fedora-selinux August 2010 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: Re: sandbox: firefox

Re: sandbox: firefox

From: Daniel J Walsh <dwalsh_at_nospam>
Date: Mon Aug 16 2010 - 11:04:52 GMT
To: "Christoph A." <casmls@gmail.com>

Hash: SHA1

On 08/15/2010 11:12 AM, Christoph A. wrote:
> Hi,
> I regularly use firefox in a SELinux sandbox.
> Sometimes some strange behaviour arises:
> - scrolling results in zooming
> - every click on a link results in 'Save As' dialog
> - mouse can't leave the sandbox window (until the window gets closed
> with ctrl-w)
> - lets call it "strange" keyboard mapping: pressing keys results in
> actions within the firefox menu
> Somehow it looks like ctrl is pressed all the time.
> These symptoms don't come togheter.
> The 'mouse can' t leave' - problem occurred only twice.
> These symptoms usually occur while many tabs are open.
> Is anyone else experiencing similar behaviour?
> btw:
> If you are using a sandboxed firefox as your default browser through
> 'System' -> 'Preferences' -> 'Preferred Applications' -> Internet ->
> Command
> consider double quoting %s in the command -> '"%s"'
> or you might just get a black Xephyr window without firefox if your URL
> contains special chars. I guess this happens because these parameters
> get passed around (sandbox -> sandboxX.sh).
> Don't know if this should be considered a bug.
> kind regards,
> Christoph A.
> --
> selinux mailing list
> selinux@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
It might be a problem interacting with Xephyr?

One idea would be to run in permissive mode and see if everything works
properly? If they do then it might be a denial against the X Server
that is causing your problem. If not, then it is probably Xephyr/X Setup.

You could run something like

 sandbox -X -t sandbox_web_t -W metacity xterm

Then run firefox withing the xterm and see if it complains about anything.

Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux