almet/dangerzone
1
0
Fork 0
mirror of https://github.com/freedomofpress/dangerzone.git synced 2025-04-28 09:52:37 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs
660 commits 51 branches 42 tags 53 MiB
Python 95.3%
Dockerfile 2.2%
Shell 1.2%
Makefile 0.7%
CSS 0.3%
Other 0.3%
Find a file
Alex Pyrgiotis 02151b5b9f
HACK: Deploy only Fedora 37 packages 
When deploying packages, build the RPM package for Fedora 37 and deploy
only that.

Problem
=======

The v0.4.0 release introduced Fedora 37 support. We had tested building
an RPM package for Fedora 37 and installing it successfully, so we
assumed that we had the green light for the release.

Turns out however that our CI runners were not building packages for
each of our supported Fedora release, but solely for Fedora 35. It so
happened that Fedora 35 and Fedora 36 had similar Python versions, but
the same did not apply to Fedora 37.

The end result is that users could not install Dangerzone on Fedora 37
through our official repo.

Remediation
===========

In order to help out Fedora 37 users, we plan to do the following:

1. Bump the Fedora patch level of our package to -2. This will help
   users install the new package, once we release it.
2. Change our CI pipeline to build an RPM package for Fedora 37 instead,
   and deploy that to PackageCloud.
3. Comment out all the other deployments to PackageCloud, since the rest
   of the distros are not affected.

IMPORTANT: This is a hotfix that should never be merged back in the main
branch.

Fixes #156
2023-01-25 15:16:59 +02:00
.circleci HACK: Deploy only Fedora 37 packages 2023-01-25 15:16:59 +02:00
assets Resize screenshots 2021-11-24 16:04:06 -08:00
container Fix timeout message: replace pdfseparate with pdftk 2022-12-01 14:51:52 +00:00
dangerzone Replace exit() with sys.exit() to work on Windows 2022-12-01 15:03:34 +00:00
dev_scripts sort imports with isort linter 2022-08-22 10:15:26 +01:00
install install: Build the Fedora patch level to -2 2023-01-25 10:04:50 +02:00
share Bump version to v0.4.0 2022-12-01 15:58:01 +00:00
tests Tests: add cli --archive param test 2022-11-24 11:16:37 +00:00
.gitignore migrate to pytest & test_docs -> tests/test_docs 2022-09-13 13:07:58 +01:00
BUILD.md Align Poetry instructions across OSes 2022-11-07 12:03:24 +02:00
CHANGELOG.md Changelog: add exit confirmation feature 2022-12-01 15:24:19 +00:00
INSTALL.md Support Ubuntu 22.10 "Kinetic Kudu" 2022-12-01 01:05:00 +02:00
LICENSE Remove useless files from dangerzone-converter, and move files out of separate scripts directory 2021-11-24 12:47:39 -08:00
Makefile Fix a minor typo 2022-10-27 13:44:18 +01:00
poetry.lock Fix limited PATH in produced .exe and .msi 2022-12-01 14:58:30 +00:00
pyproject.toml Bump version to v0.4.0 2022-12-01 15:58:01 +00:00
README.md Copy installation instructions to source 2022-11-10 16:35:43 +02:00
RELEASE.md Update the QA section in RELEASE.md 2022-12-01 17:53:48 +02:00
setup-windows.py sort imports with isort linter 2022-08-22 10:15:26 +01:00
setup.py Add long description to setup.py 2022-10-27 14:49:25 +01:00
stdeb.cfg Remove requests dependency 2022-08-19 15:16:14 +01:00

README.md

Dangerzone

Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF.

Settings Converting

Dangerzone works like this: You give it a document that you don't know if you can trust (for example, an email attachment). Inside of a sandbox, Dangerzone converts the document to a PDF (if it isn't already one), and then converts the PDF into raw pixel data: a huge list of RGB color values for each page. Then, in a separate sandbox, Dangerzone takes this pixel data and converts it back into a PDF.

Read more about Dangerzone in the blog post Dangerzone: Working With Suspicious Documents Without Getting Hacked.

Getting started

You can also install Dangerzone for Mac using Homebrew: brew install --cask dangerzone

Some features

  • Sandboxes don't have network access, so if a malicious document can compromise one, it can't phone home
  • Dangerzone can optionally OCR the safe PDFs it creates, so it will have a text layer again
  • Dangerzone compresses the safe PDF to reduce file size
  • After converting, Dangerzone lets you open the safe PDF in the PDF viewer of your choice, which allows you to open PDFs and office docs in Dangerzone by default so you never accidentally open a dangerous document

Dangerzone can convert these types of document into safe PDFs:

  • PDF (.pdf)
  • Microsoft Word (.docx, .doc)
  • Microsoft Excel (.xlsx, .xls)
  • Microsoft PowerPoint (.pptx, .ppt)
  • ODF Text (.odt)
  • ODF Spreadsheet (.ods)
  • ODF Presentation (.odp)
  • ODF Graphics (.odg)
  • Jpeg (.jpg, .jpeg)
  • GIF (.gif)
  • PNG (.png)

Dangerzone was inspired by Qubes trusted PDF, but it works in non-Qubes operating systems. It uses containers as sandboxes instead of virtual machines (using Docker for macOS, Windows, and Debian/Ubuntu, and podman for Fedora).

Set up a development environment by following these instructions.