1132021 - Use USER_LIMITED access token level for the Windows NPAPI process sandboxing policy

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[Bob Owen (:bobowen)]

As suggested by bbondy in Bug 1126402 Comment 5, this is an attempt to get a workable NPAPI sandbox (primarily for flash) using the USER_LIMITED access level token.

Comment 1

[Bob Owen (:bobowen)]

Attachment: Add a new sandbox level for Windows NPAPI to use USER_LIMITED access token level.

This patch adds a "level" 3 for the NPAPI, setting the access token to USER_LIMITED.
This removes the user's own token from the process's access token,

It adds rules to give read/write access to the two flash AppData directories and the Temp directory.

It also adds read access to the User's home directory for file upload.

Trying to improve any of the sandbox policy further seems to break at least some part of video/audio playback.

Comment 2

[Benjamin Smedberg]

Comment on attachment 8562844 [details] [diff] [review]
Add a new sandbox level for Windows NPAPI to use USER_LIMITED access token level.

I'm skeptical that we could ever use this in a default environment, but I think it's worth having the options available!

Comment 3

[Bob Owen (:bobowen)]

(In reply to Benjamin Smedberg  [:bsmedberg] from comment #2)
> Comment on attachment 8562844 [details] [diff] [review]
> Add a new sandbox level for Windows NPAPI to use USER_LIMITED access token
> level.
> 
> I'm skeptical that we could ever use this in a default environment, but I
> think it's worth having the options available!

Thanks.
Yeah, this would need some thorough testing and at the very least it may restrict from where files can be uploaded.
At least it gives different things to try if we get some sort of test suite.

Try push:
https://treeherder.mozilla.org/#/jobs?repo=try&revision=8eb5933b6550

Comment 4

[Bob Owen (:bobowen)]

Try push in comment 3, thanks.

Comment 5

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/44d8619d58b8

Comment 6

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/44d8619d58b8