Re: Isolating Firefox in a nested X server, and running as a different user

2012-12-16 Thread Robert Connolly
Ok. I took the suggestions, and now have: Xephyr -screen 1358x693 :1 ssh -Xf firefox@localhost 'twm -display :1 firefox -no-remote --display :1' I found the xsel(1) scripts to do copying and pasting from different displays, and it works with some getting used to. I intend to make some

Re: Isolating Firefox in a nested X server, and running as a different user

2012-12-16 Thread Jiri B
On Sun, Dec 16, 2012 at 02:21:59PM -0800, Robert Connolly wrote: I would like to hear comments about using pf to filter user/group, to make sure Firefox uses a proxy. The idea behind this is to stop Firefox from leaking my IP. Is this the most efficient way to do this? I block an user using

Re: Isolating Firefox in a nested X server, and running as a different user

2012-12-03 Thread Jiri B
On Sat, Dec 01, 2012 at 08:53:53PM -0800, Robert Connolly wrote: Hello. In an effort to isolate Firefox (or any graphical browser) from my user account, I have added a 'firefox' user and group, added 'firefox' user to sshd_config to allow x11 forwarding, and ran the following commands: $

Re: Isolating Firefox in a nested X server, and running as a different user

2012-12-02 Thread John Long
On Sat, Dec 01, 2012 at 08:53:53PM -0800, Robert Connolly wrote: Hello. In an effort to isolate Firefox (or any graphical browser) from my user account, I have added a 'firefox' user and group, added 'firefox' user to sshd_config to allow x11 forwarding, and ran the following commands: $

Re: Isolating Firefox in a nested X server, and running as a different user

2012-12-02 Thread Matthieu Herrb
You should not use the -Y option to ssh. It gives your 'firefox' session acess to your main X session through the ssh X tunnel (and the DISPLAY environment variable). See http://gouloum.fr/doc/desktop_sec.html for a similar approach (using sudo instead of ssh to switch users). On Dec 2, 2012

Isolating Firefox in a nested X server, and running as a different user

2012-12-01 Thread Robert Connolly
Hello. In an effort to isolate Firefox (or any graphical browser) from my user account, I have added a 'firefox' user and group, added 'firefox' user to sshd_config to allow x11 forwarding, and ran the following commands: $ Xephyr :1 $ ssh -Yf firefox@localhost firefox --display :1 This can