summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Deutschmann <whissi@gentoo.org>2020-03-12 15:15:41 +0100
committerThomas Deutschmann <whissi@gentoo.org>2020-03-12 15:15:59 +0100
commitbfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0 (patch)
tree87b2e9935770743724dc4a57ee0ec7a34dbd648a /www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild
parentwww-client/firefox: security cleanup (bug #712182) (diff)
downloadgentoo-bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0.tar.gz
gentoo-bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0.tar.bz2
gentoo-bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0.zip
www-client/firefox-bin: security cleanup (bug #712182)
Bug: https://bugs.gentoo.org/712182 Package-Manager: Portage-2.3.93, Repoman-2.3.20 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
Diffstat (limited to 'www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild')
-rw-r--r--www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild197
1 files changed, 0 insertions, 197 deletions
diff --git a/www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild b/www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild
deleted file mode 100644
index d95d92d0739..00000000000
--- a/www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild
+++ /dev/null
@@ -1,197 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=6
-MOZ_ESR=1
-
-# Can be updated using scripts/get_langs.sh from mozilla overlay
-MOZ_LANGS=(ach af an ar ast az be bg bn br bs ca cak cs cy da de dsb el en en-CA
-en-GB en-US eo es-AR es-CL es-ES es-MX et eu fa ff fi fr fy-NL ga-IE gd gl gn gu-IN
-he hi-IN hr hsb hu hy-AM ia id is it ja ka kab kk km kn ko lij lt lv mk mr ms my
-nb-NO nl nn-NO oc pa-IN pl pt-BR pt-PT rm ro ru si sk sl son sq sr sv-SE ta te
-th tr uk ur uz vi xh zh-CN zh-TW )
-
-# Convert the ebuild version to the upstream mozilla version, used by mozlinguas
-MOZ_PV="${PV/_beta/b}" # Handle beta for SRC_URI
-MOZ_PV="${MOZ_PV/_rc/rc}" # Handle rc for SRC_URI
-MOZ_PN="${PN/-bin}"
-if [[ ${MOZ_ESR} == 1 ]]; then
- # ESR releases have slightly version numbers
- MOZ_PV="${MOZ_PV}esr"
-fi
-MOZ_P="${MOZ_PN}-${MOZ_PV}"
-
-MOZ_HTTP_URI="https://archive.mozilla.org/pub/mozilla.org/${MOZ_PN}/releases/"
-
-inherit mozlinguas-v2 nsplugins pax-utils xdg-utils
-
-DESCRIPTION="Firefox Web Browser"
-SRC_URI="${SRC_URI}
- amd64? ( ${MOZ_HTTP_URI%/}/${MOZ_PV}/linux-x86_64/en-US/${MOZ_P}.tar.bz2 -> ${PN}_x86_64-${PV}.tar.bz2 )
- x86? ( ${MOZ_HTTP_URI%/}/${MOZ_PV}/linux-i686/en-US/${MOZ_P}.tar.bz2 -> ${PN}_i686-${PV}.tar.bz2 )"
-HOMEPAGE="https://www.mozilla.org/en-US/firefox/"
-RESTRICT="strip mirror"
-
-KEYWORDS="-* amd64 x86"
-SLOT="0"
-LICENSE="MPL-2.0 GPL-2 LGPL-2.1"
-IUSE="+alsa +ffmpeg +pulseaudio selinux startup-notification"
-
-DEPEND="app-arch/unzip
- alsa? (
- !pulseaudio? (
- dev-util/patchelf
- media-sound/apulse
- )
- )"
-RDEPEND="dev-libs/atk
- >=sys-apps/dbus-0.60
- >=dev-libs/dbus-glib-0.72
- >=dev-libs/glib-2.26:2
- media-libs/fontconfig
- >=media-libs/freetype-2.4.10
- >=x11-libs/cairo-1.10[X]
- x11-libs/gdk-pixbuf
- >=x11-libs/gtk+-2.18:2
- >=x11-libs/gtk+-3.4.0:3
- x11-libs/libX11
- x11-libs/libXcomposite
- x11-libs/libXdamage
- x11-libs/libXext
- x11-libs/libXfixes
- x11-libs/libXrender
- x11-libs/libXt
- >=x11-libs/pango-1.22.0
- virtual/freedesktop-icon-theme
- alsa? (
- !pulseaudio? (
- media-sound/apulse
- )
- )
- pulseaudio? ( media-sound/pulseaudio )
- ffmpeg? ( media-video/ffmpeg )
- selinux? ( sec-policy/selinux-mozilla )
-"
-
-QA_PREBUILT="
- opt/${MOZ_PN}/*.so
