Closed Bug 1894068 Opened 1 year ago Closed 1 year ago

Add a policy for Kyber

Categories

(Firefox :: Enterprise Policies, enhancement, P3)

Product:
Firefox
Component:
Enterprise Policies
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
127 Branch
Tracking Flags:
Tracking Status
firefox127 --- fixed

People

(Reporter: mkaply, Assigned: jschanck)

References

Details

Attachments

(1 file)

Bug 1894068 - add a policy for post-quantum key agreement. r=mkaply
48 bytes, text/x-phabricator-request
Details | Review

We had a request to add security.tls.enable_kyber to policy so it can be locked to false.

Looks like Chrome and Edge use PostQuantumKeyAgreementEnabled

https://chromeenterprise.google/policies/#PostQuantumKeyAgreementEnabled
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#postquantumkeyagreementenabled

So we can either just add the pref to our pref list or create a similar policy

Assignee: nobody → jschanck
Severity: -- → N/A
Type: defect → enhancement
Priority: -- → P3

Note that the Chrome and Edge documentation says

This policy is a temporary measure and will be removed in future versions of [Google Chrome / Microsoft Edge]. It may be Enabled to allow you to test for issues, and may be Disabled while issues are being resolved.

Ours should say something similar.

Pushed by jschanck@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/47020ae49c1d add a policy for post-quantum key agreement. r=mkaply,fluent-reviewers,flod

