[tor-bugs] #33410 [Applications/Tor Browser]: Use RLBox for sandboxing Graphite on macOS

[Tor Bug Tracker & Wiki]

#33410: Use RLBox for sandboxing Graphite on macOS
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-security, GeorgKoppen202002,     |  Actual Points:
  TorBrowserTeam202002R                          |
Parent ID:  #32379                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * cc: brade, mcs, tbb-team (added)
 * keywords:  tbb-security, GeorgKoppen202002 => tbb-security,
     GeorgKoppen202002, TorBrowserTeam202002R


Comment:

 `bug_33410_v4` (https://gitweb.torproject.org/user/gk/tor-browser-
 build.git/commit/?h=bug_33410_v4&id=c57883e4a5a42e52ed07eb9b4d17d6445bee23d0)
 has the patch for enabling sandboxing Graphite on macOS, which includes
 the browser patches I put above up for review.

 I am not sure whether things are working yet as I don't have a functional
 macOS system around. I've uploaded a test build for those that do, though:

 https://people.torproject.org/~gk/testbuilds/TorBrowser-tbb-
 nightly.2020.02.29_33410_osx64_en-US.dmg
 https://people.torproject.org/~gk/testbuilds/TorBrowser-tbb-
 nightly.2020.02.29_33410_osx64_en-US.dmg.asc

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33410#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online