October 2017 - tor-commits - lists.torproject.org

[tor-messenger-build/master] Bug 20757: fix gpg_wrapper with git >= 2.10.0-rc0
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit 043cc5f96113c6367e29be6064867148c55fea20 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Tue Aug 8 16:44:15 2017 +0200 Bug 20757: fix gpg_wrapper with git >= 2.10.0-rc0 Thanks to dcf for finding the cause of the problem. --- rbm.conf | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/rbm.conf b/rbm.conf index d7aaee7..060d91f 100644 --- a/rbm.conf +++ b/rbm.conf @@ -203,8 +203,11 @@ gpg_wrapper: | SET gpg_kr = '--keyring ' _ path(c('gpg_keyring'), path(c('gpg_keyring_dir'))) _ ' --no-default-keyring'; END; -%] - if [ $# -eq 4 ] && [ "$1" = '--status-fd=1' ] \ - && [ "$2" = '--verify' ] + # git >= 2.10.0-rc0 is calling gpg with 5 args. See #20757 + if ( [ $# -eq 4 ] && [ "$1" = '--status-fd=1' ] \ + && [ "$2" = '--verify' ] ) \ + || ( [ $# -eq 5 ] && [ "$1" = '--status-fd=1' ] \ + && [ "$2" = '--keyid-format=long' ] && [ "$3" = '--verify' ] ) then [% c('gpg_bin') %] [% c('gpg_args') %] --with-fingerprint [% gpg_kr %] "$@" | sed 's/^\[GNUPG:\] EXPKEYSIG /\[GNUPG:\] GOODSIG /' exit ${PIPESTATUS[0]}

1 0

[tor-browser-build/master] Bug 23384: install dma (lightweight mail transport agent) on build-sunet-a.torproject.net
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit 39722d6b59c200710025b899e5f544a69bbeb943 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Oct 2 17:27:54 2017 +0200 Bug 23384: install dma (lightweight mail transport agent) on build-sunet-a.torproject.net --- tools/ansible/roles/mta/tasks/main.yml | 6 ++++++ tools/ansible/tbb-build.yml | 1 + 2 files changed, 7 insertions(+) diff --git a/tools/ansible/roles/mta/tasks/main.yml b/tools/ansible/roles/mta/tasks/main.yml new file mode 100644 index 0000000..de469d8 --- /dev/null +++ b/tools/ansible/roles/mta/tasks/main.yml @@ -0,0 +1,6 @@ +--- + +- name: Install dma (DragonFly Mail Agent) + apt: + name: dma + state: present diff --git a/tools/ansible/tbb-build.yml b/tools/ansible/tbb-build.yml index e74e665..9f76b67 100644 --- a/tools/ansible/tbb-build.yml +++ b/tools/ansible/tbb-build.yml @@ -5,3 +5,4 @@ - role: tbb-builder - role: useful-packages - role: tbb-team + - role: mta