Backed out for causing xpcshell failures in test_sorted_alphabetically.js

[task 2024-05-02T23:25:08.605Z] 23:25:08     INFO -  TEST-PASS | services/fxaccounts/tests/xpcshell/test_web_channel.js | took 1227ms
[task 2024-05-02T23:25:08.618Z] 23:25:08     INFO -  Retrying tests that failed when run in parallel.
[task 2024-05-02T23:25:08.620Z] 23:25:08     INFO -  TEST-START | browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js
[task 2024-05-02T23:25:08.975Z] 23:25:08  WARNING -  TEST-UNEXPECTED-FAIL | browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js | xpcshell return code: 0
[task 2024-05-02T23:25:08.981Z] 23:25:08     INFO -  TEST-INFO took 355ms
[task 2024-05-02T23:25:08.981Z] 23:25:08     INFO -  >>>>>>>
[task 2024-05-02T23:25:08.982Z] 23:25:08     INFO -  PID 5696 | DLL blocklist was unable to intercept AppInit DLLs.
[task 2024-05-02T23:25:08.982Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: Failed to get directory to cache.: file /builds/worker/checkouts/gecko/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp:148
[task 2024-05-02T23:25:08.982Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: Failed to get directory to cache.: file /builds/worker/checkouts/gecko/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp:148
[task 2024-05-02T23:25:08.983Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: Couldn't get the user appdata directory. Crash events may not be produced.: file /builds/worker/checkouts/gecko/toolkit/crashreporter/nsExceptionHandler.cpp:2924
[task 2024-05-02T23:25:08.983Z] 23:25:08     INFO -  (xpcshell/head.js) | test MAIN run_test pending (1)
[task 2024-05-02T23:25:08.983Z] 23:25:08     INFO -  (xpcshell/head.js) | test run_next_test 0 pending (2)
[task 2024-05-02T23:25:08.983Z] 23:25:08     INFO -  (xpcshell/head.js) | test MAIN run_test finished (2)
[task 2024-05-02T23:25:08.983Z] 23:25:08     INFO -  running event loop
[task 2024-05-02T23:25:08.984Z] 23:25:08     INFO -  browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js | Starting test_policies_sorted
[task 2024-05-02T23:25:08.984Z] 23:25:08     INFO -  (xpcshell/head.js) | test test_policies_sorted pending (2)
[task 2024-05-02T23:25:08.984Z] 23:25:08  WARNING -  TEST-UNEXPECTED-FAIL | browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js | test_policies_sorted - [test_policies_sorted : 18] policies-schema.json is alphabetically sorted. - false == true
[task 2024-05-02T23:25:08.985Z] 23:25:08     INFO -  D:/task_171469040872632/build/tests/xpcshell/tests/browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js:checkArrayIsSorted:18
[task 2024-05-02T23:25:08.986Z] 23:25:08     INFO -  D:/task_171469040872632/build/tests/xpcshell/tests/browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js:test_policies_sorted:29
[task 2024-05-02T23:25:08.986Z] 23:25:08     INFO -  D:\task_171469040872632\build\tests\xpcshell\head.js:_run_next_test/<:1759
[task 2024-05-02T23:25:08.986Z] 23:25:08     INFO -  D:\task_171469040872632\build\tests\xpcshell\head.js:_run_next_test:1759
[task 2024-05-02T23:25:08.987Z] 23:25:08     INFO -  D:\task_171469040872632\build\tests\xpcshell\head.js:run:808
[task 2024-05-02T23:25:08.987Z] 23:25:08     INFO -  D:\task_171469040872632\build\tests\xpcshell\head.js:_do_main:245
[task 2024-05-02T23:25:08.987Z] 23:25:08     INFO -  D:\task_171469040872632\build\tests\xpcshell\head.js:_execute_test:596
[task 2024-05-02T23:25:08.987Z] 23:25:08     INFO -  -e:null:1
[task 2024-05-02T23:25:08.987Z] 23:25:08     INFO -  exiting test
[task 2024-05-02T23:25:08.988Z] 23:25:08     INFO -  (xpcshell/head.js) | test run_next_test 0 finished (2)
[task 2024-05-02T23:25:08.988Z] 23:25:08     INFO -  Unexpected exception NS_ERROR_ABORT:
[task 2024-05-02T23:25:08.988Z] 23:25:08     INFO -  _abort_failed_test@D:\task_171469040872632\build\tests\xpcshell\head.js:869:20
[task 2024-05-02T23:25:08.988Z] 23:25:08     INFO -  do_report_result@D:\task_171469040872632\build\tests\xpcshell\head.js:981:5
[task 2024-05-02T23:25:08.988Z] 23:25:08     INFO -  Assert<@D:\task_171469040872632\build\tests\xpcshell\head.js:70:21
[task 2024-05-02T23:25:08.989Z] 23:25:08     INFO -  Assert.prototype.report@resource://testing-common/Assert.sys.mjs:251:10
[task 2024-05-02T23:25:08.989Z] 23:25:08     INFO -  Assert.prototype.ok@resource://testing-common/Assert.sys.mjs:277:10
[task 2024-05-02T23:25:08.990Z] 23:25:08     INFO -  checkArrayIsSorted@D:/task_171469040872632/build/tests/xpcshell/tests/browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js:18:5
[task 2024-05-02T23:25:08.990Z] 23:25:08     INFO -  test_policies_sorted@D:/task_171469040872632/build/tests/xpcshell/tests/browser/components/enterprisepolicies/tests/xpcshell/test_sorted_alphabetically.js:29:21
[task 2024-05-02T23:25:08.990Z] 23:25:08     INFO -  _run_next_test/<@D:\task_171469040872632\build\tests\xpcshell\head.js:1759:22
[task 2024-05-02T23:25:08.990Z] 23:25:08     INFO -  _run_next_test@D:\task_171469040872632\build\tests\xpcshell\head.js:1759:38
