On Fri, Mar 16, 2007 at 11:40:37PM +0200, Alexey Eremenko wrote: > hi all ! > > I would like to feature-request AppArmored FireFox for openSUSE 10.3 ! > > The point is: Microsoft did Protected-mode Internet Explorer 7 in > Windows Vista, and so, our community must respond with something. > > The best response I see is an AppArmored profile for FireFox. > I think openSUSE 10.3 needs to have 2 versions of FireFox installed by > default; Both AppArmored and normal. > > The Armored version will *not* allow to save anything anywhere. It > will allow to save only in one directory: ~/downloads so all hackers > alike will not be able to do much... > > I understand it will cause problems such as: plugins (Adobe Reader) > might stop working, you won't be able to install themes and > extensions, etc... > This is why we must have both normal version and a secured one ! > > What do you think of this idea?
We tried this for SUSE Linux 10.0 and it was quote difficult ;) But with constraints, yes. See /etc/apparmor/profiles/extras/*firefox* for some premade sample profiles. Ciao, Marcus -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