1 0

[tor-browser-build/master] Bug 23384: install and configure unattended-upgrades on build-sunet-a.torproject.net
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit fd97762cb0924eea137896425eab788daef6ca8d Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Oct 2 18:05:14 2017 +0200 Bug 23384: install and configure unattended-upgrades on build-sunet-a.torproject.net --- .../roles/unattended-upgrades/defaults/main.yml | 2 + .../roles/unattended-upgrades/tasks/main.yml | 18 +++++ .../unattended-upgrades/templates/20auto-upgrades | 2 + .../templates/50unattended-upgrades | 92 ++++++++++++++++++++++ tools/ansible/tbb-build.yml | 1 + 5 files changed, 115 insertions(+) diff --git a/tools/ansible/roles/unattended-upgrades/defaults/main.yml b/tools/ansible/roles/unattended-upgrades/defaults/main.yml new file mode 100644 index 0000000..f6351a7 --- /dev/null +++ b/tools/ansible/roles/unattended-upgrades/defaults/main.yml @@ -0,0 +1,2 @@ +--- +unattended_upgrade_mail: 'boklm(a)mars-attacks.org' diff --git a/tools/ansible/roles/unattended-upgrades/tasks/main.yml b/tools/ansible/roles/unattended-upgrades/tasks/main.yml new file mode 100644 index 0000000..de0892b --- /dev/null +++ b/tools/ansible/roles/unattended-upgrades/tasks/main.yml @@ -0,0 +1,18 @@ +--- + +- name: Install unattended-updates + apt: + name: unattended-upgrades + state: present + +- name: Install apt-listchanges + apt: + name: apt-listchanges + state: present + +- name: create /etc/apt/apt.conf.d/50unattended-upgrades + template: src=50unattended-upgrades dest=/etc/apt/apt.conf.d/50unattended-upgrades mode=0644 + +- name: create /etc/apt/apt.conf.d/20auto-upgrades + template: src=20auto-upgrades dest=/etc/apt/apt.conf.d/20auto-upgrades mode=0644 + diff --git a/tools/ansible/roles/unattended-upgrades/templates/20auto-upgrades b/tools/ansible/roles/unattended-upgrades/templates/20auto-upgrades new file mode 100644 index 0000000..8d6d7c8 --- /dev/null +++ b/tools/ansible/roles/unattended-upgrades/templates/20auto-upgrades @@ -0,0 +1,2 @@ +APT::Periodic::Update-Package-Lists "1"; +APT::Periodic::Unattended-Upgrade "1"; diff --git a/tools/ansible/roles/unattended-upgrades/templates/50unattended-upgrades b/tools/ansible/roles/unattended-upgrades/templates/50unattended-upgrades new file mode 100644 index 0000000..d4904ab --- /dev/null +++ b/tools/ansible/roles/unattended-upgrades/templates/50unattended-upgrades @@ -0,0 +1,92 @@ +// Unattended-Upgrade::Origins-Pattern controls which packages are +// upgraded. +// +// Lines below have the format format is "keyword=value,...". A +// package will be upgraded only if the values in its metadata match +// all the supplied keywords in a line. (In other words, omitted +// keywords are wild cards.) The keywords originate from the Release +// file, but several aliases are accepted. The accepted keywords are: +// a,archive,suite (eg, "stable") +// c,component (eg, "main", "crontrib", "non-free") +// l,label (eg, "Debian", "Debian-Security") +// o,origin (eg, "Debian", "Unofficial Multimedia Packages") +// n,codename (eg, "jessie", "jessie-updates") +// site (eg, "http.debian.net") +// The available values on the system are printed by the command +// "apt-cache policy", and can be debugged by running +// "unattended-upgrades -d" and looking at the log file. +// +// Within lines unattended-upgrades allows 2 macros whose values are +// derived from /etc/debian_version: +// ${distro_id} Installed origin. +// ${distro_codename} Installed codename (eg, "jessie") +Unattended-Upgrade::Origins-Pattern { + // Codename based matching: + // This will follow the migration of a release through different + // archives (e.g. from testing to stable and later oldstable). +// "o=Debian,n=jessie"; +// "o=Debian,n=jessie-updates"; +// "o=Debian,n=jessie-proposed-updates"; +// "o=Debian,n=jessie,l=Debian-Security"; + + // Archive or Suite based matching: + // Note that this will silently match a different release after + // migration to the specified archive (e.g. testing becomes the + // new stable). +// "o=Debian,a=stable"; +// "o=Debian,a=stable-updates"; +// "o=Debian,a=proposed-updates"; + "origin=Debian,codename=${distro_codename},label=Debian-Security"; +}; + +// List of packages to not update (regexp are supported) +Unattended-Upgrade::Package-Blacklist { +// "vim"; +// "libc6"; +// "libc6-dev"; +// "libc6-i686"; +}; + +// This option allows you to control if on a unclean dpkg exit +// unattended-upgrades will automatically run +// dpkg --force-confold --configure -a +// The default is true, to ensure updates keep getting installed +//Unattended-Upgrade::AutoFixInterruptedDpkg "false"; + +// Split the upgrade into the smallest possible chunks so that +// they can be interrupted with SIGUSR1. This makes the upgrade +// a bit slower but it has the benefit that shutdown while a upgrade +// is running is possible (with a small delay) +//Unattended-Upgrade::MinimalSteps "true"; + +// Install all unattended-upgrades when the machine is shuting down +// instead of doing it in the background while the machine is running +// This will (obviously) make shutdown slower +//Unattended-Upgrade::InstallOnShutdown "true"; + +// Send email to this address for problems or packages upgrades +// If empty or unset then no email is sent, make sure that you +// have a working mail setup on your system. A package that provides +// 'mailx' must be installed. E.g. "user(a)example.com" +Unattended-Upgrade::Mail "{{ unattended_upgrade_mail }}"; + +// Set this value to "true" to get emails only on errors. Default +// is to always send a mail if Unattended-Upgrade::Mail is set +//Unattended-Upgrade::MailOnlyOnError "true"; + +// Do automatic removal of new unused dependencies after the upgrade +// (equivalent to apt-get autoremove) +//Unattended-Upgrade::Remove-Unused-Dependencies "false"; + +// Automatically reboot *WITHOUT CONFIRMATION* if +// the file /var/run/reboot-required is found after the upgrade +//Unattended-Upgrade::Automatic-Reboot "false"; + +// If automatic reboot is enabled and needed, reboot at the specific +// time instead of immediately +// Default: "now" +//Unattended-Upgrade::Automatic-Reboot-Time "02:00"; + +// Use apt bandwidth limit feature, this example limits the download +// speed to 70kb/sec +//Acquire::http::Dl-Limit "70"; diff --git a/tools/ansible/tbb-build.yml b/tools/ansible/tbb-build.yml index 9f76b67..3d9f543 100644 --- a/tools/ansible/tbb-build.yml +++ b/tools/ansible/tbb-build.yml @@ -6,3 +6,4 @@ - role: useful-packages - role: tbb-team - role: mta + - role: unattended-upgrades

