947784 - Move "mobilenetwork" permission check to parent and create a sandbox safe implementation

Status: RESOLVED DUPLICATE of bug 952371

(Core :: DOM: Core & HTML, defect)

Description

[Paul Theriault [:pauljt] (no longer reading bugmail)]

+++ This bug was initially created as a clone of Bug #866272 +++

The solution developed in bug 866272 relies on permissions checks performed solely in the child, and also provides this feature by storing private data inside preferences. In a compromised child situation, where malicious content has the ability to execute chrome privileged script (or any arbitrary code exec), the permission check offers no security as the child can read the data directly out of preferences.

This issue is relatively low risk since as the attack scenario requires an additional exploit but it would be good to fix this as we harden IPC mechanisms as part of sandboxing.

Comment 1

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Ken, can you find an owner for this from your team?

Comment 2

[Ken Chang[:kenkai]]

Jessica, please take this bug. Thanks.

Comment 3

[Jessica Jong [:jessica] (inactive)]

Hi Paul,

In bug 952371, we changed to use IPC messages instead of preferences to query last known networks, and the permission check is now done on parent side. Do you think that fulfills the security requirements in this bug?

Thank you.

Comment 4

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Hi Jessica, yes that looks fine to me, thanks! Resolved as a dupe so we know where it was fixed.