New equivalent to browser_confine_xguest?

View: New views

2 Messages — Rating Filter: Alert me

by Bruno Wolff III :: Rate this Message:

There used to be a boolean browser_confine_xguest, but there no longer is.
Is there a simple way to not let firefox connect to the network when run
by an xguest user?

--
fedora-selinux-list mailing list
fedora-selinux-list@...
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Re: New equivalent to browser_confine_xguest?

by Daniel J Walsh :: Rate this Message:

On 09/23/2009 01:20 PM, Bruno Wolff III wrote:

> There used to be a boolean browser_confine_xguest, but there no longer is.
> Is there a simple way to not let firefox connect to the network when run
> by an xguest user?
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@...
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
>

If you relabel firefox to bin_t this should remove this capability.

--
fedora-selinux-list mailing list
fedora-selinux-list@...
https://www.redhat.com/mailman/listinfo/fedora-selinux-list