Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • T Tor Browser
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1,286
    • Issues 1,286
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 6
    • Merge requests 6
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • Tor Browser
  • Issues
  • #27894
Closed
Open
Created Sep 27, 2018 by Trac@tracbot

Isolate TBB in a VM with X2Go

I'm trying to set up the Tor Browser so it runs on a special KVM virtual machine, yet I can run it from other machines in the LAN. To do this I have the current TBB installed in machine 'hex', and try to access it from 'droog' using X2Go.

X2Go is set to 'Single Application' mode and 'Internet Browser'. The means that the browser is running on hex, and only the visual objects are being transferred to droog. And it means that if TBB is ever compromised, the malefactor is trapped in hex.

Running Firefox this way works perfectly. Setting the Pyhoca client to Internet Browser in droog means that on hex the x2goserver searches for an installed browser using /usr/bin/x2goruncommand. So I modify the relevant blob, thus:

if [ "$cmd" == "WWWBROWSER" ]; then
        if [ -e "/usr/bin/firefox.real" ]; then
                cmd="/usr/bin/firefox.real"
#*************************************************
        elif  [ -e "/usr/local/share/tor-browser_en-US/Browser/start-tor-browser" ]; then
                cmd="/usr/local/share/tor-browser_en-US/Browser/start-tor-browser --debug"
#*************************************************
        elif  [ -e "/usr/bin/iceweasel" ]; then
                cmd="/usr/bin/iceweasel"
        elif  [ -e "/usr/bin/firefox" ]; then
                cmd="/usr/bin/firefox"
        elif  [ -e "/usr/bin/abrowser" ]; then
                cmd="/usr/bin/abrowser"
        elif  [ -e "/usr/bin/konqueror" ]; then
                cmd="/usr/bin/konqueror"
        elif  [ -e "/usr/bin/galeon" ]; then
                cmd="/usr/bin/galeon"
        elif  [ -e "/usr/bin/chromium-browser" ]; then
                cmd="/usr/bin/chromium-browser"
        fi
fi

But when I do this and try to run TBB remotely with my Pyhoca settings, I get the attached.

When I try to start TBB in a KVM console window, it's upset that it can only be run on an Xwindows system. But this is bogus as Firefox runs in X2Go with the VM in multi-user mode.

Trac:
Username: colony.three@protonmail.ch

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking