FoxInABox

The fox is safe in the sandbox. The fox cannot escape.

Documentation

• One page overview
• FAQ
• Standing meeting notes
• Process Model
• Addon Strategy

Status

We have a plan. Take the e10s code, slap the Chromium sandbox around the content process, and get AdBlockPlus working with it.

FoxInABox/ThingsThatShouldWork

Tracking:

• bug 742434 - seccomp-bpf (Desktop Linux)
• bug 790923 - seccomp sandboxing (B2G Linux)
• bug 922756 - chromium sandbox (Windows)
• bug 387248 - Mac OS X (Apple's Sandbox guide)
• bug 730956 - Low rights Firefox (whole app sandbox)

Puzzle Pieces

• GPU remoting (TBD)
• Accessibility support
• Addon support path
• Process Model (evolving? 2? Per-Tab?)
• Incremental tightening plan
• Child process resource limits
• DevTools support

Resources

Sandboxing

• Features/Security/Low_rights_Firefox
• Ian's sandboxing page
• Servo
• Chromium Sandbox

Related projects

• Electrolysis
• Embedding/IPCLiteAPI, https://github.com/tmeshkova/mozilla-central
• Native Client on Wikipedia - has links to papers on Native Client's design and use of SFI, as well as papers on SFI itself
• AMO/Squeaky, or Make Addons Awesome

How things work

• IPDL Tutorial
• DocShell

Who we are

Some folks from the SecurityEngineering team: briansmith, mmc, keeler, grobinson, ckerschb, sid, and bbondy.

• Mailing list: boxing@lists.mozilla.org
• IRC: irc.mozilla.org #boxing