Have Icedove built from Stretch with our patchset applied in Tails 3.0
Currently ISO images built from feature/stretch have Stretch's Icedove. Obviously we don't want to ship this in Tails 3.0. So at some point, if our patchset does not make it into Icedove before the freeze, we'll need to install our custom packages.
Enable the feature-11712-thunderbird APT overlay.
This will install thunderbird 1:45.8.0-3+tails2 built for amd64 on
Debian Stretch. Naturally it is a first step for the Icedove →
Thunderbird migration as well. And this package contains an AppArmor
profile (unlike the Debian Jessie package).
These packages also has the patch from the following upstream ticket
We enable browser.download.forbid_open_with so the "Open with..."
option is hidden in the attachment download dialog, since
Thunderbird's AppArmor profile does not allow starting applications in
The corresponding documentation is missing and I haven't seen this coordinated
with our tech writers:
I'd rather not break parts of the UX without a clear plan to explain
it to our users.
Our plan was to have this in 3.0~beta4 (April 18), but it's currently blocked by #11964. Worst case, we can drop that blocking relationship by not shipping the AppArmor profile, so in any case we can rebuild icedove for 3.0~beta4 from the Stretch snapshot we currently use (I say frozen to avoid blocking on #12242, that I don't want to tackle for beta4; too bad, we won't get the security fixes brought by 45.8).
anonym, are you still up to taking care of this? If yes, then you can do it whenever you want between now and April 16 :)