Re: [tor-bugs] #20774 [Applications/Tor Browser Sandbox]: Support foreign language input where possible.

[Tor Bug Tracker & Wiki]

#20774: Support foreign language input where possible.
--+-
 Reporter:  yawning   |  Owner:  yawning
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser Sandbox  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+-

Comment (by yawning):

 I don't think this is actually possible to do safely without spending a
 few months carefully pouring over the I-Bus/D-Bus code to ensure that
 enabling any of this doesn't create a sandbox escape that allows for code
 execution or data exfiltration.

 So while important I'm tempted to WONTFIX this.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20774 [Applications/Tor Browser Sandbox]: Support foreign language input where possible.

[Tor Bug Tracker & Wiki]

#20774: Support foreign language input where possible.
--+-
 Reporter:  yawning   |  Owner:  yawning
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser Sandbox  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+-

Comment (by yawning):

 Looks like D-Bus might get changes to make this less painful, in which
 case this will be easier to do on systems with modern D-Bus.  So
 basically, assuming I wait on this, Debian stable users will get
 sandboxed-tb foreign language support sometime in the 2020s.

 https://smcv.pseudorandom.co.uk/2017/dbus_and_containers/

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20774 [Applications/Tor Browser Sandbox]: Support foreign language input where possible.

[Tor Bug Tracker & Wiki]

#20774: Support foreign language input where possible.
--+-
 Reporter:  yawning   |  Owner:  yawning
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser Sandbox  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+-

Comment (by yawning):

 To checkpoint what I have managed to figure out:

  * XIM support is totally broken, otherwise that would be the easiest way
 to get basically everything to work.  When Tor Browser switches to Gtk_3,
 this may be worth revisiting, but will most likely go away with Wayland,
 so isn't a long term viable solution.

  * I-Bus appears to be the most common (and is what I use).  At a first
 glance it involves, giving the container access to `org.freedesktop.IBus`
 on the session D-Bus (and only that service), along with giving access to
 the I-Bus abstract socket (See `.config/ibus/bus/`).  Making this
 resilient to things that the user can do external to the sandbox (eg:
 Restarting the ibus daemon) adds further complexity.

  * Fcitx support would also be nice, but is probably on the order of
 complexity of supporting I-Bus and is less popular.

  * SCIM and uim probably don't have the userbase anymore to justify
 development time.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20774 [Applications/Tor Browser Sandbox]: Support foreign language input where possible.

[Tor Bug Tracker & Wiki]

#20774: Support foreign language input where possible.
--+-
 Reporter:  yawning   |  Owner:  yawning
 Type:  enhancement   | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser Sandbox  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+-

Comment (by yawning):

 Well, XIM is a no go because XIM support is broken in Tor Browser even
 without the sandbox.  If #15908 is any indication, this has been totally
 broken for a while.  Sigh.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20774 [Applications/Tor Browser Sandbox]: Support foreign language input where possible.

[Tor Bug Tracker & Wiki]

#20774: Support foreign language input where possible.
--+-
 Reporter:  yawning   |  Owner:  yawning
 Type:  enhancement   | Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser Sandbox  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+-

Comment (by yawning):

 I might be able to get away with supporting XIM instead of IBus since IBus
 supports that protocol, but I'll be really sad when Wayland takes over the
 world (though this appears to be easier).

 Either way, I need to include shared objects from
 `/usr/lib/gtk-2.0/2.10.0/immodules` along with a sensible
 `/usr/lib/gtk-2.0/2.10.0/immodules.cache` in the container.  Just the
 shared object changes.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs