xguest: firefox - execmem

[Christoph A.]

Hi,

I wanted to try the xguest user, but firefox always crashed on startup.

This AVC appears many times in the logs:

type=AVC msg=audit(1250580934.287:24730): avc: denied { execmem } for
pid=4845 comm="firefox" scontext=xguest_u:xguest_r:mozilla_t:s0
tcontext=xguest_u:xguest_r:mozilla_t:s0 tclass=process


execmem is not allowed:
getsebool -a|grep execmem
allow_execmem --> off

Allowing execmem resolves the problem, but is there a better solution
for this?

Another question:

I would like to make some permanent changes to the xguest account
(keyboard layout, safe passphrase for wifi access, set keyring pw,
remove some icons,...)
How can I as admin do that?

thanks,
Christoph