Firefox 56/57/58 sound/videos/printing not working when sandboxed

[Barb@Invincea]

Hello henryg ,

We have not yet put a fix for this. So if you experience issues with Firefox, you will need to change the settings as explained in this thread.

Regards,
Barb.-

[henryg]

I have left well alone, ie security.sandbox.content.level remains set to 2

[Phlipp]

:/
Unfortunately, none of these many options work under Win7 Home Premium - x64bit - Firefox Quantum 59.0.1(64-Bit)

browser.tabs.remote.autostart.2 is not listed under about:config

[Spaceman Spiff]

With all this Firefox sandbox level upheaval/confusion,
I have been wondering about the following:

1) Could using Sandboxie together with a recent Firefox 59 (=FFX sandbox level 4)
theoretically make things LESS secure ?

In other words, could Sandboxie conflict with the Firefox sandbox, potentially lessening security?

I am NOT talking about sound/videos/printing not working with a sandbox level > 2.
I am talking about higher Firefox sandbox levels theoretically conflicting with Sandboxie
and thus actually weakening security...


2) With Firefox implementing Alternate Desktop (=sandbox level 5), and CFG (control flow guard)
in Firefox 60, it seems like the Firefox developers have made big strides forward regarding security.
I am asking myself if all the recent hassle with Firefox+Sandboxie is still worth the effort, or if
the security gain from this combination will be rather negligible quite soon...

An educated response by the developers would be much appreciated Thanks in advance!

[Barb@Invincea]

Hello Spaceman Spiff,

There are several threads about Sandbox content level 4:
viewtopic.php?p=132827#p132827

Aside from the all the info listed in this thread, we have another one in the Quick Questions section that covers a bit more of what's going on:
viewtopic.php?f=17&t=25369#p132036

I have made the devs aware of your question in case they have anything else to add.

Regards,
Barb.-

[Curt@invincea]

With all this Firefox sandbox level upheaval/confusion,
I have been wondering about the following:

1) Could using Sandboxie together with a recent Firefox 59 (=FFX sandbox level 4)
theoretically make things LESS secure ?

In other words, could Sandboxie conflict with the Firefox sandbox, potentially lessening security?

I am NOT talking about sound/videos/printing not working with a sandbox level > 2.
I am talking about higher Firefox sandbox levels theoretically conflicting with Sandboxie
and thus actually weakening security...


2) With Firefox implementing Alternate Desktop (=sandbox level 5), and CFG (control flow guard)
in Firefox 60, it seems like the Firefox developers have made big strides forward regarding security.
I am asking myself if all the recent hassle with Firefox+Sandboxie is still worth the effort, or if
the security gain from this combination will be rather negligible quite soon...

An educated response by the developers would be much appreciated Thanks in advance!

1) You are not lessening security by lowering the FF sandbox level and running it under Sandboxie. Sandboxie has been providing the same sandbox protections for years.

2) While FF's (and Chrome's) sandbox may protect you while browsing, you are still open to malware by downloading and running binaries off the Internet. FF's sandbox also has no driver enforcement -- it is all user-mode. User mode hooks can be removed and/or bypassed.

[pipppero2007]

Hello,

with Portable Apps and Windows 8.1 (latest build) I can't have sound with:

Firefox Portable Apps and the latest Sandboxie

I don't have this computer here right now to test so my question: I can use the workaround written here to solve? Should be the same?

[cloves]

Hello everyone,

after one month without sound in FF56, 56.0.1, and 56.0.2 (64bit) inside SB5.20 (64bit) on Windows 7 prof SP1 64bit I finally found a workaround:
Setting

Code: Select all

browser.tabs.remote.autostart.2=false

is the solution for me.

Changing security.sandbox.content.level to 2/1/0 did not help, browser.tabs.remote.autostart was already set to false.

So my current config is al follows:
browser.tabs.remote.autostart.2=false (manually set)
security.sandbox.content.level = 3 (standard)
browser.tabs.remote.autostart = false (standard)

When I toggle autostart.2 and restart the browser the sound goes on/off.

Thank you this worked! Running ff 52.7.22 ESR

[friegeof@isu.edu]

Hi, Barb@Invincea and others,

Working in Sandoxie 5.24 (32-bit), I had no audio or video when running Firefox 59.0.1 (32-bit) on my old computer. Per Barb's recommendation, I lowered the security setting from 4 to 1 to achieve functionality. (2 was still too robust, I guess.)

I saw another comment about changing something related to tabs/remote/boolean/true-or-false, etc. Is that fix preferable to the one relating to "security"? Have I made myself less secure?

I am back up and running, but please let me know if the other option is a better one. Thank you.

Geoff

[Phlipp]

No readjustments necessary under several win10 operating systems. :/

[Phlipp]

Hello Stardance,

Have you performed the steps outside Sandboxie? If not, please do that and then delete the contents of your sandbox to re-try.

If the issue still persists, create a new Sandbox with default settings and let us know if the problem follows you there.

If all fails, please create a new Firefox profile, make sure that the sandbox content level is set to 2 or lower, and if needed disable multiprocess (browser.tabs.remote... ). Then re-try using Firefox to play videos inside Sandboxie.

Regards,
Barb.-

Solved: Sound is back. Thx Barb.-

Win7 Home Premium - x64bit - Firefox Quantum 59.0.1(64-Bit)