On Sunday 11 January 2009, Mike Kazantsev wrote:

> If blocking every possible user is too much trouble or you wish to
> block just firefox, but not wget to http port for _all_ users (not the
> same case as emerge from root) you can write a simple SUID wrapper for
> firefox binary, which changes group to restricted one (but leaves uid
> and home unchanged), 

Is this like creating a symlink to the original FF binary which you have moved 
somewhere else?  Can you please explain?

> then launches true firefox binary, to which only 
> that group has access.
-- 
Regards,
Mick

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to