Re: Advanced Persistent Threats; Why aren't we confining Firefox and Evolution?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 12/06/2012 06:05 PM, David McGuffey wrote:
> Why isn't Firefox and Evolution confined with SELinux policy in a way
> that APT can't damage the rest of the system? Why are we not sandboxing
> these two apps with SELinux?

Probably mostly because when you sandbox an X11 application, you can't 
copy and paste in or out of the application.  Most users want to do that.
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux