Hi,
I regularly use firefox in a SELinux sandbox. Sometimes some strange behaviour arises:
- scrolling results in zooming - every click on a link results in 'Save As' dialog - mouse can't leave the sandbox window (until the window gets closed with ctrl-w) - lets call it "strange" keyboard mapping: pressing keys results in actions within the firefox menu
Somehow it looks like ctrl is pressed all the time. These symptoms don't come togheter. The 'mouse can' t leave' - problem occurred only twice. These symptoms usually occur while many tabs are open.
Is anyone else experiencing similar behaviour?
btw: If you are using a sandboxed firefox as your default browser through 'System' -> 'Preferences' -> 'Preferred Applications' -> Internet -> Command consider double quoting %s in the command -> '"%s"' or you might just get a black Xephyr window without firefox if your URL contains special chars. I guess this happens because these parameters get passed around (sandbox -> sandboxX.sh). Don't know if this should be considered a bug.
kind regards, Christoph A.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 08/15/2010 11:12 AM, Christoph A. wrote:
Hi,
I regularly use firefox in a SELinux sandbox. Sometimes some strange behaviour arises:
- scrolling results in zooming
- every click on a link results in 'Save As' dialog
- mouse can't leave the sandbox window (until the window gets closed
with ctrl-w)
- lets call it "strange" keyboard mapping: pressing keys results in
actions within the firefox menu
Somehow it looks like ctrl is pressed all the time. These symptoms don't come togheter. The 'mouse can' t leave' - problem occurred only twice. These symptoms usually occur while many tabs are open.
Is anyone else experiencing similar behaviour?
btw: If you are using a sandboxed firefox as your default browser through 'System' -> 'Preferences' -> 'Preferred Applications' -> Internet -> Command consider double quoting %s in the command -> '"%s"' or you might just get a black Xephyr window without firefox if your URL contains special chars. I guess this happens because these parameters get passed around (sandbox -> sandboxX.sh). Don't know if this should be considered a bug.
kind regards, Christoph A.
-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
It might be a problem interacting with Xephyr?
One idea would be to run in permissive mode and see if everything works properly? If they do then it might be a denial against the X Server that is causing your problem. If not, then it is probably Xephyr/X Setup.
You could run something like
sandbox -X -t sandbox_web_t -W metacity xterm
Then run firefox withing the xterm and see if it complains about anything.
On 08/16/2010 01:04 PM, Daniel J Walsh wrote:
It might be a problem interacting with Xephyr?
One idea would be to run in permissive mode and see if everything works properly? If they do then it might be a denial against the X Server that is causing your problem. If not, then it is probably Xephyr/X Setup.
You could run something like
sandbox -X -t sandbox_web_t -W metacity xterm
Then run firefox withing the xterm and see if it complains about anything.
I changed my settings and start firefox with the following command: sandbox -X -t sandbox_web_t -W metacity xterm -e firefox
since using metacity I didn't encounter the mentioned problems, but I will observe it for some more time.
thank you so far, Christoph
On 08/15/2010 05:12 PM, Christoph A. wrote:
- mouse can't leave the sandbox window (until the window gets closed
with ctrl-w)
I just observed it again:
sandbox -X evince
** (evince:23033): WARNING **: Failed to create dbus proxy for org.gnome.SettingsDaemon: Could not get owner of name 'org.gnome.SettingsDaemon': no such name Hangup
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 08/31/2010 01:44 PM, Christoph A. wrote:
On 08/15/2010 05:12 PM, Christoph A. wrote:
- mouse can't leave the sandbox window (until the window gets closed
with ctrl-w)
I just observed it again:
sandbox -X evince
** (evince:23033): WARNING **: Failed to create dbus proxy for org.gnome.SettingsDaemon: Could not get owner of name 'org.gnome.SettingsDaemon': no such name Hangup
-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
Probably a Xephyr problem
selinux@lists.fedoraproject.org