[tbb-bugs] #20352 [Applications/Tor Browser]: Integrate sandboxed Tor Browser into our gitian build system

[Tor Bug Tracker & Wiki]

#20352: Integrate sandboxed Tor Browser into our gitian build system
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-gitian, tbb-sandboxing,          |  Actual Points:
  GeorgKoppen201611, TorBrowserTeam201612R       |
Parent ID:  #19750                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by yawning):

 So, I just pushed a huge change to go back to libseccomp2 for all my
 seccomp needs, primarily so I can filter arguments on x86.  This
 *shouldn't* change anything since we pull it down as a dependency anyway,
 but if anything breaks there, that would be why.

 Debian jessie users will need to fetch libseccomp2 from backports to run
 the thing in addition to bubblewrap, because the library flat out refuses
 to filter by conditional on anything pre 2.2.1, but, filtering arguments
 is kind of important.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20352#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online