Opened 3 years ago

Closed 3 years ago

#20806 closed enhancement (fixed)

Add an option to disable including `libavcodec.so` in the firefox container.

Reported by: yawning Owned by: yawning
Priority: High Milestone:
Component: Archived/Tor Browser Sandbox Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Right now, the firefox container explcitly includes the "best" libavcodec shared library (dlopen()ed by firefox), 100% of the time as a concession to usability.

Since this is optional, and there are usage models that do not require video/audio playback, this should be made optional like how PulseAudio currently is, under the rationale that people who can live with omitting it, can gain reduced attack surface.

Child Tickets

Change History (2)

comment:1 Changed 3 years ago by yawning

Priority: MediumHigh

Marking this as "High" because ffmpeg causes my tinfoil hat to crinkle furiously (gstreamer is not supported, or I would have done this for 0.0.1).

comment:2 Changed 3 years ago by yawning

Resolution: fixed
Status: newclosed

Fixed in master: 8d816d804bcad2c709dd1e2e0650cbfb6d8026db

Note: See TracTickets for help on using tickets.