F16: firefox in sandbox_web_t not working (blank window)

[Christoph A.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

I upgraded F14->F15->F16.

I used to run firefox like this:
sandbox -X -t sandbox_web_t firefox

but since the upgrade this does not work anymore. Only a black window
opens with no content.
I tried also in permissive mode and I don't have anything in the
audit.log.

Installed package versions:
libselinux-python-2.1.6-5.fc16.x86_64
libselinux-utils-2.1.6-5.fc16.x86_64
libselinux-2.1.6-5.fc16.i686
selinux-policy-3.10.0-69.fc16.noarch
libselinux-devel-2.1.6-5.fc16.x86_64
libselinux-2.1.6-5.fc16.x86_64
selinux-policy-targeted-3.10.0-69.fc16.noarch
policycoreutils-2.1.4-13.fc16.x86_64
policycoreutils-python-2.1.4-13.fc16.x86_64
policycoreutils-sandbox-2.1.4-13.fc16.x86_64

Is this a known problem?

kind regards,
Christoph
> -----BEGIN PGP SIGNATURE-----
>
> iEYEAREKAAYFAk8CN7cACgkQrq+riTAIEg1EaACfeFnKNqeuvw3aNN7soiVVDafN
> ncQAnjnObrd7tM2FNU85e4x4DN6vCEFZ
> =r0c/
> -----END PGP SIGNATURE-----

[Miroslav Grepl]

On 01/02/2012 11:03 PM, Christoph A. wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi,
>
> I upgraded F14->F15->F16.
>
> I used to run firefox like this:
> sandbox -X -t sandbox_web_t firefox
>
> but since the upgrade this does not work anymore. Only a black window
> opens with no content.
> I tried also in permissive mode and I don't have anything in the
> audit.log.
>
> Installed package versions:
> libselinux-python-2.1.6-5.fc16.x86_64
> libselinux-utils-2.1.6-5.fc16.x86_64
> libselinux-2.1.6-5.fc16.i686
> selinux-policy-3.10.0-69.fc16.noarch
> libselinux-devel-2.1.6-5.fc16.x86_64
> libselinux-2.1.6-5.fc16.x86_64
> selinux-policy-targeted-3.10.0-69.fc16.noarch
> policycoreutils-2.1.4-13.fc16.x86_64
> policycoreutils-python-2.1.4-13.fc16.x86_64
> policycoreutils-sandbox-2.1.4-13.fc16.x86_64
>
> Is this a known problem?
>
> kind regards,
> Christoph
> -----BEGIN PGP SIGNATURE-----
>
> iEYEAREKAAYFAk8CN7cACgkQrq+riTAIEg1EaACfeFnKNqeuvw3aNN7soiVVDafN
> ncQAnjnObrd7tM2FNU85e4x4DN6vCEFZ
> =r0c/
> -----END PGP SIGNATURE-----
>
> selinux mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/selinux

Hi Chris,
yes, this is a known problem. Just use metacity as windowmanager. For 
example

$ sandbox -X -W metacity -t sandbox_web_t firefox

[Christoph A.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 01/03/2012 09:30 AM, Miroslav Grepl wrote:
> yes, this is a known problem. Just use metacity as windowmanager.
> For example
>
> $ sandbox -X -W metacity -t sandbox_web_t firefox

thanks for the workaround. Is there a bug report for this issue where
I could subscribe to?
> -----BEGIN PGP SIGNATURE-----
>
> iEYEAREKAAYFAk8DHYYACgkQrq+riTAIEg3WZACg5R5MlC0J5oser/tUVSn3y8JV
> 8g4AoNwb5C3YA6TwILGKHauMqT1fP1Ht
> =2qrN
> -----END PGP SIGNATURE-----