On Fri, Mar 16, 2007 at 11:40:37PM +0200, Alexey Eremenko wrote:
hi all !
I would like to feature-request AppArmored FireFox for openSUSE 10.3 !
The point is: Microsoft did Protected-mode Internet Explorer 7 in Windows Vista, and so, our community must respond with something.
The best response I see is an AppArmored profile for FireFox. I think openSUSE 10.3 needs to have 2 versions of FireFox installed by default; Both AppArmored and normal.
The Armored version will *not* allow to save anything anywhere. It will allow to save only in one directory: ~/downloads so all hackers alike will not be able to do much...
I understand it will cause problems such as: plugins (Adobe Reader) might stop working, you won't be able to install themes and extensions, etc... This is why we must have both normal version and a secured one !
What do you think of this idea?
We tried this for SUSE Linux 10.0 and it was quote difficult ;) But with constraints, yes. See /etc/apparmor/profiles/extras/*firefox* for some premade sample profiles. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org