1 0

[translation/mat-gui] Update translations for mat-gui
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit a79a9eb1e7c4c9925fa0a9e7b667882858135b61 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 15:16:35 2017 +0000 Update translations for mat-gui --- bn.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bn.po b/bn.po index 406827f6c..1c894b315 100644 --- a/bn.po +++ b/bn.po @@ -10,7 +10,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2017-09-27 08:20+0000\n" +"PO-Revision-Date: 2017-10-02 14:52+0000\n" "Last-Translator: Mahmud Numan <mahmudnuman(a)gmail.com>\n" "Language-Team: Bengali (http://www.transifex.com/otf/torproject/language/bn/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-persistence-setup] Update translations for tails-persistence-setup
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit d5ce89b13345b5c2400a0227021a4377d9f0c328 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 15:16:09 2017 +0000 Update translations for tails-persistence-setup --- bn/bn.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bn/bn.po b/bn/bn.po index 43ba3939a..ee2893a74 100644 --- a/bn/bn.po +++ b/bn/bn.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2017-05-15 13:51+0200\n" -"PO-Revision-Date: 2017-09-19 19:57+0000\n" +"PO-Revision-Date: 2017-10-02 15:08+0000\n" "Last-Translator: carolyn <carolyn(a)anhalt.org>\n" "Language-Team: Bengali (http://www.transifex.com/otf/torproject/language/bn/)\n" "MIME-Version: 1.0\n"

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit 72ecb18e309d84951d173a1d4e22c13ee32d98b0 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 15:15:06 2017 +0000 Update translations for bridgedb --- bn/LC_MESSAGES/bridgedb.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bn/LC_MESSAGES/bridgedb.po b/bn/LC_MESSAGES/bridgedb.po index ad5960c7e..30776e447 100644 --- a/bn/LC_MESSAGES/bridgedb.po +++ b/bn/LC_MESSAGES/bridgedb.po @@ -11,7 +11,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-07-25 03:40+0000\n" -"PO-Revision-Date: 2017-09-19 19:57+0000\n" +"PO-Revision-Date: 2017-10-02 14:56+0000\n" "Last-Translator: Mahmud Numan <mahmudnuman(a)gmail.com>\n" "Language-Team: Bengali (http://www.transifex.com/otf/torproject/language/bn/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-openpgp-applet] Update translations for tails-openpgp-applet
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit 19504dcba34de1851a1956f072b1cd88342a428a Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 14:48:55 2017 +0000 Update translations for tails-openpgp-applet --- bn/openpgp-applet.pot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bn/openpgp-applet.pot b/bn/openpgp-applet.pot index 68c0ef574..dbdea1caf 100644 --- a/bn/openpgp-applet.pot +++ b/bn/openpgp-applet.pot @@ -79,7 +79,7 @@ msgstr "নাম" #: bin/openpgp-applet:401 msgid "Key ID" -msgstr "" +msgstr "কী আইডি" #: bin/openpgp-applet:402 msgid "Status"

