onatinadresi@tutanota.com wrote:
> I have no intention to disable unveil permanently. I was just trying
> to solve a bug.
But it does not solve a bug.
It does not even identify the bugs.
If you really wanted to try to act like a developer, you would grab a
huge piece of disk and ktrace -di the browser.
I have also edited source code to add utrace() calls so I can identify
the chunks of code I am in, when reading the ktrace output.
Disabling unveil and pledge is going to provide you with no insight
you can follow.
When I saw that it didn't work, I enabled it again.
> Yes, I considered using linux. I give it a go from time to time. It gets
> worse every time. It moves away from unix philosophy. I don't like
> it. If I could, I would use plan9 (joking). OpenBSD does not currently
> support the wifi chip on my laptop and the touchpad freezes after
> a while. But I plug in a dongle and a USB mouse and continue
> using OpenBSD. Thank you all for this great operating system.
>
> Jan 14, 2023, 18:04 by deraadt@openbsd.org:
>
> At some point you have to realize two things
>
> - the restrictions we added to browsers inside are *intentional*
> to reduce access outside of their general usage, in particular
> restrictions inside your home directory
>
> - But some libraries and applications you are trying to use are
> designed to violate those principles *intentionally*, because
> they are written by people on other operating systems, and they
> either believe they should have access to everything, or they are
> written to inadvertently access such things.
>
> So these principles are incompatible.
>
> Sometimes a middle ground can be reached, but there are so many of these
> circumstances that it is likely that all the possible use cases will
> never be satisfied. So it is a huge amount of developer time being
> spent _for the atypical user_.
>
> So, have you considered using Linux instead? And I'm really not joking.
> I'm very serious. That is a system, like Windows, bending over backwards to
> ensure that applications can do anything they want inside your home
> directory.
>
> It's so bizzare. You are disabling one type of security to gain what
> you believe is another type of security, hammering nails you do not know.
>
> Do you not sense the dissonance?
>
> onatinadresi@tutanota.com wrote:
>
> (sorry, I forgot to break lines)
>
> ok, I disabled unveil by renaming all unveil* files and creating new files
> that contain only "# disable". the issue persists though. another hint:
> libmozav* files in /usr/local/lib/tor-browser have the extension .7.0.
> those in /usr/local/lib/firefox-esr, have the extension 9.0. maybe
> that's the reason.
>
> Jan 13, 2023, 23:55 by :
>
> > ok, I disabled unveil by renaming all unveil* files and creating new files
> that contain only "# disable". the issue persists though. another hint:
> libmozav* files in /usr/local/lib/tor-browser have the extension .7.0. those
> in /usr/local/lib/firefox-esr, have the extension 9.0. maybe that's the
> reason.
> >
> > Jan 13, 2023, 14:26 by stu@spacehopper.org:
> >
> >> On 2023/01/13 13:30, onatinadresi@tutanota.com wrote:
> >>
> >>> before installing ffmpeg, both tor-browser and firefox-esr play
> >>> youtube videos with sound. after installing ffmpeg, firefox-esr
> >>> plays videos on other sites too but tor-browser does not. it
> >>> shows a warning that I need to install codecs. I wonder if it's
> >>> an unveil issue. I would try disabling unveil for tor-browser
> >>> but I couldn't find any documentation on how to disable unveil
> >>>
> >>
> >> Should be same as firefox, but in /etc/tor-browser instead.
> >>
>
No comments:
Post a Comment