Page 1 of 1

Iron's Sandbox

Posted: Thu Jun 23, 2016 6:13 pm
by Maxim
Thank you for the development of SRWare Iron. I think this fast & comfort browser has good potentials.
I have a question about security of this browser. On the page chrome://sandbox everybody can see status of Iron's sandbox:
Sandbox Status

SUID Sandbox No
Namespace Sandbox No
PID namespaces No
Network namespaces No
Seccomp-BPF sandbox Yes
Seccomp-BPF sandbox supports TSYNC No
Yama LSM enforcing No
You are not adequately sandboxed!
For example, Chromium, Google Chrome or Vivaldi are adequately sandboxed (SUID Sandbox - Yes, Namespace Sandbox - Yes, PID namespaces - Yes etc.).
SRWare Iron works without sandbox. But... why? Is it secure for chromium-based browser to do so?

Re: Iron's Sandbox

Posted: Mon Jul 04, 2016 1:23 pm
by SRWare
Image

Works fine here.
Please update to a linux kernel >= 3.10.