Sandboxing in Tor Browser

Here's a parent ticket to track efforts to sandbox Tor Browser. Please use this ticket to discuss various approaches and link to email discussions where available.

added TorBrowserTeam201701 component::applications/tor browser owner::tbb-team priority::medium severity::normal sponsor::U status::new tbb-sandboxing type::defect labels

Trac:
Cc: N/A to brade, mcs

Trac:
Cc: brade, mcs to brade, mcs, yawning

FWIW, I'm vaguely against using my modified start-tor-browser script (#19055 (moved)) for the official Tor Browser sandboxing efforts, since there's a bunch of pitfalls to the approach I took. This doesn't mean that firejail is unsuitable (it's probably still the most expedient approach for Linux), just the way I integrated it when I first started looking at sandboxing stuff is suboptimal.

I have ideas on "how to do it better", just wanted to comment that my views on certain things have shifted a bit.

Trac:
Description: Here's a parent ticket to track efforts to sandbox of Tor Browser. Please use this ticket to discuss various approaches and link to email discussions where available.

to

Here's a parent ticket to track efforts to sandbox Tor Browser. Please use this ticket to discuss various approaches and link to email discussions where available.

Trac:
Cc: brade, mcs, yawning to brade, mcs, yawning, gk

How about messing with selinux contexts?

In or Of TBB? (Content or App?) https://wiki.mozilla.org/Security/Sandbox

As I just posted to tor-dev@: https://git.schwanenlied.me/yawning/sandboxed-tor-browser

Linux only.

This is substantially less bad than my prior attempts with firejail, and it even includes a launcher process that handles keeping the browser installed and up to date. It's probably not ready for production use.

Trac:
Sponsor: N/A to SponsorU

Trac:
Keywords: N/A deleted, TorBrowserTeam201610 added

Replying to bugzilla:

In or Of TBB? (Content or App?) For "Of" effort on Windows: CIS (Comodo Internet Security suite) sandbox could be recommended (free). https://help.comodo.com/topic-72-1-623-7754-The-Sandbox---An-Overview.html

(@mcs/brade: the main ticket uses tbb-sandboxing, so tbb-sandbox looks confusing.)

Replying to bugzilla:

(@mcs/brade: the main ticket uses tbb-sandboxing, so tbb-sandbox looks confusing.)

Thanks. Fixed in #20304 (moved).

Moving tickets over to November.

Trac:
Keywords: TorBrowserTeam201610 deleted, TorBrowserTeam201611 added

Moving tickets to December.

Trac:
Keywords: TorBrowserTeam201611 deleted, TorBrowserTeam201612 added

Moving our tickets to January 2017

Trac:
Keywords: TorBrowserTeam201612 deleted, TorBrowserTeam201701 added

Trac:
Cc: brade, mcs, yawning, gk to brade, mcs, yawning, gk, intrigeri

mentioned in issue #20121 (closed)

mentioned in issue #31694 (moved)

moved to tpo/applications/tor-browser#19750