You might even want to as far as creating another user to run the bancking browser as. I'd trust OS enforced separation a little more than application level separation.
You can use other levels of isolation as well -- e.g. selinux sandbox, VMs (virtualbox or other) etc. Sometimes it's all to nought though as the weakist link in the chain is people. -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
