Changes between Version 1 and Version 2 of doc/TorBrowser/SmartOS_Sandboxing


Ignore:
Timestamp:
Mar 4, 2016, 3:34:02 PM (22 months ago)
Author:
dawuud
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • doc/TorBrowser/SmartOS_Sandboxing

    v1 v2  
    22= The Tor Browser SmartOS Sandboxing Guide =
    33
    4 This page is meant to give you an overview of how to properly sandbox the Linux Tor Browser Bundle using the [https://wiki.smartos.org/display/DOC/Home SmartOS hypervisor] with the [www.illumos.org IllumOS kernel]. We make use of native Solaris and [https://wiki.smartos.org/display/DOC/LX+Branded+Zones Linux] [https://wiki.smartos.org/display/DOC/Zones zones] for isolating components of the Tor Browser Bundle sandbox environment.
     4This page is meant to give you an overview of how to properly sandbox the Linux Tor Browser Bundle using the [https://wiki.smartos.org/display/DOC/Home SmartOS hypervisor] with the [https://wiki.illumos.org/display/illumos/illumos+Home IllumOS kernel]. We make use of native Solaris and [https://wiki.smartos.org/display/DOC/LX+Branded+Zones Linux] [https://wiki.smartos.org/display/DOC/Zones zones] for isolating components of the Tor Browser Bundle sandbox environment. This means we can run x86 32-bit and 64-bit Linux binaries
     5in a '''Linux Zone''' on Solaris which emulates Linux system calls. '''The Linux Tor Browser binary runs just fine in a Linux zone on Solaris/SmartOS'''.
     6
     7Our sandbox environment will have several components which will each be in their own zone. The Tor Browser will run with a X server created by vnc4server. A stealth authenticated onion service will expose an HTTP service via noVNC which will serve an HTML5 VNC client to the browser and it will connect to the zone running the Tor Browser vnc4server.
     8
     95 zones:
     10
     11* firewall which performs filtering and NAT
     12* tor for tbb
     13* tor for our onion service
     14* tor browser bundle
     15  ** tbb
     16  ** vnc4server
     17* the webserver component of noVNC
    518
    619