[tor-talk] TBB, iptables, and seperation of concerns

[Fabio Pietrosanti (naif)]

On 12/12/11 7:00 AM, Chris wrote:
> I have a few problems with the TBB.
> 
> 1. It isn't in a repository. For security reasons this should be changed.
> 
> 2. It merges polipo/Tor together with everything else when Tor should be
> run as a separate user with an unrestricted Internet connection while the
> user should run Firefox (with appropriate settings) under a restricted
> user account with no direct Internet.

IMHO the "Starter" of the TBB should be much more intelligent by providing:

a) decompression of TBB
b) splash logo with progress-bar
c) app-level jailing of various application


For point "c" i mean providing a sort of "app-armor" or "*osx" sandbox
system but at application level with library preloading, directly
managing the security profile from the starter.

That way it could be much portable the "application security" of the system.

-naif