diff options
author | Thomas Deutschmann <whissi@gentoo.org> | 2020-03-12 15:15:41 +0100 |
---|---|---|
committer | Thomas Deutschmann <whissi@gentoo.org> | 2020-03-12 15:15:59 +0100 |
commit | bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0 (patch) | |
tree | 87b2e9935770743724dc4a57ee0ec7a34dbd648a /www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild | |
parent | www-client/firefox: security cleanup (bug #712182) (diff) | |
download | gentoo-bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0.tar.gz gentoo-bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0.tar.bz2 gentoo-bfa9b84989f4acbd0bffa4ed98f5ff1dde2436e0.zip |
www-client/firefox-bin: security cleanup (bug #712182)
Bug: https://bugs.gentoo.org/712182
Package-Manager: Portage-2.3.93, Repoman-2.3.20
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
Diffstat (limited to 'www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild')
-rw-r--r-- | www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild | 197 |
1 files changed, 0 insertions, 197 deletions
diff --git a/www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild b/www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild deleted file mode 100644 index d95d92d07396..000000000000 --- a/www-client/firefox-bin/firefox-bin-68.5.0-r1.ebuild +++ /dev/null @@ -1,197 +0,0 @@ -# Copyright 1999-2020 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=6 -MOZ_ESR=1 - -# Can be updated using scripts/get_langs.sh from mozilla overlay -MOZ_LANGS=(ach af an ar ast az be bg bn br bs ca cak cs cy da de dsb el en en-CA -en-GB en-US eo es-AR es-CL es-ES es-MX et eu fa ff fi fr fy-NL ga-IE gd gl gn gu-IN -he hi-IN hr hsb hu hy-AM ia id is it ja ka kab kk km kn ko lij lt lv mk mr ms my -nb-NO nl nn-NO oc pa-IN pl pt-BR pt-PT rm ro ru si sk sl son sq sr sv-SE ta te -th tr uk ur uz vi xh zh-CN zh-TW ) - -# Convert the ebuild version to the upstream mozilla version, used by mozlinguas -MOZ_PV="${PV/_beta/b}" # Handle beta for SRC_URI -MOZ_PV="${MOZ_PV/_rc/rc}" # Handle rc for SRC_URI -MOZ_PN="${PN/-bin}" -if [[ ${MOZ_ESR} == 1 ]]; then - # ESR releases have slightly version numbers - MOZ_PV="${MOZ_PV}esr" -fi -MOZ_P="${MOZ_PN}-${MOZ_PV}" - -MOZ_HTTP_URI="https://archive.mozilla.org/pub/mozilla.org/${MOZ_PN}/releases/" - -inherit mozlinguas-v2 nsplugins pax-utils xdg-utils - -DESCRIPTION="Firefox Web Browser" -SRC_URI="${SRC_URI} - amd64? ( ${MOZ_HTTP_URI%/}/${MOZ_PV}/linux-x86_64/en-US/${MOZ_P}.tar.bz2 -> ${PN}_x86_64-${PV}.tar.bz2 ) - x86? ( ${MOZ_HTTP_URI%/}/${MOZ_PV}/linux-i686/en-US/${MOZ_P}.tar.bz2 -> ${PN}_i686-${PV}.tar.bz2 )" -HOMEPAGE="https://www.mozilla.org/en-US/firefox/" -RESTRICT="strip mirror" - -KEYWORDS="-* amd64 x86" -SLOT="0" -LICENSE="MPL-2.0 GPL-2 LGPL-2.1" -IUSE="+alsa +ffmpeg +pulseaudio selinux startup-notification" - -DEPEND="app-arch/unzip - alsa? ( - !pulseaudio? ( - dev-util/patchelf - media-sound/apulse - ) - )" -RDEPEND="dev-libs/atk - >=sys-apps/dbus-0.60 - >=dev-libs/dbus-glib-0.72 - >=dev-libs/glib-2.26:2 - media-libs/fontconfig - >=media-libs/freetype-2.4.10 - >=x11-libs/cairo-1.10[X] - x11-libs/gdk-pixbuf - >=x11-libs/gtk+-2.18:2 - >=x11-libs/gtk+-3.4.0:3 - x11-libs/libX11 - x11-libs/libXcomposite - x11-libs/libXdamage - x11-libs/libXext - x11-libs/libXfixes - x11-libs/libXrender - x11-libs/libXt - >=x11-libs/pango-1.22.0 - virtual/freedesktop-icon-theme - alsa? ( - !pulseaudio? ( - media-sound/apulse - ) - ) - pulseaudio? ( media-sound/pulseaudio ) - ffmpeg? ( media-video/ffmpeg ) - selinux? ( sec-policy/selinux-mozilla ) -" - -QA_PREBUILT=" - opt/${MOZ_PN}/*.so - opt/${MOZ_PN}/${MOZ_PN} - opt/${MOZ_PN}/${PN} - opt/${MOZ_PN}/crashreporter - opt/${MOZ_PN}/webapprt-stub - opt/${MOZ_PN}/plugin-container - opt/${MOZ_PN}/mozilla-xremote-client - opt/${MOZ_PN}/updater - opt/${MOZ_PN}/minidump-analyzer - opt/${MOZ_PN}/pingsender -" - -S="${WORKDIR}/${MOZ_PN}" - -src_unpack() { - unpack ${A} - - # Unpack language packs - mozlinguas_src_unpack -} - -src_install() { - declare MOZILLA_FIVE_HOME=/opt/${MOZ_PN} - - local size sizes icon_path icon name - sizes="16 32 48 128" - icon_path="${S}/browser/chrome/icons/default" - icon="${PN}" - name="Mozilla Firefox" - - # Install icons and .desktop for menu entry - for size in ${sizes}; do - insinto "/usr/share/icons/hicolor/${size}x${size}/apps" - newins "${icon_path}/default${size}.png" "${icon}.png" - done - # Install a 48x48 icon into /usr/share/pixmaps for legacy DEs - newicon "${S}"/browser/chrome/icons/default/default48.png ${PN}.png - domenu "${FILESDIR}"/${PN}.desktop - sed -i -e "s:@NAME@:${name}:" -e "s:@ICON@:${icon}:" \ - "${ED}usr/share/applications/${PN}.desktop" || die - - # Add StartupNotify=true bug 237317 - if use startup-notification; then - echo "StartupNotify=true" >> "${ED}"usr/share/applications/${PN}.desktop - fi - - # Install firefox in /opt - dodir ${MOZILLA_FIVE_HOME%/*} - mv "${S}" "${ED}"${MOZILLA_FIVE_HOME} || die - - # Disable built-in auto-update because we update firefox-bin through package manager - insinto ${MOZILLA_FIVE_HOME}/distribution/ - newins "${FILESDIR}"/disable-auto-update.policy.json policies.json - - # Fix prefs that make no sense for a system-wide install - insinto ${MOZILLA_FIVE_HOME}/defaults/pref/ - doins "${FILESDIR}"/local-settings.js - insinto ${MOZILLA_FIVE_HOME} - newins "${FILESDIR}"/all-gentoo-2.js all-gentoo.js - - # Install language packs - MOZEXTENSION_TARGET="distribution/extensions" \ - MOZ_INSTALL_L10N_XPIFILE="1" \ - mozlinguas_src_install - - if use alsa && ! use pulseaudio; then - local apulselib="/usr/$(get_libdir)/apulse" - patchelf --set-rpath "${apulselib}" "${ED}"${MOZILLA_FIVE_HOME}/libxul.so || die - fi - - # Create /usr/bin/firefox-bin - dodir /usr/bin/ - local apulselib=$(usex pulseaudio "/usr/$(get_libdir)/apulse:" "") - cat <<-EOF >"${ED}"usr/bin/${PN} - #!/bin/sh - unset LD_PRELOAD - LD_LIBRARY_PATH="${apulselib}/opt/firefox/" \\ - GTK_PATH=/usr/$(get_libdir)/gtk-3.0/ \\ - exec /opt/${MOZ_PN}/${MOZ_PN} "\$@" - EOF - fperms 0755 /usr/bin/${PN} - - # revdep-rebuild entry - insinto /etc/revdep-rebuild - echo "SEARCH_DIRS_MASK=${MOZILLA_FIVE_HOME}" >> ${T}/10${PN} - doins "${T}"/10${PN} - - # Plugins dir, still used for flash - share_plugins_dir - - # Required in order to use plugins and even run firefox on hardened. - pax-mark mr "${ED}"${MOZILLA_FIVE_HOME}/{firefox,firefox-bin,plugin-container} -} - -pkg_postinst() { - if ! has_version 'gnome-base/gconf' || ! has_version 'gnome-base/orbit' \ - || ! has_version 'net-misc/curl'; then - einfo - einfo "For using the crashreporter, you need gnome-base/gconf," - einfo "gnome-base/orbit and net-misc/curl emerged." - einfo - fi - use ffmpeg || ewarn "USE=-ffmpeg : HTML5 video will not render without media-video/ffmpeg installed" - - local HAS_AUDIO=0 - if use alsa || use pulseaudio; then - HAS_AUDIO=1 - fi - - if [[ ${HAS_AUDIO} -eq 0 ]] ; then - ewarn "USE=-pulseaudio & USE=-alsa : For audio please either set USE=pulseaudio or USE=alsa!" - fi - - # Update mimedb for the new .desktop file - xdg_desktop_database_update - xdg_icon_cache_update -} - -pkg_postrm() { - xdg_icon_cache_update -} |