sandbox: firefox

[Christoph A.]

Hi,

I regularly use firefox in a SELinux sandbox.
Sometimes some strange behaviour arises:

- scrolling results in zooming
- every click on a link results in 'Save As' dialog
- mouse can't leave the sandbox window (until the window gets closed
with ctrl-w)
- lets call it "strange" keyboard mapping: pressing keys results in
actions within the firefox menu

Somehow it looks like ctrl is pressed all the time.
These symptoms don't come togheter.
The 'mouse can' t leave' - problem occurred only twice.
These symptoms usually occur while many tabs are open.

Is anyone else experiencing similar behaviour?

btw:
If you are using a sandboxed firefox as your default browser through
'System' -> 'Preferences' -> 'Preferred Applications' ->
Internet ->
Command
consider double quoting %s in the command -> '"%s"'
or you might just get a black Xephyr window without firefox if your URL
contains special chars. I guess this happens because these parameters
get passed around (sandbox -> sandboxX.sh).
Don't know if this should be considered a bug.

kind regards,
Christoph A.

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/15/2010 11:12 AM, Christoph A. wrote:
>  Hi,
>  
>  I regularly use firefox in a SELinux sandbox.
>  Sometimes some strange behaviour arises:
>  
>  - scrolling results in zooming
>  - every click on a link results in 'Save As' dialog
>  - mouse can't leave the sandbox window (until the window gets closed
>  with ctrl-w)
>  - lets call it "strange" keyboard mapping: pressing keys results in
>  actions within the firefox menu
>  
>  Somehow it looks like ctrl is pressed all the time.
>  These symptoms don't come togheter.
>  The 'mouse can' t leave' - problem occurred only twice.
>  These symptoms usually occur while many tabs are open.
>  
>  Is anyone else experiencing similar behaviour?
>  
>  btw:
>  If you are using a sandboxed firefox as your default browser through
>  'System' -> 'Preferences' -> 'Preferred Applications' ->
> Internet ->
>  Command
>  consider double quoting %s in the command -> '"%s"'
>  or you might just get a black Xephyr window without firefox if your URL
>  contains special chars. I guess this happens because these parameters
>  get passed around (sandbox -> sandboxX.sh).
>  Don't know if this should be considered a bug.
>  
>  kind regards,
>  Christoph A.
>  
>  
>  
>  
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
It might be a problem
interacting with Xephyr?

One idea would be to run in permissive mode and see if everything works
properly?  If they do then it might be a denial against the X Server
that is causing your problem.  If not, then it is probably Xephyr/X Setup.

You could run something like

 sandbox -X -t sandbox_web_t -W metacity xterm

Then run firefox withing the xterm and see if it complains about anything.


> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.16 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkxpG1QACgkQrlYvE4MpobOTGwCeLYtjHhUzs+tZsCtoWllg4fhA
> bTgAnijwn6OooclU/VEcuNp+WLu7tT3m
> =GYpm
> -----END PGP SIGNATURE-----

[Christoph A.]

On 08/16/2010 01:04 PM, Daniel J Walsh wrote:
>  It might be a problem interacting with Xephyr?
>  
>  One idea would be to run in permissive mode and see if everything works
>  properly?  If they do then it might be a denial against the X Server
>  that is causing your problem.  If not, then it is probably Xephyr/X Setup.
>  
>  You could run something like
>  
>   sandbox -X -t sandbox_web_t -W metacity xterm
>  
>  Then run firefox withing the xterm and see if it complains about anything. 
I changed my settings and start firefox with the following command:
sandbox -X  -t sandbox_web_t -W metacity xterm -e firefox

since using metacity I didn't encounter the mentioned problems, but I
will observe it for some more time.

thank you so far,
Christoph

[Christoph A.]

On 08/15/2010 05:12 PM, Christoph A. wrote:
>  - mouse can't leave the sandbox window (until the window gets
> closed
>  with ctrl-w) 
I just observed it again:

sandbox -X evince

** (evince:23033): WARNING **: Failed to create dbus proxy for
org.gnome.SettingsDaemon: Could not get owner of name
'org.gnome.SettingsDaemon': no such name
Hangup

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/31/2010 01:44 PM, Christoph A. wrote:
>  On 08/15/2010 05:12 PM, Christoph A. wrote:
> > - mouse can't leave the sandbox window (until the window gets closed
> > with ctrl-w)
>  
>  I just observed it again:
>  
>  sandbox -X evince
>  
>  ** (evince:23033): WARNING **: Failed to create dbus proxy for
>  org.gnome.SettingsDaemon: Could not get owner of name
>  'org.gnome.SettingsDaemon': no such name
>  Hangup
>  
>  
>  
>  
>  
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
Probably a Xephyr problem
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.16 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkx9QNgACgkQrlYvE4MpobMnVgCghMjVNzE1+6C+t5J4D3242geR
> 4XQAnA1iFnlLg5vZ8NWXiu9q2255abt7
> =4jox
> -----END PGP SIGNATURE-----