Re: Sandbox Firefox

[Miroslav Grepl]

On 07/17/2015 06:01 PM, Robert Gabriel wrote:
>  Hi,
>  
>  I'm on Fedora 22 and trying:
>  
>  sandbox -X -H home_sandbox -T tmp_sandbox -t sandbox_web_t firefox
>  danwalsh.livejournal.com <http://danwalsh.livejournal.com>
>  
>  which results in "Unable to connect" in the opened browser window.
>  
>  First I had to:
>  
>  grep Xephyr /var/log/audit/audit.log | audit2allow -M mypol
>  
>  to get that working so far.
>  
>  I thought "sandbox_web_t" allowed access to HTTP ports?
>  
>  Trying "sandbox_net_t" yields no joy and only a "setenforce 0"
> allows
>  connections.
>  
>  Any help appreciated.
>  
>  Thank you.
>  
>  
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>   
Yes, this is known issue and we have bugs for it. I am trying to find a
solution with the current policy language until we get fixes with CIL.

-- 
Miroslav Grepl
Senior Software Engineer, SELinux Solutions
Red Hat, Inc.