OpenBSD Secpimp your browser: unveil is coming to Firefox

[fvgit]

Joshua Stein (jcs@) has been working on a patchset for Firefox:

I've been working on enhancing the security of OpenBSD's Firefox port over the past couple weeks and would like some wider testing

A new Firefox patchset is available if you're following along at home. This one sacrifices possible upstream compatibility to gain more security by moving unveil and pledge settings to files in /etc/firefox, making them immutable at runtime.

https://marc.info/?l=openbsd-ports&m...2881816553&w=2
https://twitter.com/jcs/status/1176957591861248003
https://jcs.org/patches/firefox-port-unveil9.diff (< latest version of the patch at time of writing)
https://jcs.org/patches/

Some not-so-random quotes:

Originally Posted by @Bizitzarenjokoa

Thanks! Will this be available for OpenBSD 6.6?

Originally Posted by @jcs

Not sure yet, but hopefully

Originally Posted by @bob_beck

yessss