[PLUG] Limit use of firefox by user.

Someone plug_1 at robinson-west.com
Wed Jan 14 17:09:53 UTC 2009


On Wed, 2009-01-14 at 08:32 -0800, chris (fool) mccraw wrote:
> On Wed, Jan 14, 2009 at 08:13, Carlos Konstanski
> <ckonstanski at pippiandcarlos.com> wrote:
> 
> > Or install firefox into a directory with such permissions, and leave
> > the binaries themselves alone.
> 
> 
> I guess the question becomes, how smart are the users?  since i can
> download my own copy of firefox and call the binary "vi", i'm not sure
> there's any way of actually preventing someone even mildly interested
> in using it from doing so.
> 
> SELinux or apparmor might be the best method after all, next to not
> giving them account, or not giving them write access (or an extremely
> tiny disk quota).
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug

Fortunately, this isn't an exercise in defeating determined users.
I'm not very knowledgeable about how selinux works disabling it
because it gets in the way.




More information about the PLUG mailing list