[task 2024-05-02T23:25:08.991Z] 23:25:08     INFO -  run@D:\task_171469040872632\build\tests\xpcshell\head.js:808:9
[task 2024-05-02T23:25:08.991Z] 23:25:08     INFO -  _do_main@D:\task_171469040872632\build\tests\xpcshell\head.js:245:6
[task 2024-05-02T23:25:08.991Z] 23:25:08     INFO -  _execute_test@D:\task_171469040872632\build\tests\xpcshell\head.js:596:5
[task 2024-05-02T23:25:08.991Z] 23:25:08     INFO -  @-e:1:1
[task 2024-05-02T23:25:08.991Z] 23:25:08     INFO -  exiting test
[task 2024-05-02T23:25:08.992Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: NS_ENSURE_TRUE(inst) failed: file StaticComponents.cpp:12672
[task 2024-05-02T23:25:08.992Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: OOPDeinit() without successful OOPInit(): file /builds/worker/checkouts/gecko/toolkit/crashreporter/nsExceptionHandler.cpp:3508
[task 2024-05-02T23:25:08.992Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: XPCOM object nsStringBuffer released from static ctor/dtor: file /builds/worker/checkouts/gecko/xpcom/base/nsTraceRefcnt.cpp:216
[task 2024-05-02T23:25:08.993Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: XPCOM object PerThreadData destroyed from static ctor/dtor: file /builds/worker/checkouts/gecko/xpcom/base/nsTraceRefcnt.cpp:216
[task 2024-05-02T23:25:08.993Z] 23:25:08     INFO -  PID 5696 | [Parent 5696, Main Thread] WARNING: XPCOM object SourceList destroyed from static ctor/dtor: file /builds/worker/checkouts/gecko/xpcom/base/nsTraceRefcnt.cpp:216
[task 2024-05-02T23:25:08.994Z] 23:25:08     INFO -  <<<<<<<
[task 2024-05-02T23:25:08.994Z] 23:25:08     INFO -  INFO | Result summary:
[task 2024-05-02T23:25:08.994Z] 23:25:08     INFO -  INFO | Passed: 42
[task 2024-05-02T23:25:08.994Z] 23:25:08  WARNING -  INFO | Failed: 1
[task 2024-05-02T23:25:08.994Z] 23:25:08  WARNING -  One or more unittests failed.
[task 2024-05-02T23:25:08.994Z] 23:25:08     INFO -  INFO | Todo: 0
[task 2024-05-02T23:25:08.995Z] 23:25:08     INFO -  INFO | Retried: 1
[task 2024-05-02T23:25:08.995Z] 23:25:08     INFO -  SUITE-END | took 24s
[task 2024-05-02T23:25:08.995Z] 23:25:08     INFO -  Node moz-http2 server shutting down ...
[task 2024-05-02T23:25:08.995Z] 23:25:08     INFO -  http3Server server shutting down ...
[task 2024-05-02T23:25:09.117Z] 23:25:09     INFO - Return code: 1
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - TinderboxPrint: xpcshell-xpcshell<br/>42/<em class="testfail">1</em>/0
[task 2024-05-02T23:25:09.132Z] 23:25:09  WARNING - setting return code to 2
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - The xpcshell suite: xpcshell ran with return status: FAILURE
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - Running post-action listener: _package_coverage_data
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - Running post-action listener: _resource_record_post_action
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - Running post-action listener: process_java_coverage_data
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - [mozharness: 2024-05-02 23:25:09.132674Z] Finished run-tests step (success)
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - [mozharness: 2024-05-02 23:25:09.132674Z] Running uninstall step.
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - Running pre-action listener: _resource_record_pre_action
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - Running main action method: uninstall
[task 2024-05-02T23:25:09.132Z] 23:25:09     INFO - Skipping uninstall for non-MSIX test
[task 2024-05-02T23:25:09.133Z] 23:25:09     INFO - Running post-action listener: _resource_record_post_action
[task 2024-05-02T23:25:09.133Z] 23:25:09     INFO - [mozharness: 2024-05-02 23:25:09.133180Z] Finished uninstall step (success)
[task 2024-05-02T23:25:09.133Z] 23:25:09     INFO - Running post-run listener: _resource_record_post_run
[task 2024-05-02T23:25:09.285Z] 23:25:09     INFO - instance_metadata.json not found; unable to determine instance type
[task 2024-05-02T23:25:09.290Z] 23:25:09     INFO - Validating Perfherder data against D:\task_171469040872632\mozharness\external_tools\performance-artifact-schema.json
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - PERFHERDER_DATA: {"framework": {"name": "job_resource_usage"}, "suites": [{"name": "xpcshell.xpcshell.overall", "extraOptions": ["e10s", "buildbot-unknown"], "subtests": [{"name": "cpu_percent", "value": 56.14593340611352}, {"name": "io_write_bytes", "value": 439341056}, {"name": "io.read_bytes", "value": 11749376}, {"name": "io_write_time", "value": 4}, {"name": "io_read_time", "value": 1}]}, {"name": "xpcshell.xpcshell.start-pulseaudio", "subtests": [{"name": "time", "value": 0.0}, {"name": "cpu_percent", "value": 0}]}, {"name": "xpcshell.xpcshell.install", "subtests": [{"name": "time", "value": 3.687999999999988}, {"name": "cpu_percent", "value": 51.886328125}]}, {"name": "xpcshell.xpcshell.stage-files", "subtests": [{"name": "time", "value": 0.047000000000025466}, {"name": "cpu_percent", "value": 0}]}, {"name": "xpcshell.xpcshell.run-tests", "subtests": [{"name": "time", "value": 88.45300000000003}, {"name": "cpu_percent", "value": 56.30324178935447}]}, {"name": "xpcshell.xpcshell.uninstall", "subtests": [{"name": "time", "value": 0.0}, {"name": "cpu_percent", "value": 0}]}]}
