[tor-bugs] #20989 [Applications/Tor Browser]: browser sandbox profile too restrictive on OSX 10.12.2

[Tor Bug Tracker & Wiki]

#20989: browser sandbox profile too restrictive on OSX 10.12.2
-------------------------------------+-------------------------------------
     Reporter:  mcs                  |      Owner:  mcs
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-security, tbb-
     Severity:  Normal               |  sandboxing, TorBrowserTeam201612
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 A user reported via a blog comment that the browser fails to start via
 ./start-browser-with-sandbox on OSX 10.2.2. See:
 https://blog.torproject.org/blog/tor-browser-65a6-released#comment-225250

 As I commented on the blog, moving the line that reads `(subpath
 "/usr/lib")` within tb.sb from the `(allow file-read-metadata ... )`
 section to the `(allow file-read* ...)` section seems to fix the problem.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20989>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online