[tor-bugs] #22650 [Applications/Tor Browser Sandbox]: Make it clear that Pulse Audio is potentially dangerous to enable.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Jun 19 11:09:10 UTC 2017
#22650: Make it clear that Pulse Audio is potentially dangerous to enable.
----------------------------------------------+-------------------------
Reporter: yawning | Owner: yawning
Type: enhancement | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser Sandbox | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
----------------------------------------------+-------------------------
Description changed by yawning:
Old description:
> Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
> for sandbox escapes. While this is not part of the threat model in
> current releases, it should be documented as such in the UI.
New description:
Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
for sandbox escapes. While this is not part of the threat model in
current releases, it should be documented as such in the UI.
The documentation has been updated to note this possibility:
https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux?action=diff&version=22
--
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22650#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list