[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #22650 [Applications/Tor Browser Sandbox]: Make it clear that Pulse Audio is potentially dangerous to enable.
#22650: Make it clear that Pulse Audio is potentially dangerous to enable.
----------------------------------------------+-------------------------
Reporter: yawning | Owner: yawning
Type: enhancement | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser Sandbox | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
----------------------------------------------+-------------------------
Description changed by yawning:
Old description:
> Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
> for sandbox escapes. While this is not part of the threat model in
> current releases, it should be documented as such in the UI.
New description:
Per "Jann Horn of Google Project Zero", PulseAudio is a potential vector
for sandbox escapes. While this is not part of the threat model in
current releases, it should be documented as such in the UI.
The documentation has been updated to note this possibility:
https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux?action=diff&version=22
--
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22650#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs