[tor-bugs] #21912 [Applications/Tor Browser Sandbox]: Deal with the deprecation of the `hardened` channel.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Apr 10 19:37:07 UTC 2017


#21912: Deal with the deprecation of the `hardened` channel.
--------------------------------------------------+---------------------
     Reporter:  yawning                           |      Owner:  yawning
         Type:  defect                            |     Status:  new
     Priority:  High                              |  Milestone:
    Component:  Applications/Tor Browser Sandbox  |    Version:
     Severity:  Normal                            |   Keywords:
Actual Points:                                    |  Parent ID:
       Points:                                    |   Reviewer:
      Sponsor:                                    |
--------------------------------------------------+---------------------
 Per: https://trac.torproject.org/projects/tor/ticket/20814#comment:11

 The `hardened` channel for Tor Browser is going away.  The sandbox will
 need updates for this.

 Easy changes:
  * Make it impossible to install the `hardened` channel.
  * The selfrando specific "disable AESNI in NSS" workaround should apply
 to the `alpha` channel.

 Release after the `hardened` removal:
  * Remove ASAN specific workarounds.
  * Purge the remnants of `hardened` except for the migration path
 (Can/should be done immediately if the migration path for sandboxed users
 is a reinstall).

 How the actual migration from `hardened` to `alpha` is handled on the
 sandboxing end is currently an open question.  The easy thing to do would
 be to force a reinstall, but people probably don't realize that a
 `reinstall` will obliterate all existing preferences and bookmarks.  The
 more involved fix would be to modify the updater to handle channel
 migration.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21912>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list