Closed Bug 1094196 Opened 7 years ago Closed 7 years ago

Enable mac sandbox only when preferences are adequately set

Categories

(Core :: Security, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED WONTFIX
mozilla36

People

(Reporter: areinald.bug, Assigned: areinald.bug)

References

Details

Attachments

(1 file)

In ContentChild::RecvSetProcessSandbox(), Win sandbox starts only when "browser.tabs.remote.sandbox" preference is "on" or "warn". Mac sandbox should behave the same.
Assignee: nobody → areinald
Blocks: 1076385
I thought it would be nice to be on par with the Win implementation which depends on a preference setting to start the content sandbox. Feel free to dismiss the bug, and the patch, if you feel like.
Attachment #8517468 - Flags: review?(smichaud)
Comment on attachment 8517468 [details] [diff] [review]
bugzilla-1094196-1.patch

We may eventually want to do this, but I think it's premature to do it now.

As things now stand, the browser.tabs.remote.sandbox is only for Windows -- not for either OS X or Linux.  And it has three possible values -- "off", "warn" or "on".  But as far as I know the "warn only" sandbox is only available for Windows (not for OS X or Linux).
Attachment #8517468 - Flags: review?(smichaud) → review-
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.