Packaging Changes:
- Build with bubbelwrap sandbox to support running subprocesses in a sandbox. This should (in theory) lead to better web security for applications leveraging libwebkit-gtk.
Depends on D7750
Details
Details
- Reviewers
JoshStrobl - Group Reviewers
Triage Team - Commits
- R3336:4faa4dc67a8d: Enable subprocess sandboxing for libwebkit-gtk
- Browse different sites to verify that everything works as expected.
- Verify that performace doesn't regress with running sandboxed compared to running without.
Diff Detail
Diff Detail
- Repository
- R3336 libwebkit-gtk
- Lint
Automatic diff as part of commit; lint not applicable. - Unit
Automatic diff as part of commit; unit tests not applicable.
Event Timeline
Comment Actions
Build with bubbelwrap sandbox. This should lead to better web security for applications leveraging webkit-gtk.
So how are we testing that we're actually running these webkit instances in a sandboxed environment?
Comment Actions
Well, I haven't find any good way to test it. Can't possibly be less secure than without it though.
Comment Actions
Well unless you have a way to verifiably ensure it even works in the first place, it isn't any more secure, which is the point of it.
Comment Actions
@JoshStrobl I have now verified that it is being used by libwebkit-gtk, using pstree. The following picture is without bwrap support:
The next image is with. Notice how WebKitWebProces is a child process of bwrap:
