Re: [Tails-ux] Help needed: sandboxing the Tor Browser vs. …

Delete this message

Reply to this message
Autore: Alan
Data:  
To: tails-ux
Oggetto: Re: [Tails-ux] Help needed: sandboxing the Tor Browser vs. downloads and uploads directories
Hi!

On Mon, 02 Feb 2015 13:27:31 +0100
intrigeri <intrigeri@???> wrote:
> > "7. users will [...] wonder why the browser says "No read permission""
>
> > Can we even prevent them from moving out of the restricted folder, or
> > from seeing the structure of the other folders?
>
> Not without patching the GTK that Tor Browser uses (no, please), or
> moving to using containers or Linux namespaces (not mature enough yet
> IMO for our needs).
>

GNOME is currently thinking about sandboxing applications and their
though include this file selection/access problems:

- https://wiki.gnome.org/Design/OS/Sandboxing
- http://blogs.gnome.org/aday/2014/07/10/sandboxed-applications-for-gnome/
- http://blogs.gnome.org/aday/2014/07/23/sandboxed-applications-for-gnome-part-2/

Cheers