:40:10 +02:00
Joachim Fasting
931da53e50
tor-browser-bundle: support passing additional extensions 2017-09-27 22:58:12 +02:00
Joachim Fasting
2651602c17
tor-browser-bundle: factor out extensions 2017-09-27 22:58:07 +02:00
Joachim Fasting
206e4a6d69
tor-browser-bundle: basic checks for the wrapper script 2017-09-26 23:17:12 +02:00
Joachim Fasting
fc44e91ad5
tor-browser-bundle: use fonts from Nixpkgs 2017-09-26 23:17:11 +02:00
Joachim Fasting
f05d50f36c
tor-browser-bundle: approximate upstream bundle & purity control 2017-09-26 23:17:10 +02:00
Joachim Fasting
93b9109b46
tor-browser-bundle: clear pref bootstrappedAddons for purity 2017-09-26 23:17:09 +02:00
Joachim Fasting
0c26be5bd2
tor-browser-bundle: improve organization of distribution dir
Store TBB specific files under TorBrowser-Data
2017-09-26 23:17:08 +02:00
Joachim Fasting
346661d77b
tor-browser-bundle: redo extensions 2017-09-26 23:17:08 +02:00
Joachim Fasting
fe3b95e749
tor-browser-bundle: customization via extraPrefs 2017-09-26 23:17:02 +02:00
Joachim Fasting
19ecb7f287
tor-browser-bundle: init at 7.0.1 (from source)
The original browser bundle expects to run from a bundled directory,
typically under user's home.  This version creates a firefox distribution
with preloaded extensions and settings that functions more like an
ordinary firefox installation.

The approach used here could be generalized to allow specification of
custom firefox distributions.  Eventually, the code will be factored so
that the tbb is just an instance of that more general construct (firefox
base + extensions + prefs).

Currently, we use the latest upstream versions of extensions and so on.
Eventually we want to track the upstream bundle more closely and ideally
use the exact same inputs (firefox source, extension sources).

To avoid mixing up profile data, all runtime state is stored under
$XDG_DATA_HOME/tor-browser.

Major TODO items
- Pluggable transports
- Upstream TBB version parity
- Avoid fetchgit
- Build NoScript from source (no upstream source repo, however, must rely
  on third-parties)
- Improved notation for packaging extensions
- Feature parity with the binary bundle (apulse and runtime purity, in
  particular)
2017-09-26 14:55:49 +02:00