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit 312b060be8ab8eb5c7b2f623fcad09256029c385 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 14:45:52 2017 +0000 Update translations for https_everywhere_completed --- fr/https-everywhere.dtd | 1 + 1 file changed, 1 insertion(+) diff --git a/fr/https-everywhere.dtd b/fr/https-everywhere.dtd index b1831374b..4f65ec7aa 100644 --- a/fr/https-everywhere.dtd +++ b/fr/https-everywhere.dtd @@ -11,6 +11,7 @@ <!ENTITY https-everywhere.menu.showCounter "Afficher le compteur"> <!ENTITY https-everywhere.menu.viewAllRules "Visualiser toutes les règles"> +<!ENTITY https-everywhere.options.generalSettings "Paramètres généraux"> <!ENTITY https-everywhere.options.importSettings "Importer les paramètres"> <!ENTITY https-everywhere.options.import "Importer"> <!ENTITY https-everywhere.options.imported "Vos paramètres ont été importés.">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit c47c5a4eb75b1ce360d340d872f0bd2d62484a80 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 14:45:41 2017 +0000 Update translations for https_everywhere --- fr/https-everywhere.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fr/https-everywhere.dtd b/fr/https-everywhere.dtd index 6e970cc38..4f65ec7aa 100644 --- a/fr/https-everywhere.dtd +++ b/fr/https-everywhere.dtd @@ -11,7 +11,7 @@ <!ENTITY https-everywhere.menu.showCounter "Afficher le compteur"> <!ENTITY https-everywhere.menu.viewAllRules "Visualiser toutes les règles"> -<!ENTITY https-everywhere.options.generalSettings "General Settings"> +<!ENTITY https-everywhere.options.generalSettings "Paramètres généraux"> <!ENTITY https-everywhere.options.importSettings "Importer les paramètres"> <!ENTITY https-everywhere.options.import "Importer"> <!ENTITY https-everywhere.options.imported "Vos paramètres ont été importés.">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit abb19974616182c92441970651cf6f8d83f04ea6 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 14:15:41 2017 +0000 Update translations for https_everywhere --- ga/ssl-observatory.dtd | 30 +++++++++++++----------------- 1 file changed, 13 insertions(+), 17 deletions(-) diff --git a/ga/ssl-observatory.dtd b/ga/ssl-observatory.dtd index 0f5ce2dfc..e2cf81a39 100644 --- a/ga/ssl-observatory.dtd +++ b/ga/ssl-observatory.dtd @@ -20,32 +20,31 @@ to turn it on?">-->  <!ENTITY ssl-observatory.prefs.adv_priv_opts1 -"It is safe to enable this, unless you use a very -intrusive corporate network:"> +"Tá sé slán an ghné seo a chumasú, chomh fada is nach bhfuil tú ar líonra corparáideach an-treallúsach:"> <!ENTITY ssl-observatory.prefs.adv_priv_opts2 "Slán, mura bhfuil tú ar líonra corparáideach a úsáideann ainmneacha freastalaí inlín faoi rún:"> <!ENTITY ssl-observatory.prefs.alt_roots -"Submit and check certificates signed by non-standard root CAs"> +"Seol agus seiceáil teastais a bhí sínithe ag bunúdarás teastas neamhchaighdeánach"> <!ENTITY ssl-observatory.prefs.alt_roots_tooltip "It is safe (and a good idea) to enable this option, unless you use an intrusive corporate network or Kaspersky antivirus software that monitors your browsing with a TLS proxy and a private root Certificate Authority. If enabled on such a network, this option might publish evidence of which https:// domains were being visited through that proxy, because of the unique certificates it would produce. So we leave it off by default."