xguest: firefox - execmem

[Christoph A.]

Hi,

I wanted to try the xguest user, but firefox always crashed on startup.

This AVC appears many times in the logs:

type=AVC msg=audit(1250580934.287:24730): avc: denied { execmem } for
pid=4845 comm="firefox" scontext=xguest_u:xguest_r:mozilla_t:s0
tcontext=xguest_u:xguest_r:mozilla_t:s0 tclass=process


execmem is not allowed:
getsebool -a|grep execmem
allow_execmem --> off

Allowing execmem resolves the problem, but is there a better solution
for this?

Another question:

I would like to make some permanent changes to the xguest account
(keyboard layout, safe passphrase for wifi access, set keyring pw,
remove some icons,...)
How can I as admin do that?

thanks,
Christoph

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20090818/d0d16785/attachment.sig>