#5489 HIGH Update.: SSL in browse fails under rainbow

Zarro Boogs per Child bugtracker at laptop.org
Thu Dec 20 18:20:15 EST 2007


#5489: SSL in browse fails under  rainbow
-----------------------+----------------------------------------------------
  Reporter:  mleech    |       Owner:  erikos                           
      Type:  defect    |      Status:  new                              
  Priority:  high      |   Milestone:  Update.1                         
 Component:  security  |     Version:                                   
Resolution:            |    Keywords:  review?, ssl, rainbow-integration
  Verified:  0         |  
-----------------------+----------------------------------------------------

Comment(by marco):

 I'm not completely convinced by the "copy profile around" approach. I
 think it would require quite a bit of testing (code freeze is near), it's
 just a short time solution and it would have to be cut/pasted in all the
 "web based" activities.

 What I propose is:

  1. Run Browser outside container. One line fix in sugar.
  2. Patch xulrunner to fix the problematic permissions we know about (i.e.
 the files which are normally created in the profile). I think this would
 cover pretty well the "web based" activities because being only a single
 website it's easy to verify that stuff works and patch more permissions if
 necessary (also we don't ship those by default so the risk is smaller).

-- 
Ticket URL: <http://dev.laptop.org/ticket/5489#comment:7>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system



More information about the Bugs mailing list