<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
We are confining the plugins that firefox runs, as long as you don't
disable the unconfined_mozilla_plugin_transition boolean.<br>
<br>
Confining firefox in general is difficult to do. You might
investigate the selinux sandbox, which allows you to run firefox in
a sandbox/container environment.<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 03/27/2014 08:00 AM,
<a class="moz-txt-link-abbreviated" href="mailto:hibhib@hushmail.com">hibhib@hushmail.com</a> wrote:<br>
</div>
<blockquote cite="mid:20140327120042.C64682038E@smtp.hushmail.com"
type="cite"><span style="font-family: Arial; font-size: 13px;">I
have a default Fedora 20 system. I have made no SELinux policy
changes from the default.<br>
<br>
How do I enable SELinux protection for Firefox? Are there some
simple steps I can take? I see that there is a "mozilla" policy
but firefox always runs in unconfined domain.<br>
<br>
Thanks!<br>
</span>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
selinux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/selinux">https://admin.fedoraproject.org/mailman/listinfo/selinux</a></pre>
</blockquote>
<br>
</body>
</html>