Sandbox Firefox

[Robert Gabriel]

Hi,

I'm on Fedora 22 and trying:

sandbox -X -H home_sandbox -T tmp_sandbox -t sandbox_web_t firefox
danwalsh.livejournal.com

which results in "Unable to connect" in the opened browser window.

First I had to:

grep Xephyr /var/log/audit/audit.log | audit2allow -M mypol

to get that working so far.

I thought "sandbox_web_t" allowed access to HTTP ports?

Trying "sandbox_net_t" yields no joy and only a "setenforce 0" allows
connections.

Any help appreciated.

Thank you.

[Miroslav Grepl]

On 07/17/2015 06:01 PM, Robert Gabriel wrote:
> Hi,
>
> I'm on Fedora 22 and trying:
>
> sandbox -X -H home_sandbox -T tmp_sandbox -t sandbox_web_t firefox
> danwalsh.livejournal.com http://danwalsh.livejournal.com
>
> which results in "Unable to connect" in the opened browser window.
>
> First I had to:
>
> grep Xephyr /var/log/audit/audit.log | audit2allow -M mypol
>
> to get that working so far.
>
> I thought "sandbox_web_t" allowed access to HTTP ports?
>
> Trying "sandbox_net_t" yields no joy and only a "setenforce 0" allows
> connections.
>
> Any help appreciated.
>
> Thank you.
>
> --
> selinux mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/selinux

Yes, this is known issue and we have bugs for it. I am trying to find a
solution with the current policy language until we get fixes with CIL.