> -<!ENTITY ssl-observatory.prefs.anonymous "Check certificates using Tor for anonymity"> +<!ENTITY ssl-observatory.prefs.anonymous "Seiceáil teastais trí Tor le d'aitheantas a cheilt"> <!ENTITY ssl-observatory.prefs.anonymous_unavailable -"Check certificates using Tor for anonymity (requires Tor)"> +"Seiceáil teastais trí Tor le d'aitheantas a cheilt (Tor de dhíth)"> <!ENTITY ssl-observatory.prefs.anonymous_tooltip -"This option requires Tor to be installed and running"> +"Caithfidh tú Tor a shuiteáil agus a chur ar siúl chun an rogha seo a úsáid"> <!ENTITY ssl-observatory.prefs.asn -"When you see a new certificate, tell the Observatory which ISP you are connected to"> +"Nuair a fheiceann tú teastas nua, inis don Observatory an ISP a bhfuil tú ceangailte tríd"> <!ENTITY ssl-observatory.prefs.asn_tooltip "This will fetch and send the "Autonomous System number" of your network. This will help us locate attacks against HTTPS, and to determine whether we have observations from networks in places like Iran and Syria where attacks are comparatively common."> <!ENTITY ssl-observatory.prefs.show_cert_warning -"Show a warning when the Observatory detects a revoked certificate not caught by your browser"> +"Taispeáin rabhadh nuair a bhraitheann an Observatory teastas aisghairthe nár bhraith do bhrabhsálaí"> <!ENTITY ssl-observatory.prefs.show_cert_warning_tooltip "This will check submitted certificates against known Certificate Revocation Lists. Unfortunately we cannot guarantee that we will flag every revoked certificate, but if you do see a warning there's a good chance something is wrong."> @@ -65,18 +64,15 @@ Mouseover the options for further details:">--> <!ENTITY ssl-observatory.prefs.explanation2 -"For example, when you visit https://www.something.com, the certificate -received by the Observatory will indicate that somebody visited -www.something.com, but not who visited the site, or what specific page they -looked at. Mouseover the options for further details:"> +"Mar shampla, nuair a thugann tú cuairt ar https://www.something.com, taispeánann an teastas a fhaigheann an Observatory gur thug duine éigin cuairt ar www.something.com, ach ní thaispeánann sé cé a thug, nó na leathanaigh ar bhreathnaigh tú orthu. Cuir do luch os cionn na roghanna chun tuilleadh eolais a fháil:"> <!ENTITY ssl-observatory.prefs.hide "Folaigh na hardroghanna"> <!ENTITY ssl-observatory.prefs.nonanon -"Check certificates even if Tor is not available"> +"Seiceáil teastas fiú mura bhfuil Tor ar fáil"> <!ENTITY ssl-observatory.prefs.nonanon_tooltip -"We will still try to keep the data anonymous, but this option is less secure"> +"Déanfaimid ár ndícheall d'aitheantas a cheilt, ach níl an rogha seo chomh sábháilte"> <!ENTITY ssl-observatory.prefs.priv_dns "Submit and check certificates for non-public DNS names"> @@ -89,13 +85,13 @@ looked at. Mouseover the options for further details:"> <!ENTITY ssl-observatory.prefs.title "Sainroghanna SSL Observatory"> <!ENTITY ssl-observatory.prefs.use "Úsáid an Observatory?"> -<!ENTITY ssl-observatory.warning.title "WARNING from EFF's SSL Observatory"> +<!ENTITY ssl-observatory.warning.title "RABHADH ón SSL Observatory"> <!ENTITY ssl-observatory.warning.showcert "Taispeáin an slabhra teastas"> <!ENTITY ssl-observatory.warning.okay "Tuigim"> <!ENTITY ssl-observatory.warning.text "D'eisigh an SSL Observatory rabhadh maidir leis an teastas (nó na teastais) a úsáideann an suíomh seo:"> -<!ENTITY ssl-observatory.warning.defense "If you are logged in to this site, it may be advisable to change your password once you have a safe connection. (These warnings can be disabled in the "SSL Observatory" tab of the HTTPS Everywhere preferences dialog.)"> +<!ENTITY ssl-observatory.warning.defense "Má tá tú logáilte isteach sa suíomh seo, moltar duit d'fhocal faire a athrú chomh luath is a bheidh ceangal slán agat. (Is féidir leat na rabhaidh seo a mhúchadh sa chluaisín "SSL Observatory" sna sainroghanna HTTPS Everywhere.)"> <!ENTITY ssl-observatory.prefs.self_signed -"Submit and check self-signed certificates"> +"Seol agus seiceáil teastais fhéinsínithe"> <!ENTITY ssl-observatory.prefs.self_signed_tooltip "Moltar é seo; tá fadhbanna cripteagrafacha thar a bheith coitianta i ngléasanna leabaithe féinsínithe">

1 0