[tor-bugs] #22650 [Applications/Tor Browser Sandbox]: Make it clear that Pulse Audio is potentially dangerous to enable.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jun 19 11:08:39 UTC 2017


#22650: Make it clear that Pulse Audio is potentially dangerous to enable.
--------------------------------------------------+---------------------
     Reporter:  yawning                           |      Owner:  yawning
         Type:  enhancement                       |     Status:  new
     Priority:  Medium                            |  Milestone:
    Component:  Applications/Tor Browser Sandbox  |    Version:
     Severity:  Normal                            |   Keywords:
Actual Points:                                    |  Parent ID:
       Points:                                    |   Reviewer:
      Sponsor:                                    |
--------------------------------------------------+---------------------
 Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
 for sandbox escapes.  While this is not part of the threat model in
 current releases, it should be documented as such in the UI.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22650>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list