1900439 - Indicate User Namespaces unavailable in about:support by changing line color

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect, P1)

Description

[Brian Tsoi [:btsoi]]

As mentioned in https://bugzilla.mozilla.org/show_bug.cgi?id=1888989#c2, userns are not availabe by default to non packaged versions of Firefox, and

We could make the User Namespaces line be yellow instead of just false to signal that this is something the user could try to fix on their configuration. Media does it for codec support.

Comment 1

[Brian Tsoi [:btsoi]]

Attachment: Bug 1900439 - Indicate Users Namespaces not available with red line. r?gcp!,gerard-majax!

Comment 2

[Gian-Carlo Pascutto [:gcp]]

While testing this I hit:

morbo@alder:~/hg/firefox$ sudo sysctl -w user.max_user_namespaces=0
user.max_user_namespaces = 0
morbo@alder:~/hg/firefox$ ./mach run
 0:00.18 /home/morbo/hg/firefox/obj-x86_64-pc-linux-gnu/dist/bin/firefox -no-remote -profile /home/morbo/hg/firefox/obj-x86_64-pc-linux-gnu/tmp/profile-default
[897743] Assertion failure: (*__errno_location ()) == 22 || (*__errno_location ()) == 1 || (*__errno_location ()) == 87, at /home/morbo/hg/firefox/security/sandbox/linux/SandboxInfo.cpp:157

I'll make a folow-up bug for this.

Comment 3

[Brian Tsoi [:btsoi]]

Attachment: Bug 1900439 - Indicate Users Namespaces not available with red line. r?gcp!,gerard-majax!

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/ec38eb9d0786
Indicate Users Namespaces not available with red line. r=gcp,gerard-majax,desktop-theme-reviewers,fluent-reviewers,sfoster,flod

Comment 5

[pstanciu]

https://hg.mozilla.org/mozilla-central/rev/ec38eb9d0786