firefox problems with: browser_confine_unconfined --> on

Christoph A. casmls at
Tue May 13 13:13:46 UTC 2008

Daniel J Walsh wrote:

>> type=USER_AVC msg=audit(1210554417.821:80): user pid=1648 uid=81
>> auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023
>> msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.93
>> spid=1783 tpid=3412 scontext=system_u:system_r:hald_t:s0
>> tcontext=unconfined_u:unconfined_r:unconfined_mozilla_t:s0 tclass=dbus :
>> exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'

> No this seems like something that should be allowed.

Thank you for your response.

So browser_confine_unconfined=1 is the right way to confine firefox (of
unconfined_u) like firefox of guest_u?

thanks in advance
Christoph A.

More information about the fedora-selinux-list mailing list