#33410: Use RLBox for sandboxing Graphite on macOS
---------------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: task | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-security, GeorgKoppen202002 | Actual Points:
Parent ID: #32379 | Points:
Reviewer: | Sponsor:
---------------------------------------------+--------------------------
Comment (by gk):
Similarly to what I did in #32380 here come the commits/Mozilla bugs I
considered according to when they landed on `mozilla-central` (oldest
first):
{{{
1610994 (77d72088ad9a86b3942d64f4d77d3e9460e00baf) (x)
1615201 (5e113e2cf961f76fd42a09e80c05eb7d21778e5c) (okay to leave out)
1610991 (4fbd7a0f7c66b8b1356b3ba337658b0222acda77) (can skip)
1610986 (a3d8f9303d2d859785409cc285022c104b2a17d9) (okay to leave out)
(part 1)
1610986 (9df9f90a4ac17db7a0a8f2edc201fb644e99e738) (x) (part 2)
1610986 (3f2d9684cba9974a7b0554fe7f6e346ea63a90ea) (x) (part 3)
1610986 (b5ec5b84be405ef930aec26cec4d9453deef34ff) (x) (part 4)
1615595 (543b59831b33e7b7aab0f268e21b22d5493a9cd9) (okay to leave out)
1615786 (826acb823b21570c9ee4dd45d7a3fe9a732cfe4e) (x)
1610149 (017d4d5cdf2a8013f373528b989bb38acc8f0581) (x) (part 1)
1610149 (9871aad8ea0fca48b4a9dc297beaca9b3db89429) (x) (part 2)
1610149 (4cbe8542acee1486bdcc11d0b1593894dc1574d6) (okay to leave out)
}}}
As before I just picked the ones with "x" and the other were strictly
speaking no *browser* patches we needed (e.g. I bumped the `lucetc`
version in our `tor-browser-build` repo in #33410). The result is on
`bug_33410_v2` (https://gitweb.torproject.org/user/gk/tor-
browser.git/log/?h=bug_33410_v2) up for review.
I leave the ticket state as-is for now as I hope I can put up the final
patch for our `tor-browser-build` repo, too, in this ticket, so that we
have everything in one ticket this time.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33410#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
