[tor-bugs] #16010 [Applications/Tor Browser]: Get a working content process sandbox for Tor Browser on Windows

[Tor Bug Tracker & Wiki]

#16010: Get a working content process sandbox for Tor Browser on Windows
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  task                                 |         Status:
                                                 |  assigned
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  ff52-esr, tbb-e10s, tbb-security,    |  Actual Points:
  GeorgKoppen201709, TorBrowserTeam201709        |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor4
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:52 cypherpunks]:
 > Replying to [comment:51 gk]:
 > > There does not seem to be any `rbm`/`tor-browser-build` work invovled
 right now, removing the keyword.
 > And include it in the next alpha as
 > > it runs with the big patch applied and the configure switch removed
 > ?

 I thought there are no specific `tor-browser-build` changes needed as tor-
 browser patches should take care of all the things (it turns out I was
 only partly right because the `.mozconfig` file is handled directly in
 `tor-browser-build`).

 > As for
 > > the list of exported names is in the wrong order (this is a binary
 search), they also seem to be missing the underscores
 > The order and the number of symbols are correct. "function name not
 ordinal" means "it doesn't have an underscore" in this case. This is a
 violation of decorated naming convention.

 What is a violation (or who is violating it)? Do you have a link with some
 more information about that?

 That said, here is a build with sandboxing enabled that is working for me.
 Please test and report back:

 https://people.torproject.org/~gk/testbuilds/torbrowser-install-16010
 -cs1_en-US.exe
 https://people.torproject.org/~gk/testbuilds/torbrowser-install-16010
 -cs1_en-US.exe.asc

 It is based on https://gitweb.torproject.org/user/gk/tor-
 browser.git/log/?h=bug_16010_v4.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16010#comment:53>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online