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - Total resource usage - Wall time: 92s; CPU: Can't collect data; Read bytes: 11749376; Write bytes: 439341056; Read time: 1; Write time: 4
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - TinderboxPrint: I/O read bytes / time<br/>11,749,376 / 1
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - TinderboxPrint: I/O write bytes / time<br/>439,341,056 / 4
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - TinderboxPrint: CPU idle<br/>321.0 (43.8%)
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - TinderboxPrint: CPU system<br/>126.8 (17.3%)
[task 2024-05-02T23:25:09.292Z] 23:25:09     INFO - TinderboxPrint: CPU user<br/>285.1 (38.9%)
[task 2024-05-02T23:25:09.293Z] 23:25:09     INFO - start-pulseaudio - Wall time: 0s; CPU: Can't collect data; Read bytes: 0; Write bytes: 0; Read time: 0; Write time: 0
[task 2024-05-02T23:25:09.294Z] 23:25:09     INFO - install - Wall time: 4s; CPU: 52%; Read bytes: 155648; Write bytes: 63291392; Read time: 0; Write time: 0
[task 2024-05-02T23:25:09.295Z] 23:25:09     INFO - stage-files - Wall time: 0s; CPU: Can't collect data; Read bytes: 0; Write bytes: 0; Read time: 0; Write time: 0
[task 2024-05-02T23:25:09.306Z] 23:25:09     INFO - run-tests - Wall time: 88s; CPU: 56%; Read bytes: 11593728; Write bytes: 376049664; Read time: 1; Write time: 4
[task 2024-05-02T23:25:09.307Z] 23:25:09     INFO - uninstall - Wall time: 0s; CPU: Can't collect data; Read bytes: 0; Write bytes: 0; Read time: 0; Write time: 0
[task 2024-05-02T23:25:09.646Z] 23:25:09  WARNING - returning nonzero exit status 2
[taskcluster 2024-05-02T23:25:09.728Z]    Exit Code: 2
[taskcluster 2024-05-02T23:25:09.728Z]    User Time: 15.625ms
[taskcluster 2024-05-02T23:25:09.728Z]  Kernel Time: 15.625ms
[taskcluster 2024-05-02T23:25:09.728Z]    Wall Time: 3m56.763164s
[taskcluster 2024-05-02T23:25:09.728Z]       Result: FAILED
[taskcluster 2024-05-02T23:25:09.728Z] === Task Finished ===
[taskcluster 2024-05-02T23:25:09.728Z] Task Duration: 3m56.7642483s
[taskcluster 2024-05-02T23:25:10.769Z] Uploading artifact public/logs/localconfig.json from file D:\task_171469040872632\logs\localconfig.json with content encoding "gzip", mime type "application/json" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:11.234Z] Uploading artifact public/test_info/76c2e74f-4caa-4b2d-ad19-e554846e08c5.dmp from file D:\task_171469040872632\build\blobber_upload_dir\76c2e74f-4caa-4b2d-ad19-e554846e08c5.dmp with content encoding "gzip", mime type "application/octet-stream" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:11.498Z] Uploading artifact public/test_info/76c2e74f-4caa-4b2d-ad19-e554846e08c5.extra from file D:\task_171469040872632\build\blobber_upload_dir\76c2e74f-4caa-4b2d-ad19-e554846e08c5.extra with content encoding "gzip", mime type "application/octet-stream" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:11.712Z] Uploading artifact public/test_info/profile_resource-usage.json from file D:\task_171469040872632\build\blobber_upload_dir\profile_resource-usage.json with content encoding "gzip", mime type "application/json" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:11.962Z] Uploading artifact public/test_info/resource-usage.json from file D:\task_171469040872632\build\blobber_upload_dir\resource-usage.json with content encoding "gzip", mime type "application/json" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:12.244Z] Uploading artifact public/test_info/system-info.log from file D:\task_171469040872632\build\blobber_upload_dir\system-info.log with content encoding "gzip", mime type "text/plain" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:12.458Z] Uploading artifact public/test_info/xpcshell_errorsummary.log from file D:\task_171469040872632\build\blobber_upload_dir\xpcshell_errorsummary.log with content encoding "gzip", mime type "text/plain" and expiry 2025-05-02T23:04:39.426Z
[taskcluster 2024-05-02T23:25:12.720Z] Uploading link artifact public/logs/live.log to artifact public/logs/live_backing.log with expiry 2025-05-02T23:04:39.426Z
[taskcluster:error] exit status 2
Flags: needinfo?(jschanck)
Flags: needinfo?(jschanck)
Pushed by jschanck@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/c5c13444d9af add a policy for post-quantum key agreement. r=mkaply,fluent-reviewers,flod

https://hg.mozilla.org/mozilla-central/rev/c5c13444d9af

Status: NEW → RESOLVED
Closed: 1 year ago
status-firefox127: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 127 Branch
Blocks: 1874959
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: