[sandbox] non permanent '-H'

Daniel J Walsh dwalsh at redhat.com
Tue May 24 12:59:22 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/20/2011 09:47 AM, Christoph A. wrote:
> On 05/16/2011 12:57 AM, Christoph A. wrote:
>> Hi,
>>
>> I like to run firefox instances where modifications to the profile are
>> not permanent but with the feature of permanently installed addons,
>> bookmarks, ...
>>
>> To accomplish that one can start firefox via
>> sanbox -X -i ~/.mozilla ....
>> and it will simply work.
>>
>> The problem arises if one would like to have different "templates"
>> sandbox -X -i ~/sandboxes/fftemplate1/.mozilla ...
>> sandbox -X -i ~/sandboxes/fftemplate2/.mozilla ...
>>
>> this wont work because the path within the sandbox will also be
>> ~/sandboxes/fftemp.... instead of ~/.mozilla
>>
>> Is there a way to accomplish what I want?
>> Or is there something like -H needed with the difference that it
>> shouldn't store modifications?
>
> The solution would be:
> The -i parameter should accept a second (optional) argument that
> specifies the destination of the file copied into the sandbox.
>
>
>
>
>
>
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
I guess I would need a syntax that would make sense.  Remember you can do

sandbox -X -i ~/.mozilla -i ~/.gnome ...

I guess you could use some syntax where the we had a separator, that
showed the destination directory

sandbox -X -i ~/.sandbox/ffftemplate1/.mozilla:~/.mozilla

But the separator would need to be something not likely to be in a file
system.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk3bq6oACgkQrlYvE4MpobOCSQCZAVkhqxk3fTBWylB0N7+g4Wgs
n7QAn3bmXuM7BCfKyXF0lxqmZs1xBUxC
=ABGM
-----END PGP SIGNATURE-----


More information about the selinux mailing list