- opt/${MOZ_PN}/${MOZ_PN}
- opt/${MOZ_PN}/${PN}
- opt/${MOZ_PN}/crashreporter
- opt/${MOZ_PN}/webapprt-stub
- opt/${MOZ_PN}/plugin-container
- opt/${MOZ_PN}/mozilla-xremote-client
- opt/${MOZ_PN}/updater
- opt/${MOZ_PN}/minidump-analyzer
- opt/${MOZ_PN}/pingsender
-"
-
-S="${WORKDIR}/${MOZ_PN}"
-
-src_unpack() {
- unpack ${A}
-
- # Unpack language packs
- mozlinguas_src_unpack
-}
-
-src_install() {
- declare MOZILLA_FIVE_HOME=/opt/${MOZ_PN}
-
- local size sizes icon_path icon name
- sizes="16 32 48 128"
- icon_path="${S}/browser/chrome/icons/default"
- icon="${PN}"
- name="Mozilla Firefox"
-
- # Install icons and .desktop for menu entry
- for size in ${sizes}; do
- insinto "/usr/share/icons/hicolor/${size}x${size}/apps"
- newins "${icon_path}/default${size}.png" "${icon}.png"
- done
- # Install a 48x48 icon into /usr/share/pixmaps for legacy DEs
- newicon "${S}"/browser/chrome/icons/default/default48.png ${PN}.png
- domenu "${FILESDIR}"/${PN}.desktop
- sed -i -e "s:@NAME@:${name}:" -e "s:@ICON@:${icon}:" \
- "${ED}usr/share/applications/${PN}.desktop" || die
-
- # Add StartupNotify=true bug 237317
- if use startup-notification; then
- echo "StartupNotify=true" >> "${ED}"usr/share/applications/${PN}.desktop
- fi
-
- # Install firefox in /opt
- dodir ${MOZILLA_FIVE_HOME%/*}
- mv "${S}" "${ED}"${MOZILLA_FIVE_HOME} || die
-
- # Disable built-in auto-update because we update firefox-bin through package manager
- insinto ${MOZILLA_FIVE_HOME}/distribution/
- newins "${FILESDIR}"/disable-auto-update.policy.json policies.json
-
- # Fix prefs that make no sense for a system-wide install
- insinto ${MOZILLA_FIVE_HOME}/defaults/pref/
- doins "${FILESDIR}"/local-settings.js
- insinto ${MOZILLA_FIVE_HOME}
- newins "${FILESDIR}"/all-gentoo-2.js all-gentoo.js
-
- # Install language packs
- MOZEXTENSION_TARGET="distribution/extensions" \
- MOZ_INSTALL_L10N_XPIFILE="1" \
- mozlinguas_src_install
-
- if use alsa && ! use pulseaudio; then
- local apulselib="/usr/$(get_libdir)/apulse"
- patchelf --set-rpath "${apulselib}" "${ED}"${MOZILLA_FIVE_HOME}/libxul.so || die
- fi
-
- # Create /usr/bin/firefox-bin
- dodir /usr/bin/
- local apulselib=$(usex pulseaudio "/usr/$(get_libdir)/apulse:" "")
- cat <<-EOF >"${ED}"usr/bin/${PN}
- #!/bin/sh
- unset LD_PRELOAD
- LD_LIBRARY_PATH="${apulselib}/opt/firefox/" \\
- GTK_PATH=/usr/$(get_libdir)/gtk-3.0/ \\
- exec /opt/${MOZ_PN}/${MOZ_PN} "\$@"
- EOF
- fperms 0755 /usr/bin/${PN}
-
- # revdep-rebuild entry
- insinto /etc/revdep-rebuild
- echo "SEARCH_DIRS_MASK=${MOZILLA_FIVE_HOME}" >> ${T}/10${PN}
- doins "${T}"/10${PN}
-
- # Plugins dir, still used for flash
- share_plugins_dir
-
- # Required in order to use plugins and even run firefox on hardened.
- pax-mark mr "${ED}"${MOZILLA_FIVE_HOME}/{firefox,firefox-bin,plugin-container}
-}
-
-pkg_postinst() {
- if ! has_version 'gnome-base/gconf' || ! has_version 'gnome-base/orbit' \
- || ! has_version 'net-misc/curl'; then
- einfo
- einfo "For using the crashreporter, you need gnome-base/gconf,"
- einfo "gnome-base/orbit and net-misc/curl emerged."
- einfo
- fi
- use ffmpeg || ewarn "USE=-ffmpeg : HTML5 video will not render without media-video/ffmpeg installed"
-
- local HAS_AUDIO=0
- if use alsa || use pulseaudio; then
- HAS_AUDIO=1
- fi
-
- if [[ ${HAS_AUDIO} -eq 0 ]] ; then
- ewarn "USE=-pulseaudio & USE=-alsa : For audio please either set USE=pulseaudio or USE=alsa!"
- fi
-
- # Update mimedb for the new .desktop file
- xdg_desktop_database_update
- xdg_icon_cache_update
-}
-
-pkg_postrm() {
- xdg_icon_cache_update
-}