Chromium sandboxing on FreeBSD

Arto Pekkanen isoa at
Fri Jul 15 11:57:49 UTC 2016

The lack of co-operation from Chromium upstream might also explain why 
Chromium is so unstable on FreeBSD. I mean, I get frequent tab crashes, 
and crashes the browser altogether. If the issues with 
Chromium are to be resolved, we need people from upstream to take part 
in squashing the bugs on the FreeBSD version of Chromium. PRs have been 
filed regarding instability, but thus far there's been no fix.

Firefox is also pretty bad, it slows down to a crawl after using it for 
a few hours. The other browsers are also either unstable or barely 
usable. I tried Epiphany a few days ago, and it seems to get stuck 
frequently. Not sure if the problem is in Webkit2.

I'd like to profile Firefox regarding the slowdown issue, but profiling 
doesn't work on FreeBSD. The current version of Firefox should have a 
profiler function built in, usable via Developer Tools menu, but it is 
simply not there. Maybe I'll file a PR about this ...

Baptiste Daroussin kirjoitti 09.07.2016 22:52:
> On Sat, Jul 09, 2016 at 11:36:22AM -0700, Matthew Macy wrote:
>> How much of Chromium's sandboxing code actually works on FreeBSD? On 
>> Linux it relies in part on user namespaces which appear to be a much 
>> more modular equivalent of jails usable by unprivileged processes.
> People working on chromium (now, I'm not anymore) would know better but 
> Google
> sponsored capsicum development for sanboxing chromium, there are lots 
> of
> talks/papers available out there explaining that. But on the otherside 
> upstream
> never accepted (or almost never accepted) our patches to run on freebsd
> resulting in the current ports as now contain 395 patches to run there. 
> So the
> capsicum patches were never integrated neither upstream neither on 
> freebsd...
> btw big thanks to the people working on keeping chromium working on 
> FreeBSD
> given how unfriendly upstream is...
> Google chrome team is not friendly to projects which are not Linux, 
> Windows or
> Mac OS.
> Best regards,
> Bapt

Arto Pekkanen

More information about the freebsd-chromium mailing list