[tor-bugs] #10943 [Tor Messenger]: Sandboxing Instantbird

[Tor Bug Tracker & Wiki]

#10943: Sandboxing Instantbird
-------------------------------+------------------------------------------
     Reporter:  sukhbir        |      Owner:  ioerror
         Type:  task           |     Status:  new
     Priority:  normal         |  Milestone:
    Component:  Tor Messenger  |    Version:
   Resolution:                 |   Keywords:  SponsorO, TorMessengerPublic
Actual Points:                 |  Parent ID:
       Points:                 |
-------------------------------+------------------------------------------

Comment (by ioerror):

 Sandboxing on GNU/Linux is dependent on how we ship - if we're packaging
 for Debian GNU/Linux (rather than HURD), we should probably include an
 AppArmor profile as well as seccomp support. If we're packaging for
 another platform, I think we need to consider what is possible - SELinux
 policy files seem to be relevant, as well as others.

 However - with that said - I'd like to suggest that we use Subgraph's
 sandboxing system:

   https://github.com/subgraph/oz

 We will absolutely not build something better for this application in the
 next month or two.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10943#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online