Tor Browser: sync unveil changes from firefox-esr
Original commit message from landry@:
"www/firefox-esr: add some missing unveils
- content process already accesses /etc/localtime, add /usr/share/zoneinfo
- main process already has /usr/share/zoneinfo, add /etc/localtime
- main process sometimes parses /etc/hosts (mostly on network.trr.mode
changes ?) so unveil it.
- unveil.socket is wrong but time is running out, and the socket process
isnt used much anyway (network.http.network_access_on_socket_process.enabled defaults to false)
required by upcoming changes to pledge/unveil"
Repair virt-manager by not using obsolete libxml2 python bindings
anymore. Cherry-pick commits from git master branch to use xmletree.py
backend.
OK aja
www/firefox-esr: add some missing unveils
- content process already accesses /etc/localtime, add /usr/share/zoneinfo
- main process already has /usr/share/zoneinfo, add /etc/localtime
- main process sometimes parses /etc/hosts (mostly on network.trr.mode
changes ?) so unveil it.
- unveil.socket is wrong but time is running out, and the socket process
isnt used much anyway (network.http.network_access_on_socket_process.enabled defaults to false)
required by upcoming changes to pledge/unveil
www/mozilla-firefox: add some missing unveils
- content process already accesses /etc/localtime, add /usr/share/zoneinfo
- main process already has /usr/share/zoneinfo, add /etc/localtime
- main process sometimes parses /etc/hosts (mostly on network.trr.mode
changes ?) so unveil it.
- unveil.socket is wrong but time is running out, and the socket process
isnt used much anyway (network.http.network_access_on_socket_process.enabled defaults to false)
required by upcoming changes to pledge/unveil
set MODCLANG_COMPILER_LINKS = No, we only want to install ports clang
(for clang-scan-deps which is needed for C++20 modules but not included
in base), we don't want to use it to compile.
this still adds as an unwanted BDEP on ports-gcc archs, but at least it
doesn't then get in the way of build. (we do want to use the module rather
than add a BDEP on a hardcoded lang/llvm/19).
found by jca@