4 ms·
"The fact that FF runs in a single process seems to be a major security issue since the web views are not sandboxed." Only to people who don't really understan
by ris 13y ago
"The fact that FF runs in a single process seems to be a major security issue since the web views are not sandboxed."
Only to people who don't really understand security. This whole "multi process" "sandboxed" meme started by chrome guys has really got out of hand.
- mrinterweb 13y agoI suppose I was mislead by the mozilla wiki link I posted which states at the top "The goal of the project is to run web content in a separate process from Firefox itself. The two major advantages of this model are security and performance. Security would improve because the content processes could be sandboxed"
- ris 13y agoThe effect is overstated & overrepeated, especially with facilities like e.g. ptrace being available to processes on linux
- fulafel 13y agoNo, ptrace() is not available to Chrome's sandboxed processes. Not in the SUID sandbox and not in the BPF seccomp sandbox. This stuff is described at http://code.google.com/p/chromium/wiki/LinuxSandboxing http://code.google.com/p/chromium/wiki/LinuxSandboxing - if after reading that you still don't think it provides a significant additional layer of security, it would be interesting to hear what flaws you see.