Add (guix glob).

* guix/glob.scm, tests/glob.scm: New files.
* Makefile.am (MODULES): Add guix/glob.scm.
(SCM_TESTS): Add tests/glob.scm.

environment: Add --user.

This change allows overriding the home directory of all filesystem mappings to
help hide the identity of the calling user in a container.

* doc/guix.texi (Invoking guix environment)[--container]: Mention --user.
[--user]: Add item.
* guix/scripts/environment.scm (show-help): Add --user.
(%options): Add --user.
(launch-environment/container) Add 'user' parameter.  Update doc.  Override
'user-mappings' using 'override-user-mappings'.  Consider override for chdir.
(mock-passwd, user-override-home, overrid-euser-dir): New procedures.
(guix-environment): Disallow --user without --container.  Provide user to
'launch-environment/container'.
* tests/guix-environment.sh: Add user test.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

environment: Add --link-profile.

This change is motivated by attempts to run programs (like GNU IceCat) within
containers.  The 'fontconfig' program, for example, is configured explicitly
to check ~/.guix-profile for additional fonts.

There were no existing container tests in 'tests/guix-environment.sh', but I
added one anyway for this change.

* doc/guix.texi (Invoking guix environment): Add '--link-profile'.
* guix/scripts/environment.scm (show-help): Add '--link-profile'.
(%options): Add 'link-profile' as '#\P', assigned to 'link-profile?'.
(link-environment): New procedure.
(launch-environment/container): Use it when 'link-profile?'.
[link-profile?]: New parameter.
(guix-environment): Leave when '--link-prof' but not '--container'.  Add
'#:link-profile?' argument to 'launch-environment/container' application.
* tests/guix-environment-container.sh: New '--link-profile' test.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: icecat: Add more fixes from upstream mozilla-esr52.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add selected fixes from the
upstream mozilla-esr52 repository.

gnu: icecat: Update to 52.6.0-gnu1.

* gnu/packages/gnuzilla.scm (icecat): Update to 52.6.0-gnu1.
[source]: Remove patches that are no longer needed.
* gnu/packages/patches/icecat-bug-1348660-pt5.patch,
gnu/packages/patches/icecat-bug-1414945.patch,
gnu/packages/patches/icecat-bug-1415133.patch,
gnu/packages/patches/icecat-bug-1424373-pt2.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.

gnu: postgresql@9.6: Update to 9.6.8 [fixes CVE-2018-1058].

* gnu/packages/databases.scm (postgresql-9.6): Update to 9.6.8.

gnu: postgresql: Update to 10.3 [fixes CVE-2018-1058].

* gnu/packages/databases.scm (postgresql): Update to 10.3.

gnu: memcached: Update to 1.5.6.

* gnu/packages/databases.scm (memcached): Update to 1.5.6.

gnu: linux-libre: Update to 4.15.7.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.15.7.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.14: Update to 4.14.23.

* gnu/packages/linux.scm (%linux-libre-4.14-version): Update to 4.14.23.
(%linux-libre-4.14-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.85.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.85.

gnu: linux-libre@4.4: Update to 4.4.119.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.119.

gnu: php: Fix test failure.

* gnu/packages/php.scm (php)[inputs]: Use gd-for-php.
(gd-for-php): New private variable.
* gnu/packages/patches/gd-CVE-2018-5711.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.

gnu: sdcc: Fix typo in description.

* gnu/packages/sdcc.scm (sdcc)[description]: Fix (upstream) typo.  Add
hyphens.

gnu: sdcc: Update to 3.7.0.

* gnu/packages/sdcc.scm (sdcc): Update to 3.7.0.

gnu: php: Update to 7.2.3.

* gnu/packages/php.scm (php): Update to 7.2.3.

gnu: python-stem: Update to 1.6.0.

* gnu/packages/python.scm (python-stem): Update to 1.6.0.
[arguments]: Add ‘fix-test-environment’ phase.

gnu: onionshare: Update phase style.

* gnu/packages/tor.scm (onionshare)[arguments]: Substitute INVOKE for
SYSTEM* and end phase with #t.

gnu: privoxy: Update phase style.

* gnu/packages/tor.scm (privoxy)[arguments]: Substitute INVOKE for
SYSTEM* and end phase with #t.

gnu: python-stem: Update phase style.

* gnu/packages/python.scm (python-stem)[arguments]: Substitute INVOKE
for SYSTEM* and end phase with #t.