writing a firefox policy

[Valdis.Kletnieks at vt.edu]

On Thu, 20 Jul 2006 02:11:50 EDT, Peter Pun said:

> Apart from minimal library usage, what other correct behaviours should
> I restrict firefox to?

If I remember correctly, there's already a 'mozilla' policy which should
serve as a starting point.  One *big* constraint you can put on it is
to prevent looking at any files in /home except ~/.mozilla and ~/Downloads
(or whatever you decide to call it) (Some finessing to allow reading of
~ so you can get to ~/.mozilla is a Good Idea :)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20060720/cf2c5172/attachment.sig>