July/August 2017 ISO TODO list

[dma]

• Remove thumbnailers left in /usr/share/thumbnailers
• Package CoyIM latest stable release
• Add tun* to keyfile entry in /etc/NetworkManager/conf.d/oz.conf (oz pkg)
• Auditd should be installed by default
• Make our own desktop-base package so that Debian does not replace grub background (DEFERRED to a later release: subgraph-grub-config deals with this properly now)
• Remove grub from dependencies in subgraph-grub-config
• Strip down subgraph-grub-config to bare minimum
• Make our own base-files package so that Debian does not replace /etc/issue and other distro files https://github.com/subgraph/base-files
• Make our own distro-info-data package with our version info in /usr/share/distro-info/subgraph.csv
• Figure out what to do with the Debian lsb-release package so that it uses our distro-info CSV
• Relax NetworkManager AppArmor policy (for now), package, drop in repo (Policy put in complain mode for the time being) (DEFERRED)
  • Add exceptions to make sure wifi doesn't break (encountered this on a few different systems after our initial fix) (DEFERRED)
  • Allow arping (DEFERRED)
  • Address Oz bridge violations: AppArmor violation related to bridge profiles #229 (DEFERRED)
• Add oz listbridges command / oz-daemon RPC
• Fix ~/Downloads in oz sandboxes
• Test and put into repo oz-daemon 0.2.1
• Clean up and package sgos ferm config, drop in repo
• Package sgos gpg-config, drop in repo
• Package sgos font config, drop in repo
• subgraph-defaults: turn off "automatic-decompression" in Nautilus
• subgraph-defaults: Add OnionShare and Ricochet IM to favorite applications
• Package updated chromium Oz profile + chronion profile, drop in repo (what about extensions?)
• Add socks5 proxy port to metaproxy for chronion and other non-torified apps (DEFERRED/CHANGED)
• Add yubico-piv related packages
• Re-organize ferm configuration files to be more modular and robust
• Add oz multibridge rules to ferm configs
• Disable ferm cache
• Update onionshare roflcoptor filter
• Review and merge @david415's PRs
• Package roflcoptor, drop in repo
• Deal with Debian Icedove->Thunderbird migration
  • Migrate profile and sandbox b1519866
  • Package changes (??)
  • Fix live-build config ccec485
• Include fw-daemon packages to reflect latest features (DEFERRED)
• Add .hexchat.conf to skel in live disc config to implement Tor SOCKS proxy config

[dma]

Closed with September ISO release, missed targets moved to #295.