1284458 - nsPluginHost::GetPluginTempDir should return a sandbox writeable temp (Linux)

Status: RESOLVED INVALID

(Core Graveyard :: Plug-ins, defect, P3)

Description

[Julian Hector [:tedd] [:jhector]]

Attachment: mkdir sandbox violation backtrace

Similar to Bug 1270018, nsPluginHost::GetPluginTempDir should return a directory that is created by the parent and writable by a sandboxed content process.

This would allow us to remove sys_mkdir from the seccomp whitelist.

Removing sys_mkdir leads to the attached crashes.

Comment 1

[Benjamin Smedberg]

Haik, is this related to bug 1270018?

Comment 2

[Jim Mathies [:jimm]]

It is related, but linux specific which isn't in use yet on linux. It's also tracked under our linux milestone.

Comment 3

[Jim Mathies [:jimm]]

When we fix this we need to enable the code in bug 1270018 on linux, and open up access to that specific directory.

Comment 4

[Gian-Carlo Pascutto [:gcp]]

We allow write access to /tmp, and /tmp has the X11 sockets. So we do want to take a look at this, and probably at least block out the X11 dir.

Comment 5

[Alex Gaynor [:Alex_Gaynor]]

|GetPluginTempDir| no longer exists so this is no longer a problem.