[tor-bugs] #25916 [Applications/Tor Browser]: Disable MOZ_DISABLE_CONTENT_SANDBOX
    Tor Bug Tracker & Wiki 
    blackhole at torproject.org
       
    Wed Apr 25 16:09:59 UTC 2018
    
    
  
#25916: Disable MOZ_DISABLE_CONTENT_SANDBOX
------------------------------------------+----------------------
     Reporter:  tom                       |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  ff60-esr
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 MOZ_DISABLE_CONTENT_SANDBOX can be used at runtime to disable the content
 sandbox.  If an attacker can influence this, we're probably already sunk,
 but just like we disable the "Dump all your TLS Session Keys here please"
 environment variable, we should disable this one too.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25916>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
    
    
More information about the tor-bugs
mailing list