[tor-bugs] #20806 [Applications/Tor Browser Sandbox]: Add an option to disable including `libavcodec.so` in the firefox container.

Mon Nov 28 09:16:45 UTC 2016

#20806: Add an option to disable including `libavcodec.so` in the firefox
container.
--------------------------------------------------+---------------------
     Reporter:  yawning                           |      Owner:  yawning
         Type:  enhancement                       |     Status:  new
     Priority:  Medium                            |  Milestone:
    Component:  Applications/Tor Browser Sandbox  |    Version:
     Severity:  Normal                            |   Keywords:
Actual Points:                                    |  Parent ID:
       Points:                                    |   Reviewer:
      Sponsor:                                    |
--------------------------------------------------+---------------------
 Right now, the firefox container explcitly includes the "best" libavcodec
 shared library (dlopen()ed by firefox), 100% of the time as a concession
 to usability.

 Since this is optional, and there are usage models that do not require
 video/audio playback, this should be made optional like how PulseAudio
 currently is, under the rationale that people who can live with omitting
 it, can gain reduced attack surface.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20806>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online