[tor-bugs] #25916 [Applications/Tor Browser]: Disable MOZ_DISABLE_CONTENT_SANDBOX

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Apr 25 16:09:59 UTC 2018


#25916: Disable MOZ_DISABLE_CONTENT_SANDBOX
------------------------------------------+----------------------
     Reporter:  tom                       |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  ff60-esr
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 MOZ_DISABLE_CONTENT_SANDBOX can be used at runtime to disable the content
 sandbox.  If an attacker can influence this, we're probably already sunk,
 but just like we disable the "Dump all your TLS Session Keys here please"
 environment variable, we should disable this one too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25916>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list