summaryrefslogtreecommitdiffstats
path: root/config/chroot_local-includes
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch ↵anonym2016-05-222-18/+0
|\ | | | | | | | | | | 'origin/feature/11075-remove-power-menu-entries' into devel Fix-committed: #11075
| * Merge remote-tracking branch 'origin/devel' into ↵sajolida2016-05-161-0/+1
| |\ | | | | | | | | | feature/11075-remove-power-menu-entries
| * | Remove 'Reboot' and 'Power Off' entries from Applications → System Tools ↵sajolida2016-05-162-18/+0
| | | | | | | | | | | | | | | | | | | | | | | | (Will-fix: #11075) These entries were added in 8b7dac2 for the Windows camouflage. But we don't have the Windows camouflage anymore and they are cruft with the default theme.
* | | Merge remote-tracking branch 'origin/feature/5926-freezable-APT-repository' ↵anonym2016-05-221-0/+68
|\ \ \ | | | | | | | | | | | | into devel
| * | | At boot time, reset APT sources.list to the live upstream ones.intrigeri2016-05-171-0/+68
| | |/ | |/| | | | | | | | | | A running Tails' APT must be pointed at the official, live upstream archive, and not to a Tails-specific and already obsolete snapshot.
* | | Merge remote-tracking branch ↵intrigeri2016-05-215-25/+12
|\ \ \ | |/ / |/| | | | | 'origin/feature/11229-remove-zenity-focus-hacks' into devel
| * | Simplify.anonym2016-03-142-8/+4
| | | | | | | | | | | | | | | The unnecessary construct seems to have been copy-pasted, so let's deal with both indentical simplifications at once.
| * | Drop zenity hacks to "focus" the negative answer.anonym2016-03-145-21/+12
| | | | | | | | | | | | | | | | | | Jessie's zenity introduced the --default-cancel option, finally! Will-fix: #11229
* | | Merge remote-tracking branch 'origin/devel' into ↵anonym2016-05-151-0/+3
|\ \ \ | | |/ | |/| | | | feature/10951-remove-kernel-map-files
| * | Merge remote-tracking branch ↵anonym2016-05-141-0/+3
| |\ \ | | | | | | | | | | | | | | | | | | | | 'segfault/bugfix/11270-add-minimize-maximize-buttons-to-GNOME-apps' into devel Fix-committed: #11270
| | * | Add quotessegfault2016-05-121-1/+1
| | | |
| | * | Set button layout to minimize,maximize,close.segfault2016-04-041-0/+3
| | | | | | | | | | | | | | | | Will-fix: #11270
* | | | Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-05-142-0/+9
|\ \ \ \ | |/ / / | | | | | | | | feature/10951-remove-kernel-map-files
| * | | Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-05-114-8/+12
| |\ \ \ | | | | | | | | | | | | | | | feature/10748-gen-packages-manifest
| * \ \ \ Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-05-067-1658/+4554
| |\ \ \ \ | | | | | | | | | | | | | | | | | | feature/10748-gen-packages-manifest
| * \ \ \ \ Merge remote-tracking branch 'origin/stable' into ↵intrigeri2016-03-244-585/+773
| |\ \ \ \ \ | | | |_|/ / | | |/| | | | | | | | | feature/10748-gen-packages-manifest
| * | | | | Don't include /debootstrap in the SquashFS.intrigeri2016-03-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We won't need it once the files we need in there have been retrieved by the build system. Refs: #5926
| * | | | | Fix shebang.intrigeri2016-03-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | IIRC it's not used in practice (live-config *sources* these hooks), but still. Refs: #5926
| * | | | | Restore original apt-get at boot time.Cyril Brulebois2016-03-101-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It would probably be a better idea to perform this operation only once at build time but it requires hooking into the very last minute before ISO image building, so that all APT operations go through the wrapper, before removing it. Signed-off-by: Cyril Brulebois <cyril@debamax.com>
* | | | | | Don't expose kernel memory addresses through /proc etc.anonym2016-05-131-0/+1
| |_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From https://www.kernel.org/doc/Documentation/sysctl/kernel.txt: kptr_restrict: This toggle indicates whether restrictions are placed on exposing kernel addresses via /proc and other interfaces. [...] When kptr_restrict is set to (2), kernel pointers printed using %pK will be replaced with 0's regardless of privileges. Not exposing the kernel memory addresses like that makes sense now that we do not ship the kernel .map files any more. Reds: #10951
* | | | | Merge remote-tracking branch ↵anonym2016-05-091-3/+0
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 'origin/feature/11306-move-tails-support-to-xmpp' into devel Fix-committed: #11306
| * | | | | Don't pre-configure the #tails chan on the default OFTC account.intrigeri2016-05-071-3/+0
| | |_|/ / | |/| | | | | | | | | | | | | refs: #11306
* | | | | Access outgoing related ICMP packets to the loopback interface.intrigeri2016-04-301-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise: 1. the "I cannot configure the Unsafe Browser to use any local proxies" automated test fails: the browser waits for the "The proxy server is refusing connections" message that is never displayed, because of: Dropped outbound packet: IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=80 TOS=0x00 PREC=0xC0 TTL=64 ID=8145 PROTO=ICMP TYPE=3 CODE=3 [SRC=127.0.0.1 DST=127.0.0.1 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=9959 DF PROTO=TCP SPT=40813 DPT=9050 WINDOW=43690 RES=0x00 SYN URGP=0 ] 2. Electrum, when started with an existing persistent wallet, takes more than two minutes to start, also because of blocked IMCP packets to the loopback interface.
* | | | | Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-04-295-1658/+4537
|\ \ \ \ \ | |/ / / / | | | | | | | | | | feature/various-firewall-hardening
| * | | | Update AdBlock Plus patterns.anonym2016-04-251-1639/+4517
| | | | |
| * | | | Merge remote-tracking branch 'segfault/bugfix/11038-pinentry-no-global-grab' ↵anonym2016-04-251-0/+1
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | into stable Fix-committed: #11038
| | * | | | Start gpg-agent with no-grab option issues with pinentry and GNOME's top bar.segfault2016-03-201-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | Will-fix: #11038
| * | | | | Merge remote-tracking branch 'origin/feature/11362-tor-browser-5.5.5' into ↵anonym2016-04-242-17/+17
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | stable Fix-committed: #11362
| | * | | | | Fetch Tor Browser from our own archive.anonym2016-04-232-17/+17
| | | | | | |
| * | | | | | Merge remote-tracking branch 'origin/bugfix/11199-tor-status-contrast' into ↵anonym2016-04-231-2/+2
| |\ \ \ \ \ \ | | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | stable Fix-committed: #11199
| | * | | | | Make the Tor Status "disconnected" icon more contrasted with the "connected" ↵intrigeri2016-04-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | one. refs: #11199
* | | | | | | Merge remote-tracking branch 'origin/stable' into ↵intrigeri2016-04-156-585/+790
|\ \ \ \ \ \ \ | |/ / / / / / | | | | | | | | | | | | | | feature/various-firewall-hardening
| * | | | | | Merge remote-tracking branch 'origin/doc/11187-claws-mail-persistence' into ↵anonym2016-04-111-0/+7
| |\ \ \ \ \ \ | | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | stable Fix-committed: #11187
| | * | | | | Explain how to get rid of the warning after doing the visible part of the ↵sajolida2016-04-061-0/+7
| | | |_|/ / | | |/| | | | | | | | | | | | | | | migration (#11187)
| * | | | | Merge remote-tracking branch 'spriver/de_kexec' into stableintrigeri2016-04-091-0/+10
| |\ \ \ \ \ | | |/ / / / | |/| | | |
| | * | | | Added German translationspriver2016-03-221-0/+10
| | | |/ / | | |/| |
| * | | | Refresh Tor Browser's AppArmor profile patch.anonym2016-03-181-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Against the one from torbrowser-launcher 0.2.4-1. Will-Fix: #11264
| * | | | Merge branch 'feature/11254-tor-browser-5.5.4' into stableanonym2016-03-172-17/+17
| |\ \ \ \ | | | | | | | | | | | | | | | | | | Fix-committed: #11254
| | * | | | Upgrade Tor Browser to 5.5.4.anonym2016-03-172-17/+17
| | |/ / / | | | | | | | | | | | | | | | Will-fix: #11254
| * | | | Update AdBlock Plus patterns.anonym2016-03-171-563/+750
| | |_|/ | |/| |
| * | | Refresh Tor Browser's AppArmor profile patch.intrigeri2016-03-141-4/+6
| |/ / | | | | | | | | | Will-Fix: #11228
* | | Merge remote-tracking branch 'origin/stable' into ↵intrigeri2016-03-1338-1352/+4023
|\ \ \ | |/ / | | | | | | feature/various-firewall-hardening
| * | Update AdBlock Plus patterns.anonym2016-03-071-631/+1696
| | |
| * | Merge branch 'bugfix/11042-disable_alt+shift_shortcut' into testinganonym2016-03-071-3/+0
| |\ \ | | | | | | | | | | | | Fix-committed: #11042
| | * | Remove now unused org.gnome.libgnomekbd.keyboard dconf section.anonym2016-03-071-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This actually broke the build because dconf cannot infer the type of an empty list... Refs: #11042
| | * | Remove LAlt+Shift and LShift+RShift keyboard layout toggling shortcutssegfault2016-03-041-1/+1
| | |/ | | | | | | | | | Will-fix: #11042
| * | Upgrade Tor Browser to 5.5.3.anonym2016-03-042-17/+17
| | | | | | | | | | | | Will-fix: #11189
| * | Update AdBlock Plus patterns.anonym2016-02-241-974/+2104
| | |
| * | Automatically save KeePassX database after every change by defaultsegfault2016-02-241-0/+1
| | | | | | | | | | | | Refs: #11147
| * | Make Git verify the integrity of transferred object.anonym2016-02-241-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Short story: Git will happily fetch a corrupt (or even maliciously manipulated) tree unless transfer.fsckObjects is set. Long story: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813157 Fix-committed: #11107