www-client/firefox: really disable Normandy service

...while there, also disable DoH which we already disabled in normal Firefox. Fixes 23e30a1 ("www-client/firefox: disable Normandy service by default") Bug: https://bugs.gentoo.org/713782 Package-Manager: Portage-2.3.96, Repoman-2.3.22 Signed-off-by: Thomas Deutschmann <[email protected]>
hanetzer · Mar 30, 2020 · 01c322d · 01c322d
1 parent c9f05e3
commit 01c322d
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 22 deletions.
diff --git a/www-client/firefox/files/gentoo-default-prefs.js-2 b/www-client/firefox/files/gentoo-default-prefs.js-2
diff --git a/www-client/firefox/firefox-68.6.0-r2.ebuild → www-client/firefox/firefox-68.6.0-r3.ebuild b/www-client/firefox/firefox-68.6.0-r2.ebuild → www-client/firefox/firefox-68.6.0-r3.ebuild
@@ -641,7 +641,7 @@ src_install() {
 	pax-mark m "${BUILD_OBJ_DIR}"/dist/bin/xpcshell
 
 	# Add our default prefs for firefox
-	cp "${FILESDIR}"/gentoo-default-prefs.js-2 \
+	cp "${FILESDIR}"/gentoo-default-prefs.js-3 \
 		"${BUILD_OBJ_DIR}/dist/bin/browser/defaults/preferences/all-gentoo.js" \
 		|| die
 
@@ -852,22 +852,37 @@ pkg_postinst() {
 		elog
 	fi
 
-	local show_normandy_information
+	local show_doh_information show_normandy_information
 
 	if [[ -z "${REPLACING_VERSIONS}" ]] ; then
-		# New install
+		# New install; Tell user that DoH is disabled by default
+		show_doh_information=yes
 		show_normandy_information=yes
 	else
 		local replacing_version
 		for replacing_version in ${REPLACING_VERSIONS} ; do
-			if ver_test "${replacing_version}" -lt 68.6.0-r2 ; then
+			if ver_test "${replacing_version}" -lt 68.6.0-r3 ; then
+				# Tell user only once about our DoH default
+				show_doh_information=yes
+			fi
+
+			if ver_test "${replacing_version}" -lt 68.6.0-r3 ; then
 				# Tell user only once about our Normandy default
 				show_normandy_information=yes
-				break
 			fi
 		done
 	fi
 
+	if [[ -n "${show_doh_information}" ]] ; then
+		elog
+		elog "Note regarding Trusted Recursive Resolver aka DNS-over-HTTPS (DoH):"
+		elog "Due to privacy concerns (encrypting DNS might be a good thing, sending all"
+		elog "DNS traffic to Cloudflare by default is not a good idea and applications"
+		elog "should respect OS configured settings), \"network.trr.mode\" was set to 5"
+		elog "(\"Off by choice\") by default."
+		elog "You can enable DNS-over-HTTPS in ${PN^}'s preferences."
+	fi
+
 	# bug 713782
 	if [[ -n "${show_normandy_information}" ]] ; then
 		elog