[tor-bugs] #22650 [Applications/Tor Browser Sandbox]: Make it clear that Pulse Audio is potentially dangerous to enable.

[Tor Bug Tracker & Wiki]

#22650: Make it clear that Pulse Audio is potentially dangerous to enable.
----------------------------------------------+-------------------------
 Reporter:  yawning                           |          Owner:  yawning
     Type:  enhancement                       |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Applications/Tor Browser Sandbox  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------
Description changed by yawning:

Old description:

> Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
> for sandbox escapes.  While this is not part of the threat model in
> current releases, it should be documented as such in the UI.

New description:

 Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
 for sandbox escapes.  While this is not part of the threat model in
 current releases, it should be documented as such in the UI.

 The documentation has been updated to note this possibility:
 https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux?action=diff&version=22

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22650#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online