Confining Firefox

Anne Wilson cannewilson at
Fri Apr 11 09:02:54 UTC 2008

On Thursday 10 April 2008 08:52:31 pm Daniel J Walsh wrote:
> If you run your plugins in confined mode
> # setsebool -P allow_unconfined_nsplugin_transition=1
> # yum install nspluginwrapper
> # restorecon -R -v ~/
> None of the plugins will be allowed to read directories like .ssh or
> .gpg in your home directory.
> firefox is really difficult to confine, but with nsplugin you can
> confine the plugins fairly well.

Could you please clarify for me - Does the restorecon need to be run every 
time anything is installed to the ~/?

(How many places do I have to check to make everything use the GB keyboard 
layout?  In some places it does use it, in others it doesn't.  It's driving 
me mad!)


More information about the fedora-selinux-list mailing list