Skip to content

Investigate why the Tor Browser AppArmor profile allows starting Totem

  1. Copy a video that’s not supported by Tor Browser (e.g. .flv) to ~/Tor Browser/.
  2. Open Tor Browser
  3. In about:config, set browser.download.forbid_open_with to false.
  4. Visit ~/Tor Browser/ and click the unsupported video.
  5. Choose “Open with” -> “Videos (default)”
  6. After a while Totem plays the video; in ps faux it’s not a child process of Firefox; Totem is running under its own (enforced) AppArmor profile.

Parent Task: #9534 (closed)

Related issues

Original created by @intrigeri on 10836 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information