[tor-bugs] #20989 [Applications/Tor Browser]: browser sandbox profile too restrictive on OSX 10.12.2

[Tor Bug Tracker & Wiki]

#20989: browser sandbox profile too restrictive on OSX 10.12.2
-------------------------------------------------+-------------------------
 Reporter:  mcs                                  |          Owner:  mcs
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-security, tbb-sandboxing,        |  Actual Points:
  TorBrowserTeam201612                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Yes, but it is still no enough it seems:
 {{{
 b0x:Sandboxed Tor Browser admin$ ./start-browser-with-sandbox &
 [2] 6065
 Thunder:Sandboxed Tor Browser admin$ [warn] kq_init: detected broken
 kqueue; not using.: Undefined error: 0
 2016-12-15 19:25:50.288 firefox[6070:278989] kCFURLVolumeIsAutomountedKey
 missing for file://localhost/Volumes/Tor%20Browser/: The file “Tor
 Browser” couldn’t be opened because you don’t have permission to view it.
 1481822750600 addons.xpi-utils ERROR Unable to read anything useful from
 the database
 0 migrated.
 Dec 15 19:25:52.000 [notice] New control connection opened.
 Dec 15 19:25:52.000 [warn] Got authentication cookie with wrong length (0)
 Dec 15 19:25:52.000 [notice] New control connection opened.
 2016-12-15 17:25:54.748 firefox[6070:278987] unable to obtain
 configuration from
 file://localhost/Library/Preferences/com.apple.ViewBridge.plist due to
 Error Domain=NSCocoaErrorDomain Code=257 "The file
 “com.apple.ViewBridge.plist” couldn’t be opened because you don’t have
 permission to view it."
 UserInfo={NSFilePath=/Library/Preferences/com.apple.ViewBridge.plist,
 NSUnderlyingError=0x7f8f0e911220 {Error Domain=NSPOSIXErrorDomain Code=1
 "Operation not permitted"}}
 2016-12-15 17:25:54.754 firefox[6070:278987] IMKInputSession
 presentFunctionRowItemTextInputViewWithEndpoint:completionHandler: : *NO*
 NSRemoteViewController to client, NSError=Error Domain=NSCocoaErrorDomain
 Code=4097 "connection from pid 0" UserInfo={NSDebugDescription=connection
 from pid 0}, com.apple.inputmethod.EmojiFunctionRowItem
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20989#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online