Normally this file is exempted from unveil by "pledge dns", but if the user
has disabled pledge (which is required for using some features) it will no
longer be exempted, so must be handled explicitly by unveil.
Problem reported by Stefan Hagen, ok jcs landry
See https://www.mozilla.org/en-US/firefox/78.1.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/
More or less a copy of what was in www/mozilla-firefox before the 79.0
upgrade, including:
- enable unveil integration
- move to /etc/firefox-esr/{pledge,unveil}.{main,gpu,content}
instead of about:config knobs (maybe warrants current.html entry ?)
- bring in the jumbo patch fixing 'open with' mime handling
- stop building with systemwide sqlite3, unsupported upstream
- ditch old patches merged upstream in the 68->78 cycles
- use the shipped desktop file instead of our own
- sync README
briefly tested opening a pdf, an flv file and an archive with an
external handler, and accessed webcam with webrtc.
- See http://www.mozilla.org/en-US/firefox/24.5.0/releasenotes/
- Fixes MFSA-2014-34,35,37,38,42,43,44 & 46
- add a default prefs all-openbsd.js file, pointing
spellchecker.dictionary_path to ${LOCALBASE}/share/mozilla-dicts/ so
that systemwide dictionaries are looked for by default.
- while here the same file disables safebrowsing feature, as is already
done in www/mozilla-firefox.
Firefox ESR is intended for groups who deploy and maintain the desktop
environment in large organizations such as universities and other
schools, county or city governments and businesses. During the extended
cycle, no new features will be added to a Firefox ESR; only
high-risk/high-impact security vulnerabilities or major stability fixes
will be corrected.
Note that using it on OpenBSD is NOT supported by mozilla. People
willing to deploy it should subscribe to the EWG mailing list.
http://www.mozilla.org/en-US/firefox/organizations/faq/
Installs as firefox-esr and doesnt conflict with mainline www/mozilla-firefox.
Learn to use several profiles if you plan to use both.
req'd by several.
