On Fri, Mar 16, 2007 at 10:52:27PM +0100, Marcus Meissner wrote: > > I would like to feature-request AppArmored FireFox for openSUSE 10.3 ! ... > > I think openSUSE 10.3 needs to have 2 versions of FireFox installed by > > default; Both AppArmored and normal.
> We tried this for SUSE Linux 10.0 and it was quote difficult ;) > But with constraints, yes. > See /etc/apparmor/profiles/extras/*firefox* for some premade sample > profiles. Though the idea of providing _two_ firefox programs by default, one confined and one unconfined, is a pretty good idea. The problem with our 10.0 confined mozilla was a _really_ wide-open profile -- it could do nearly anything, but it was supposed to be able to work out-of-the-box for everyone. And yet it wasn't open enough. :) But providing two versions, one intentionally locked down to do very little 'fun' stuff, and one that's more or less wide open, is a really good idea. I'll talk with the Mozilla maintainer. (In his copious spare time -- providing security updates for mozilla and firefox is nearly full-time job.) Thanks for the reminder. :)
pgpJkIBj9V9Dq.pgp
Description: PGP signature
