[Pkg-privacy-commits] [torbrowser-launcher] 360/476: Disable audio abstraction by default.

[Ximin Luo]

This is an automated email from the git hooks/post-receive script.

infinity0 pushed a commit to branch debian
in repository torbrowser-launcher.

commit 2f5eaa2601449f0819938097623ad0af0f17a9f0
Author: intrigeri <intrigeri at boum.org>
Date:   Sat Aug 16 10:03:06 2014 +0000

    Disable audio abstraction by default.
    
    The person who added it also wrote "I have never managed to get the sound
    working in the Tor Browser either, on YouTube or even playing an MP3", which
    shows that including this abstraction by default gives no practical benefit, but
    opens the attack surface substantially.
---
 apparmor/torbrowser.Browser.firefox | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
index 52b2491..198120b 100644
--- a/apparmor/torbrowser.Browser.firefox
+++ b/apparmor/torbrowser.Browser.firefox
@@ -4,10 +4,10 @@
 /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox {
   #include <abstractions/gnome>
 
-  # Comment out the following line if you don't want the Tor Browser
-  # to have direct access to your sound hardware. Note that "#include"
-  # is *not* a comment, it is valid AppArmor rules syntax.
-  #include <abstractions/audio>
+  # Uncomment the following line if you don't want the Tor Browser
+  # to have direct access to your sound hardware. Note that this is not
+  # enough to have working sound support in Tor Browser.
+  # #include <abstractions/audio>
 
   # Uncomment the following lines if you want to give the Tor Browser read-write
   # access to most of your personal files.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/torbrowser-launcher.git