scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2025-12-24 14:27:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: update chromium configuration

Browse Source
This commit is contained in:
qoijjj
2024-07-01 23:45:00 -07:00
committed by GitHub
parent 9c7630cc79
commit a25075facc
3 changed files with 34 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/files/usr/etc/chromium/chromium.conf.md
View File

@@ -32,4 +32,8 @@
**Disable autofill requests**
`AutofillServerCommunication`
`AutofillServerCommunication`
**Enable content settings partitioning**
`ContentSettingsPartitioning`

28
config/files/usr/etc/chromium/vanadium_comparison.readme.md
View File

@@ -164,4 +164,30 @@ A list of [Vanadium patches](https://github.com/GrapheneOS/Vanadium/blob/main/pa
| [0160-enable-hybrid-post-quantum-key-exchange-on-Android](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0160-enable-hybrid-post-quantum-key-exchange-on-Android.patch) | enable hybrid post-quantum key exchange on Android | No, android only | N/A |
| [0161-Resolve-more-regex-syntax-warning-for-python-scripts](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0161-Resolve-more-regex-syntax-warning-for-python-scripts.patch) | Resolve more regex syntax warning for python scripts for Python 3.12 | No, not desired | N/A |
| [0162-fix-more-syntax-warnings-in-third_party-jni_zero-for](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0162-fix-more-syntax-warnings-in-third_party-jni_zero-for.patch) | fix more syntax warnings in //third_party/jni_zero for Python 3.12 | No, not desired | N/A |
| [0163-fix-another-Python-3.12-syntax-warning](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0163-fix-another-Python-3.12-syntax-warning.patch) | fix another Python 3.12 syntax warning | No, not desired | N/A |
| [0163-fix-another-Python-3.12-syntax-warning](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0163-fix-another-Python-3.12-syntax-warning.patch) | fix another Python 3.12 syntax warning | No, not desired | N/A |
| [0164-Revert-Fixit-Update-Password-Manager-to-Google-Passw](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0164-Revert-Fixit-Update-Password-Manager-to-Google-Passw.patch) | Revert "[Fixit] Update Password Manager to Google Password Manager" | No, Android only | N/A |
| [0165-Enable-content-settings-partitioning-by-default](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0165-Enable-content-settings-partitioning-by-default.patch) | Enable content settings partitioning by default | Yes | Set [in secureblue chromium.conf](https://github.com/secureblue/secureblue/blob/live/config/scripts/setchromiumflags.sh) |
| [0166-Match-skipping-compatibility-check-default-value-che](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0166-Match-skipping-compatibility-check-default-value-che.patch) | Match skipping compatibility check default value checks in
java as well | No, Android only | N/A |
| [0167-Set-Toolbar-shortcut-default-to-new-tab-instead-of-a](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0167-Set-Toolbar-shortcut-default-to-new-tab-instead-of-a.patch) | Set Toolbar shortcut default to new tab instead of auto | No, Android only | N/A |
| [0168-temp-config-generator-Forcibly-skip-checks-for-andro](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0168-temp-config-generator-Forcibly-skip-checks-for-andro.patch) | temp: config-generator: Forcibly skip checks for android | No, Android only | N/A |
| [0169-temp-config-generator-Forcibly-disable-translate-opt](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0169-temp-config-generator-Forcibly-disable-translate-opt.patch) | temp: config-generator: Forcibly disable translate option on
toolbar shortcut options | No, Android only | N/A |
| [0170-Revert-M122-content-make-disable-jit-actually-disabl](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0170-Revert-M122-content-make-disable-jit-actually-disabl.patch) | Revert "[M122] content: make disable-jit actually disable
high-tier v8 compilers" | Yes | Set [in secureblue chromium.conf](https://github.com/secureblue/secureblue/blob/live/config/scripts/setchromiumflags.sh) |
| [0171-config-parser-Add-support-for-conditional-parsing-of](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0171-config-parser-Add-support-for-conditional-parsing-of.patch) | config-parser: Add support for conditional parsing of
portions of config app | No, Android only | N/A |
| [0172-config-Add-new-definitions-for-additional-components](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0172-config-Add-new-definitions-for-additional-components.patch) | config: Add new definitions for additional components and its
conditions | No, Android only | N/A |
| [0173-config-Add-support-for-generating-configs-with-addit](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0173-config-Add-support-for-generating-configs-with-addit.patch) | config: Add support for generating configs with additional components and its condition | No, Android only | N/A |
| [0174-config-parser-add-support-for-parsing-conditional-co](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0174-config-parser-add-support-for-parsing-conditional-co.patch) | config-parser: add support for parsing conditional components | No, Android only | N/A |
| [0175-Add-a-method-to-hook-at-Application.attachBaseContex](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0175-Add-a-method-to-hook-at-Application.attachBaseContex.patch) | Add a method to hook at Application.attachBaseContext() call | No, Android only | N/A |
| [0176-Add-hooks-for-ChromeApplicationImpl-to-initialize-co](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0176-Add-hooks-for-ChromeApplicationImpl-to-initialize-co.patch) | Add hooks for ChromeApplicationImpl to initialize conditionals for config app | No, Android only | N/A |
| [0177-content-filtering-Add-support-for-updating-content-f](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0177-content-filtering-Add-support-for-updating-content-f.patch) | content-filtering: Add support for updating content filtering
when accept-language is changed | No, Android only | N/A |
| [0178-Add-support-for-conditional-content-filtering-compon](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0178-Add-support-for-conditional-content-filtering-compon.patch) | Add support for conditional content filtering component based
on language settings | No, Android only | N/A |
| [0179-add-support-for-german-specific-langauge-content-fil](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0179-add-support-for-german-specific-langauge-content-fil.patch) | add support for german-specific langauge content filtering
when German language is set | No, Android only | N/A |
| [0180-temporary-config-disable-conditional-component-if-de](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0180-temporary-config-disable-conditional-component-if-de.patch) | temporary: config: disable conditional component if declared
such in config holder app | No, Android only | N/A |

4
config/scripts/setchromiumflags.sh
View File

@@ -8,10 +8,10 @@ sed -i '/--enable-chrome-browser-cloud-management/d' /etc/chromium/chromium.conf
# https://bugzilla.redhat.com/show_bug.cgi?id=2293202
sed -i '/--enable-native-gpu-memory-buffers/d' /etc/chromium/chromium.conf
sed -i 's/FEATURES=""/FEATURES="SplitCacheByNetworkIsolationKey,SplitCodeCacheByNetworkIsolationKey,SplitHostCacheByNetworkIsolationKey,PrefetchPrivacyChanges,IsolateSandboxedIframes,StrictOriginIsolation,PartitionConnectionsByNetworkIsolationKey,PartitionHttpServerPropertiesByNetworkIsolationKey,PartitionSSLSessionsByNetworkIsolationKey,PartitionNelAndReportingByNetworkIsolationKey,EnableCrossSiteFlagNetworkIsolationKey,"/g' /etc/chromium/chromium.conf
sed -i 's/FEATURES=""/FEATURES="SplitCacheByNetworkIsolationKey,SplitCodeCacheByNetworkIsolationKey,SplitHostCacheByNetworkIsolationKey,PrefetchPrivacyChanges,IsolateSandboxedIframes,StrictOriginIsolation,PartitionConnectionsByNetworkIsolationKey,PartitionHttpServerPropertiesByNetworkIsolationKey,PartitionSSLSessionsByNetworkIsolationKey,PartitionNelAndReportingByNetworkIsolationKey,EnableCrossSiteFlagNetworkIsolationKey,ContentSettingsPartitioning,"/g' /etc/chromium/chromium.conf
echo '
CHROMIUM_FLAGS+=" --ozone-platform=wayland --no-pings --disk-cache-dir=/dev/null --extension-content-verification=enforce_strict --extensions-install-verification=enforce_strict --disable-features=PrivacySandboxSettings4,InterestFeedV2,NTPPopularSitesBakedInContent,UsePopularSitesSuggestions,MediaDrmPreprovisioning,AutofillServerCommunication,DisableThirdPartyStoragePartitioningDeprecationTrial,OptimizationHints,OptimizationHintsFetching,OptimizationHintsFetchingAnonymousDataConsent"
CHROMIUM_FLAGS+=" --ozone-platform=wayland --js-flags=--jitless --no-pings --disk-cache-dir=/dev/null --extension-content-verification=enforce_strict --extensions-install-verification=enforce_strict --disable-features=PrivacySandboxSettings4,InterestFeedV2,NTPPopularSitesBakedInContent,UsePopularSitesSuggestions,MediaDrmPreprovisioning,AutofillServerCommunication,DisableThirdPartyStoragePartitioningDeprecationTrial,OptimizationHints,OptimizationHintsFetching,OptimizationHintsFetchingAnonymousDataConsent"
' >> /etc/chromium/chromium.conf