[tor-bugs] #20773 [Applications/Tor Browser Sandbox]: Stop mounting `/proc` in the various containers once this is feasable.

Thu Dec 8 20:21:45 UTC 2016

#20773: Stop mounting `/proc` in the various containers once this is feasable.
----------------------------------------------+-------------------------
 Reporter:  yawning                           |          Owner:  yawning
     Type:  enhancement                       |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------

Comment (by yawning):

 One thing that I *could* do, but would rather not is to do something like
 [https://github.com/lxc/lxcfs lxcfs] and have the container "/proc" be
 serviced by a FUSE process in the host system.

 This would work, but I'm inclined to reject this due to:

  * Yet another dependency, that needs to be SUID root.
  * It would be a lot of code.
  * Patching firefox to not fall over seems easier than "not-invented-here-
 ing" a filesystem.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20773#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online