Confining Firefox

[Anne Wilson]

On Thursday 10 April 2008 08:52:31 pm Daniel J Walsh wrote:
> If you run your plugins in confined mode
>
> # setsebool -P allow_unconfined_nsplugin_transition=1
> # yum install nspluginwrapper
> # restorecon -R -v ~/
>
> None of the plugins will be allowed to read directories like .ssh or
> .gpg in your home directory.
>
> firefox is really difficult to confine, but with nsplugin you can
> confine the plugins fairly well.

Could you please clarify for me - Does the restorecon need to be run every 
time anything is installed to the ~/?

(How many places do I have to check to make everything use the GB keyboard 
layout?  In some places it does use it, in others it doesn't.  It's driving 
me mad!)

Anne