[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #20940 [Applications/Tor Browser Sandbox]: Consider deprecating x86 support.
#20940: Consider deprecating x86 support.
--------------------------------------------------+---------------------
Reporter: yawning | Owner: yawning
Type: task | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser Sandbox | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
--------------------------------------------------+---------------------
There's lots of reasons why this is a good idea:
* Weaker ASLR.
* Seccomp related headaches.
* I wanted to use `gosecco` to do runtime seccomp rule generation, but
it only supports amd64.
* `libseccomp2` shipped on Debian stable generates wrong code on amd64,
so the current workaround of pre-generating compiled bpf at build time
using `libseccomp2` from backports precludes runtime code generation,
degrading sandbox effectiveness across all platforms.
* x86 systems can't effectively filter out arguments to a lot of socket
related system calls because of `socketcall()`.
* Supporting hardware I don't have, running software I don't use, to
ultimately obtain results that are empirically worse than the other
supported platform is a poor use of development time.
* Tails gave up on supporting 32 bit userland
(https://labs.riseup.net/code/issues/8183).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20940>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs