dom/crypto/test/test_WebCrypto.html fails on macOS with sandbox level 3 and blacklistng removed

RESOLVED FIXED in Firefox 55

Status

()

Core
Security: Process Sandboxing
RESOLVED FIXED
7 months ago
5 months ago

People

(Reporter: Alex_Gaynor, Assigned: Alex_Gaynor)

Tracking

Trunk
mozilla55
Unspecified
Mac OS X
Points:
---

Firefox Tracking Flags

(firefox55 fixed)

Details

(Whiteboard: sbmc3)

MozReview Requests

()

Submitter Diff Changes Open Issues Last Updated
Loading...
Error loading review requests:

Attachments

(1 attachment)

(Assignee)

Description

7 months ago
With my WIP patch for bug 1357758, dom/crypto/test/test_WebCrypto.html fails.

This is because the sandbox currently allows reads to |.app/Content/Resources|, but webcrypto relies on loading |.app/Contents/MacOS/libsoftokn3.dylib|.

While long term, we might want to remove access to the |MacOS/| subdirectory, in the short term allowing it lets us remove access to the rest of the filesystem, so it's a clear win.
Comment hidden (mozreview-request)

Comment 2

7 months ago
mozreview-review
Comment on attachment 8873880 [details]
Bug 1369764 - in the macOS sandbox, allow reads from .app/Contents/;

https://reviewboard.mozilla.org/r/145278/#review149444

Typo in the bug subject. s/Content/Contents.
Attachment #8873880 - Flags: review?(haftandilian) → review+
Comment hidden (mozreview-request)
(Assignee)

Updated

6 months ago
Keywords: checkin-needed

Comment 4

6 months ago
Pushed by ryanvm@gmail.com:
https://hg.mozilla.org/integration/autoland/rev/e2114d7578be
in the macOS sandbox, allow reads from .app/Contents/; r=haik
Keywords: checkin-needed

Comment 5

6 months ago
bugherder
https://hg.mozilla.org/mozilla-central/rev/e2114d7578be
Status: NEW → RESOLVED
Last Resolved: 6 months ago
status-firefox55: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla55
You need to log in before you can comment on or make changes to this bug.