[tor-bugs] #33410 [Applications/Tor Browser]: Use RLBox for sandboxing Graphite on macOS

[Tor Bug Tracker & Wiki]

#33410: Use RLBox for sandboxing Graphite on macOS
---------------------------------------------+--------------------------
 Reporter:  gk                               |          Owner:  tbb-team
     Type:  task                             |         Status:  new
 Priority:  Medium                           |      Milestone:
Component:  Applications/Tor Browser         |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  tbb-security, GeorgKoppen202002  |  Actual Points:
Parent ID:  #32379                           |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+--------------------------

Comment (by gk):

 Similarly to what I did in #32380 here come the commits/Mozilla bugs I
 considered according to when they landed on `mozilla-central` (oldest
 first):
 {{{
 1610994 (77d72088ad9a86b3942d64f4d77d3e9460e00baf) (x)
 1615201 (5e113e2cf961f76fd42a09e80c05eb7d21778e5c) (okay to leave out)
 1610991 (4fbd7a0f7c66b8b1356b3ba337658b0222acda77) (can skip)
 1610986 (a3d8f9303d2d859785409cc285022c104b2a17d9) (okay to leave out)
 (part 1)
 1610986 (9df9f90a4ac17db7a0a8f2edc201fb644e99e738) (x) (part 2)
 1610986 (3f2d9684cba9974a7b0554fe7f6e346ea63a90ea) (x) (part 3)
 1610986 (b5ec5b84be405ef930aec26cec4d9453deef34ff) (x) (part 4)
 1615595 (543b59831b33e7b7aab0f268e21b22d5493a9cd9) (okay to leave out)
 1615786 (826acb823b21570c9ee4dd45d7a3fe9a732cfe4e) (x)
 1610149 (017d4d5cdf2a8013f373528b989bb38acc8f0581) (x) (part 1)
 1610149 (9871aad8ea0fca48b4a9dc297beaca9b3db89429) (x) (part 2)
 1610149 (4cbe8542acee1486bdcc11d0b1593894dc1574d6) (okay to leave out)
 }}}
 As before I just picked the ones with "x" and the other were strictly
 speaking no *browser* patches we needed (e.g. I bumped the `lucetc`
 version in our `tor-browser-build` repo in #33410). The result is on
 `bug_33410_v2` (https://gitweb.torproject.org/user/gk/tor-
 browser.git/log/?h=bug_33410_v2) up for review.

 I leave the ticket state as-is for now as I hope I can put up the final
 patch for our `tor-browser-build` repo, too, in this ticket, so that we
 have everything in one ticket this time.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33410#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online