firefoxPackages.tor-browser*, tor-browser-bundle: remove
These are all based on firefox versions with known vulnerabilities exploited in the wild. We seriously shouldn't ship this in nixpkgs, especially not for sensitive applications as the Tor Browser. `tor-browser-bundle` is just a wrapper around `firefoxPackages.tor-browser`, so let's remove it too. `tor-browser-bundle-bin` is the much safer bet, which is individually downloaded from `dist.torproject.org` and just `patchelf`-ed locally to work on NixOS. Co-Authored-By: Alyssa Ross <hi@alyssa.is> Co-Authored-By: Andreas Rammhold <andreas@rammhold.de> Co-Authored-By: Graham Christensen <graham@grahamc.com>
This commit is contained in:
co-authored by
Alyssa Ross
Andreas Rammhold
Graham Christensen
parent
b333f39de7
commit
1efaa03d95
@@ -54,9 +54,6 @@
|
||||
|
||||
# Extra preferences
|
||||
, extraPrefs ? ""
|
||||
|
||||
# For meta
|
||||
, tor-browser-bundle
|
||||
}:
|
||||
|
||||
with stdenv.lib;
|
||||
@@ -394,7 +391,15 @@ stdenv.mkDerivation rec {
|
||||
|
||||
meta = with stdenv.lib; {
|
||||
description = "Tor Browser Bundle built by torproject.org";
|
||||
longDescription = tor-browser-bundle.meta.longDescription;
|
||||
longDescription = ''
|
||||
Tor Browser Bundle is a bundle of the Tor daemon, Tor Browser (heavily patched version of
|
||||
Firefox), several essential extensions for Tor Browser, and some tools that glue those
|
||||
together with a convenient UI.
|
||||
|
||||
`tor-browser-bundle-bin` package is the official version built by torproject.org patched with
|
||||
`patchelf` to work under nix and with bundled scripts adapted to the read-only nature of
|
||||
the `/nix/store`.
|
||||
'';
|
||||
homepage = "https://www.torproject.org/";
|
||||
platforms = attrNames srcs;
|
||||
maintainers = with maintainers; [ offline matejc doublec thoughtpolice joachifm hax404 cap ];
|
||||
|
||||
Reference in New Issue
Block a user