From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 19 09:44:25 2019 Received: (at 34565) by debbugs.gnu.org; 19 Feb 2019 14:44:25 +0000 Received: from localhost ([127.0.0.1]:54039 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gw6dF-0007Ml-3H for submit@debbugs.gnu.org; Tue, 19 Feb 2019 09:44:25 -0500 Received: from lepiller.eu ([89.234.186.109]:51382) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gw6dD-0007Mb-FT for 34565@debbugs.gnu.org; Tue, 19 Feb 2019 09:44:24 -0500 Received: from webmail.lepiller.eu (static-176-182-42-79.ncc.abo.bbox.fr [176.182.42.79]) by lepiller.eu (OpenSMTPD) with ESMTPSA id cf91b538 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO) for <34565@debbugs.gnu.org>; Tue, 19 Feb 2019 14:44:17 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Tue, 19 Feb 2019 15:44:17 +0100 From: Julien Lepiller To: 34565@debbugs.gnu.org Subject: Re: bug#34565: ungoogled-chromium contains Widevine DRM In-Reply-To: References: <1550547897.31222.1.camel@jxself.org> <20190219070601.GA8273@jasmine.lan> <1550582906.5431.7.camel@jxself.org> Message-ID: X-Sender: julien@lepiller.eu User-Agent: Roundcube Webmail/1.3.8 X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34565 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Le 2019-02-19 14:42, Julien Lepiller a écrit : > Le 2019-02-19 14:28, Jason Self a écrit : >> On Tue, 2019-02-19 at 02:06 -0500, Leo Famulari wrote: >> Why do you think this is the case? >> >> We know Chromium comes with it. Have you looked through ungoogled- >> chromium to see where it's being deleted? > > Our package definition has two widevine-related headers listed as > preserved third-party stuff... I'm not sure how widevine normally > gets into chromium, but if we don't have it, I guess we should > not need these headers? There might actually be an issue, but > I'm not sure how to check. Where is widevine in upstream (non > ungoogled) chromium? Is it downloaded at runtime? > > IIUC, the rest of this widevine directory is removed before > building anything, so maybe there's nothing to worry about > after all? So I've downloaded the source tarball with `guix build -S chromium` and here's what I found in it: $ find -name cdm ./media/cdm ./third_party/widevine/cdm ./chrome/android/java/src/org/chromium/chrome/browser/media/cdm ./chrome/browser/media/android/cdm ./content/renderer/media/cdm ./chromecast/media/cdm ./components/cdm $ find -name widevine ./third_party/widevine $ find -name '*widevine*' ./third_party/widevine ./third_party/widevine/cdm/android/widevine_cdm_version.h ./third_party/widevine/cdm/widevinecdmadapter.ver ./third_party/widevine/cdm/stub/widevine_cdm_version.h ./third_party/widevine/cdm/widevine.gni ./third_party/widevine/cdm/widevine_cdm_version.h ./third_party/widevine/cdm/widevine_cdm_common.h ./chrome/common/widevine_cdm_constants.h ./chrome/common/widevine_cdm_constants.cc ./chrome/browser/component_updater/widevine_cdm_component_installer.cc ./chrome/browser/component_updater/widevine_cdm_component_installer.h ./components/cdm/common/widevine_drm_delegate_android.cc ./components/cdm/common/widevine_drm_delegate_android.h ./components/cdm/renderer/widevine_key_system_properties.cc ./components/cdm/renderer/widevine_key_system_properties.h This ./chrome/browser/component_updater/widevine_cdm_component_installer.cc looks particularly suspicious to me... Now, it seems that widevine stuff only gets built when the ENABLE_WIDEVINE option is set, and it doesn't seem to be the case in guix' package. Since I don't understand how the browser gets built, so I'm not sure about the default. In any case, it would be good to get rid of these files even if they aren't built. HTH!