Resolve "Upgrade Tor Browser to 12.0.6, based on Firefox 102.11"
(zerotracepen/zerotracepen!1134)
Closes issues:
- Upgrade Tor Browser to 12.0.6, based on Firefox 102.11 (zerotracepen/zerotracepen#19621)
Commits:
- Fetch Tor Browser from our own archive
- Upgrade Tor Browser to 12.0.6-build1
- unsafe-browser: Explain why our use of flock is not vulnerable
(zerotracepen/zerotracepen!1113)
Closes issues:
- Unsafe Browser - Local Privilege Escalation (LPE) via symlink - Arbitrary File
Content Delete (zerotracepen/zerotracepen#19616)
Commits:
- Use /run/lock instead of /var/lock
- unsafe-browser: Explain why our use of flock is not vulnerable
- Make curl use Tor (zerotracepen/zerotracepen!1123)
Closes issues:
- Make curl work out of the box (zerotracepen/zerotracepen#19488)
Commits:
- test that curl works out of the box
- Make curl use Tor
- udisks2: Use LUKS2 by default (zerotracepen/zerotracepen!1115)
Closes issues:
- Persistent Storage: Use LUKS2 (zerotracepen/zerotracepen#15450)
Commits:
- Test suite: Increase timeout for changing the LUKS passphrase
- Test suite: Check that Persistent Storage uses LUKS2
- Test suite: record old version when installing one to disk
- Test suite: move step definition to a more suitable place
- udisks2: Use LUKS2 by default
- zerotracepen-documentation: Check that joined path is below website path
(zerotracepen/zerotracepen!1132)
Closes issues:
- zerotracepen-documentation - Limited Path Traversal (zerotracepen/zerotracepen#19576)
Commits:
- zerotracepen-documentation: Check that joined path is below website path
- Test suite: Don't check for "Display output is not active" screen
(zerotracepen/zerotracepen!1126)
Closes issues:
- Tests sometimes fail with "Display output is not active" after clicking login
button in Welcome Screen (zerotracepen/zerotracepen#19639)
Commits:
- Test suite: Don't check for "Display output is not active" screen
- Test suite: Print step status
- Welcome Screen: Make error message more useful
- Remove our public calendar (zerotracepen/zerotracepen!1125)
Commits:
- Add missing word
- Fix broken links
- Remove our public calendar
- tps: Use argon2id (zerotracepen/zerotracepen!1120)
Closes issues:
- Persistent Storage: Use argon2id (zerotracepen/zerotracepen#19633)
Commits:
- Test suite: Check that Persistent Storage uses argon2id
- tps: Reduce the number of triggered udev events
- tps: Fix creation sometimes failing because udisks object is not ready
- tps: Fix
udevadm trigger --settle sometimes blocking forever
- tps-frontend: Fix first job update sometimes ignored
- tps: Send only one PropertiesChanged signal per job update
- tps: Don't restrict CPU usage during Persistent Storage creation
- tps: Keep the system responsive while creating Persistent Storage
- tps: Use argon2id
- tps: Fix stderr of failed commands not printed (zerotracepen/zerotracepen!1118)
Commits:
- tps: Fix stderr of failed commands not printed
- Test suite: Avoid TCA scenario failing if the error panel is briefly shown
(zerotracepen/zerotracepen!1114)
Closes issues:
- Fix "Scenario: The same Tor configuration is applied when the network is
reconnected" failing (zerotracepen/zerotracepen#19591)
Commits:
- Test suite: Avoid TCA scenario failing if the error panel is briefly shown
- tps: Fix InvalidBootDeviceError raised in finally block (zerotracepen/zerotracepen!1103)
Closes issues:
- "Persistent Greeter options" test suite scenario always fails
(zerotracepen/zerotracepen#19558)
- tps reports the need for "USB stick installed with a USB image or Zero Trace Pen
Installer" in unrelated failure modes (zerotracepen/zerotracepen#19588)
Commits:
- tps: Fix InvalidBootDeviceError raised in finally block
- tps: Remove unused exception