On Thursday 10 April 2008 08:52:31 pm Daniel J Walsh wrote:
If you run your plugins in confined mode
# setsebool -P allow_unconfined_nsplugin_transition=1
# yum install nspluginwrapper
# restorecon -R -v ~/
None of the plugins will be allowed to read directories like .ssh or
.gpg in your home directory.
firefox is really difficult to confine, but with nsplugin you can
confine the plugins fairly well.
Could you please clarify for me - Does the restorecon need to be run every
time anything is installed to the ~/?
(How many places do I have to check to make everything use the GB keyboard
layout? In some places it does use it, in others it doesn't. It's driving
me mad!)
Anne