[tor-bugs] #33410 [Applications/Tor Browser]: Use RLBox for sandboxing Graphite on macOS
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Feb 28 18:51:14 UTC 2020
#33410: Use RLBox for sandboxing Graphite on macOS
---------------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: task | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-security, GeorgKoppen202002 | Actual Points:
Parent ID: #32379 | Points:
Reviewer: | Sponsor:
---------------------------------------------+--------------------------
Comment (by gk):
Similarly to what I did in #32380 here come the commits/Mozilla bugs I
considered according to when they landed on `mozilla-central` (oldest
first):
{{{
1610994 (77d72088ad9a86b3942d64f4d77d3e9460e00baf) (x)
1615201 (5e113e2cf961f76fd42a09e80c05eb7d21778e5c) (okay to leave out)
1610991 (4fbd7a0f7c66b8b1356b3ba337658b0222acda77) (can skip)
1610986 (a3d8f9303d2d859785409cc285022c104b2a17d9) (okay to leave out)
(part 1)
1610986 (9df9f90a4ac17db7a0a8f2edc201fb644e99e738) (x) (part 2)
1610986 (3f2d9684cba9974a7b0554fe7f6e346ea63a90ea) (x) (part 3)
1610986 (b5ec5b84be405ef930aec26cec4d9453deef34ff) (x) (part 4)
1615595 (543b59831b33e7b7aab0f268e21b22d5493a9cd9) (okay to leave out)
1615786 (826acb823b21570c9ee4dd45d7a3fe9a732cfe4e) (x)
1610149 (017d4d5cdf2a8013f373528b989bb38acc8f0581) (x) (part 1)
1610149 (9871aad8ea0fca48b4a9dc297beaca9b3db89429) (x) (part 2)
1610149 (4cbe8542acee1486bdcc11d0b1593894dc1574d6) (okay to leave out)
}}}
As before I just picked the ones with "x" and the other were strictly
speaking no *browser* patches we needed (e.g. I bumped the `lucetc`
version in our `tor-browser-build` repo in #33410). The result is on
`bug_33410_v2` (https://gitweb.torproject.org/user/gk/tor-
browser.git/log/?h=bug_33410_v2) up for review.
I leave the ticket state as-is for now as I hope I can put up the final
patch for our `tor-browser-build` repo, too, in this ticket, so that we
have everything in one ticket this time.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33410#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list