View Single Post
  #1   (View Single Post)  
Old 2nd October 2019
fvgit's Avatar
fvgit fvgit is offline
Spikes in tights
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("U2hlcndvb2QgRm9yZXN0")'
Posts: 229
Thumbs up Secpimp your browser: unveil is coming to Firefox

Joshua Stein (jcs@) has been working on a patchset for Firefox:
Quote:
I've been working on enhancing the security of OpenBSD's Firefox port over the past couple weeks and would like some wider testing
Quote:
A new Firefox patchset is available if you're following along at home. This one sacrifices possible upstream compatibility to gain more security by moving unveil and pledge settings to files in /etc/firefox, making them immutable at runtime.
https://marc.info/?l=openbsd-ports&m...2881816553&w=2
https://twitter.com/jcs/status/1176957591861248003
https://jcs.org/patches/firefox-port-unveil9.diff (< latest version of the patch at time of writing)
https://jcs.org/patches/

Some not-so-random quotes:

Quote:
Originally Posted by @Bizitzarenjokoa
Thanks! Will this be available for OpenBSD 6.6?
Quote:
Originally Posted by @jcs
Not sure yet, but hopefully
Quote:
Originally Posted by @bob_beck
yessss
Reply With Quote