1378061 - Only set user's SID in USER_LIMITED as deny only when not using restricting SIDs.

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[Bob Owen (:bobowen)]

This change from bug 1323188 broke web audio and some other things in the restricting SIDs (normal) case.

It possibly will still break web audio when running from a network drive, but I'll pick that up in a separate bug.

Comment 1

[Bob Owen (:bobowen)]

Attachment: Only set user's SID in USER_LIMITED as deny only when not using restricting SIDs

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/04edb03fb817
Only set user's SID in USER_LIMITED as deny only when not using restricting SIDs. r=jimm

Comment 4

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/04edb03fb817

Comment 5

[Liz Henry (:lizzard) (relman/hg->git project)]

Bob, is this something you would like to be in 55? If so, can you request uplift?

Comment 6

[Bob Owen (:bobowen)]

(In reply to Liz Henry (:lizzard) (needinfo? me) from comment #5)
> Bob, is this something you would like to be in 55? If so, can you request
> uplift?

We're not using USER_LIMITED in 55, but we might need to uplift this to make another uplift clean for bug 1377555.
I'll make sure we request at the same time if we do.

Comment 7

[Bob Owen (:bobowen)]

Comment on attachment 8883213 [details] [diff] [review]
Only set user's SID in USER_LIMITED as deny only when not using restricting SIDs

Approval Request Comment
[Feature/Bug causing the regression]:
Bug 1323188, also required for uplift of bugs 1377555 and 1377249

[User impact if declined]:
Bug 1377249 will not be able to be uplifted.

[Is this code covered by automated tests?]:
No

[Has the fix been verified in Nightly?]:
Verified in local build.

[Needs manual test from QE? If yes, steps to reproduce]: 
Bug 1377555 actually backs-out and re-implements this change so no.

[List of other uplifts needed for the feature/fix]:
Bug 1377555 and 1377249, should be uplifted after this.

[Is the change risky?]:
No.

[Why is the change risky/not risky?]:
This change is very simple

[String changes made/needed]:
None

Comment 8

[Julien Cristau [:jcristau]]

Comment on attachment 8883213 [details] [diff] [review]
Only set user's SID in USER_LIMITED as deny only when not using restricting SIDs

this is needed for some other fixes, beta55+

Comment 9

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/6075562b897b

Comment 10

[Andrei Vaida [:avaida]]

(In reply to Bob Owen (:bobowen) from comment #7)
> [Is this code covered by automated tests?]:
> No
> 
> [Has the fix been verified in Nightly?]:
> Verified in local build.
> 
> [Needs manual test from QE? If yes, steps to reproduce]: 
> Bug 1377555 actually backs-out and re-implements this change so no.

Setting qe-verify- based on Bob's assessment on manual testing needs.