I have no intention to disable unveil permanently. I was just trying
to solve a bug. When I saw that it didn't work, I enabled it again.
Yes, I considered using linux. I give it a go from time to time. It gets
worse every time. It moves away from unix philosophy. I don't like
it. If I could, I would use plan9 (joking). OpenBSD does not currently
support the wifi chip on my laptop and the touchpad freezes after
a while. But I plug in a dongle and a USB mouse and continue
using OpenBSD. Thank you all for this great operating system.
Jan 14, 2023, 18:04 by deraadt@openbsd.org:
> At some point you have to realize two things
>
> - the restrictions we added to browsers inside are *intentional*
> to reduce access outside of their general usage, in particular
> restrictions inside your home directory
>
> - But some libraries and applications you are trying to use are
> designed to violate those principles *intentionally*, because
> they are written by people on other operating systems, and they
> either believe they should have access to everything, or they are
> written to inadvertently access such things.
>
> So these principles are incompatible.
>
> Sometimes a middle ground can be reached, but there are so many of these
> circumstances that it is likely that all the possible use cases will
> never be satisfied. So it is a huge amount of developer time being
> spent _for the atypical user_.
>
> So, have you considered using Linux instead? And I'm really not joking.
> I'm very serious. That is a system, like Windows, bending over backwards to
> ensure that applications can do anything they want inside your home
> directory.
>
> It's so bizzare. You are disabling one type of security to gain what
> you believe is another type of security, hammering nails you do not know.
>
> Do you not sense the dissonance?
>
> onatinadresi@tutanota.com wrote:
>
>>
>>
>> (sorry, I forgot to break lines)
>>
>> ok, I disabled unveil by renaming all unveil* files and creating new files
>> that contain only "# disable". the issue persists though. another hint:
>> libmozav* files in /usr/local/lib/tor-browser have the extension .7.0.
>> those in /usr/local/lib/firefox-esr, have the extension 9.0. maybe
>> that's the reason.
>>
>> Jan 13, 2023, 23:55 by :
>>
>> > ok, I disabled unveil by renaming all unveil* files and creating new files that contain only "# disable". the issue persists though. another hint: libmozav* files in /usr/local/lib/tor-browser have the extension .7.0. those in /usr/local/lib/firefox-esr, have the extension 9.0. maybe that's the reason.
>> >
>> > Jan 13, 2023, 14:26 by stu@spacehopper.org:
>> >
>> >> On 2023/01/13 13:30, onatinadresi@tutanota.com wrote:
>> >>
>> >>> before installing ffmpeg, both tor-browser and firefox-esr play
>> >>> youtube videos with sound. after installing ffmpeg, firefox-esr
>> >>> plays videos on other sites too but tor-browser does not. it
>> >>> shows a warning that I need to install codecs. I wonder if it's
>> >>> an unveil issue. I would try disabling unveil for tor-browser
>> >>> but I couldn't find any documentation on how to disable unveil
>> >>>
>> >>
>> >> Should be same as firefox, but in /etc/tor-browser instead.
>> >>
>>
No comments:
Post a Comment