[tor-bugs] #10065 [Tor Browser]: Improve Hardening for TBB3.0

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Aug 29 17:08:43 UTC 2014


#10065: Improve Hardening for TBB3.0
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  erinn
  mikeperry              |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  MikePerry201408R, tbb-3.0, gitian,
  Browser                |  tbb-security, tbb-gitian, tbb-isec-report
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by erinn):

 My friend Graydon (founder of Rust lang) reviewed the patch and proposed
 some potential alternate patches to achieve the same goal. That's for a
 longer-term solution that we'll hopefully get into binutils, but in the
 short-term he said that (paraphrasing) the patch looks safe to him, so it
 should be fine to ship binaries built with it.

 I'll begin testing his patches and seeing if we can integrate them before
 upstream does, but I think we should use skruffy's patch until then. I
 would expect to have another one ready before the next TBB release though.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10065#comment:29>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list