Hi, Seth Arnold wrote: > On Fri, Mar 16, 2007 at 10:52:27PM +0100, Marcus Meissner wrote: >>> I would like to feature-request AppArmored FireFox for openSUSE 10.3 ! > ... >>> I think openSUSE 10.3 needs to have 2 versions of FireFox installed by >>> default; Both AppArmored and normal. > >> We tried this for SUSE Linux 10.0 and it was quote difficult ;) >> But with constraints, yes. >> See /etc/apparmor/profiles/extras/*firefox* for some premade sample >> profiles. > > Though the idea of providing _two_ firefox programs by default, one > confined and one unconfined, is a pretty good idea. > > The problem with our 10.0 confined mozilla was a _really_ wide-open > profile -- it could do nearly anything, but it was supposed to be able > to work out-of-the-box for everyone. And yet it wasn't open enough. :) > > But providing two versions, one intentionally locked down to do very > little 'fun' stuff, and one that's more or less wide open, is a really > good idea. > > I'll talk with the Mozilla maintainer. (In his copious spare time -- > providing security updates for mozilla and firefox is nearly full-time > job.)
You don't want to let me comment on that one! Feel free to involve me in your discussion if you think it makes sense. Wolfgang -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
