On Wed, 2005-12-14 at 21:58 +0100, viq wrote: > On Wednesday 14 December 2005 19:48, Bob Smith wrote: > > > Just a thought: sudo -u $some_restricted_user $your_preffered_browser ? > > > > good that you brought this up; i been wondering about this too. > > > > does it help? if so how come there isnt a default non-privileged user > > created for, say, firefox when the pkg is installed? like there is for > > bitlbee (_bitlbee) or tcpdump (_tcpdump)? > > Does it help? Well, a bit, I would guess.
systrace could provide an effective jail for firefox. 'man systrace'.
