1945340 - sandbox-unprivileged-namespaces-howtofix link is misleading

Status: NEW

(Core :: Security: Process Sandboxing, defect, P2)

Description

[Mike Hommey [:glandium]]

When the system doesn't have unprivileged namespaces enabled, a doorhanger notification shows up that says "Some of Firefox's security features may offer less protection on your current operating system." which is fair. That's followed with "How to fix this issue" with a link to https://support.mozilla.org/en-US/kb/install-firefox-linux which reads "Install Firefox on Linux", and misleads users into thinking to fix issue requires installing Mozilla's build, which, in fact, will have the same problem.
I suppose the intent is to deep link in the page https://support.mozilla.org/en-US/kb/install-firefox-linux#w_security-features-warning , but I'd say ideally this information would have its own page.

Comment 1

[Mike Hommey [:glandium]]

BTW, should that page talk about the kernel.unprivileged_userns_clone sysctl?