mullvad-browser: remove unnecessary auto-update policies

This came up in Firefox as
https://bugzilla.mozilla.org/show_bug.cgi?id=2042197, where policies
caused different behavior to be active (also see
https://github.com/NixOS/nixpkgs/pull/524793). We should not observe any
such differences, but this indicates that the policy is unnecessary for
disabling the updater.

Tor/Mullvad Browser have supported is-packaged-app for a long time
(https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests/985),
and it's preferred by Firefox (i.e. it actually has meaning there:
https://searchfox.org/firefox-main/search?q=is-packaged-app&path=&case=false&regexp=false), so we switch from `system-install` to that one. This shouldn't
change anything else user visible.

This removes the "Your browser is being managed by your organization."
text from about:preferences and changes about:policies from showing this
singular policy to "The Enterprise Policies service is inactive." (the
intended upstream behavior), so this seems like a win for clarity.

Tested by downgrading the version in the derivation, and seeing no
update UI appear, either in the hamburger menu in the toolbar or under
Help > About Mullvad Browser.
This commit is contained in:
whispers 2026-05-27 10:44:07 -04:00
commit 75b48cfbf1
No known key found for this signature in database

View file

@ -123,12 +123,6 @@ let
};
}
);
policiesJson = writeText "policies.json" (
builtins.toJSON {
policies.DisableAppUpdate = true;
}
);
in
stdenv.mkDerivation rec {
pname = "mullvad-browser";
@ -200,7 +194,7 @@ stdenv.mkDerivation rec {
mv mullvadbrowser.real mullvadbrowser
# store state at `~/.mullvad` instead of relative to executable
touch "$MB_IN_STORE/system-install"
touch "$MB_IN_STORE/is-packaged-app"
# Add bundled libraries to libPath.
libPath=${libPath}:$MB_IN_STORE
@ -282,7 +276,6 @@ stdenv.mkDerivation rec {
# Install distribution customizations
install -Dvm644 ${distributionIni} $out/share/mullvad-browser/distribution/distribution.ini
install -Dvm644 ${policiesJson} $out/share/mullvad-browser/distribution/policies.json
runHook postInstall
'';