Re: firefox, sndiod and pledge

2019-06-02 Thread Theo de Raadt
Alexandre Ratchov wrote: > On Thu, May 30, 2019 at 09:07:45PM -, Stuart Henderson wrote: > > On 2019-05-30, Hrvoje Popovski wrote: > > > Hi all, > > > > > > i'm not sure is this intended or not, but if sndiod isn't running and if > > > i want to open youtube video with firefox i got this

Re: firefox, sndiod and pledge

2019-06-02 Thread Alexandre Ratchov
On Thu, May 30, 2019 at 09:07:45PM -, Stuart Henderson wrote: > On 2019-05-30, Hrvoje Popovski wrote: > > Hi all, > > > > i'm not sure is this intended or not, but if sndiod isn't running and if > > i want to open youtube video with firefox i got this log > > firefox[54192]: pledge "tty",

Re: firefox, sndiod and pledge

2019-05-30 Thread Stuart Henderson
On 2019-05-30, Hrvoje Popovski wrote: > Hi all, > > i'm not sure is this intended or not, but if sndiod isn't running and if > i want to open youtube video with firefox i got this log > firefox[54192]: pledge "tty", syscall 54 and firefox crashes > when sndiod is running everything seems

Re: firefox, sndiod and pledge

2019-05-30 Thread Theo de Raadt
firefox privilege seperation is very rough. The code was written as an afterthought, and it clearly has many cases where processes perform operations directly. I expect the response will be to add pledge "audio" to permit those ioctls, and in time the firefox processes will have essentially all

Re: firefox, sndiod and pledge

2019-05-30 Thread Hrvoje Popovski
On 30.5.2019. 10:48, Solene Rapenne wrote: > On Thu, May 30, 2019 at 10:41:39AM +0200, Hrvoje Popovski wrote: >> Hi all, >> >> i'm not sure is this intended or not, but if sndiod isn't running and if >> i want to open youtube video with firefox i got this log >> firefox[54192]: pledge "tty",

Re: firefox, sndiod and pledge

2019-05-30 Thread Solene Rapenne
On Thu, May 30, 2019 at 10:41:39AM +0200, Hrvoje Popovski wrote: > Hi all, > > i'm not sure is this intended or not, but if sndiod isn't running and if > i want to open youtube video with firefox i got this log > firefox[54192]: pledge "tty", syscall 54 and firefox crashes > when sndiod is

firefox, sndiod and pledge

2019-05-30 Thread Hrvoje Popovski
Hi all, i'm not sure is this intended or not, but if sndiod isn't running and if i want to open youtube video with firefox i got this log firefox[54192]: pledge "tty", syscall 54 and firefox crashes when sndiod is running everything seems fine .. from kdump 70068 firefox CALL