Closed Bug 1153428 (nsec-isolation) Opened 10 years ago Closed 8 years ago

[META] Tracking bug for Process Isolation implementation of New Security Model

Categories

(Firefox OS Graveyard :: General, defect, P1)

Product:
Firefox OS Graveyard
Component:
General
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: jgong, Assigned: kanru)

References

Details

(Whiteboard: [newsecurity])

User Story

This is a V3 initiative for a New Security Model.  https://wiki.mozilla.org/FirefoxOS/New_security_model

This Meta Bug is for tracking the "Process Isolation" implementation, a sub-component of the bigger New Security Model project. https://wiki.mozilla.org/FirefoxOS/New_security_model#Process_isolation

*****
Process Isolation

In order to ensure that only signed content can access the APIs that it has been signed for, we want to always use separate child processes to run such content.

This means that when a user navigates from an unsigned page to a signed page, that we need to switch which process render the pages. Right now this can only be done by creating a new <iframe mozbrowser>.

However only Gecko knows that a particular URL is signed. Gaia could not simply look at a URL to know if it will return signed content or not. And Gecko only knows that it's signed content once response data starts arriving.

Even if we add some way for gecko to signal to the <iframe mozbrowser> embedder that a new <iframe mozbrowser> needs to be created, this will make going "back"/"forward" between the two very messy.
This is a V3 initiative for a New Security Model. https://wiki.mozilla.org/FirefoxOS/New_security_model This Meta Bug is for tracking the "Process Isolation" implementation, a sub-component of the bigger New Security Model project. https://wiki.mozilla.org/FirefoxOS/New_security_model#Process_isolation
User Story: (updated)
No longer depends on: nsec-signing
Summary: [META] Tracking bug for Signing implementation of New Security Model → [META] Tracking bug for Process Isolation implementation of New Security Model
Blocks: nsec-installing
No longer blocks: nsec-installing
Blocks: nsec
Blocks: nsec-signing
Blocks: nsec-origins
Blocks: nsec-sw
No longer depends on: nsec-sw
Blocks: nsec-csp
No longer depends on: nsec-csp
Blocks: nsec-installing
No longer depends on: nsec-installing
Blocks: nsec-signing
No longer depends on: nsec-signing
Blocks: nsec-verify
No longer depends on: nsec-verify
Blocks: 1153449
Whiteboard: [NewSecurity] → [newsecurity]
Priority: -- → P1
Assign to me for tracking.
Assignee: nobody → kchen
Depends on: 1170894
Alias: nsec-isolation
No longer depends on: nsec-origins
Depends on: 1186290
Depends on: 1186294
Depends on: 1186296
Depends on: 1033999
Depends on: 1186843
blocking-b2g: --- → 2.5+
Depends on: 1209662
No longer depends on: 1033999
Depends on: 1214572
Depends on: 1216443
Component: Security → General
Product: Firefox → Firefox OS
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.