debian: force shell to be bash since its default is dash and many qubes scripts rely on bash and will break in dash and added tinyproxy user

debian/postinst

@@ -34,6 +34,16 @@ case "$1" in
             fi
         }
 
+
+        # Stops Qt form using the MIT-SHM X11 Shared Memory Extension
+        echo 'export QT_X11_NO_MITSHM=1' >> /etc/profile
+
+        # Sudo's defualt umask is 077 so set sane default of 022
+        # Also don't allow QT to used shared memory to prevent errors
+        echo 'Defaults umask = 0002' >> /etc/sudoers
+        echo 'Defaults umask_override' >> /etc/sudoers
+        echo 'Defaults env_keep += "QT_X11_NO_MITSHM"' >> /etc/sudoers
+
         # reenable abrt-aplet if disable by some earlier version of package
         remove_ShowIn abrt-applet.desktop
 

debian/preinst

@@ -45,6 +45,13 @@ if [ "$1" = "install" ] ; then
         mv /etc/fstab /var/lib/qubes/fstab.orig
     fi
 
+    # --------------------------------------------------------------------------
+    # Many Qubes scripts reference /bin/sh expecting the shell to be bash but
+    # in Debian it is dash so some scripts will fail so force an alternate for
+    # /bin/sh to be /bin/bash
+    # --------------------------------------------------------------------------
+    update-alternatives --force --install /bin/sh sh /bin/bash 999
+
     # --------------------------------------------------------------------------
     # Modules setup
     # --------------------------------------------------------------------------
@@ -82,6 +89,10 @@ EOF
         groupadd -f user
         useradd -g user -G dialout,cdrom,floppy,sudo,audio,dip,video,plugdev -m -s /bin/bash user
     }
+    id -u 'tinyproxy' || {
+        groupadd -f tinyproxy
+        useradd -g tinyproxy -M --home /run/tinyproxy --shell /bin/false tinyproxy
+    }
     usermod -p '' root
     usermod -L user
     exit 0