On Wed, 17 Feb 2016, Lampshade <lampsh...@poczta.fm> wrote: > Does original Firefox compiled by Mozilla running on Windows > have W^X? I bet: no, it doesn't. > I run browsers on the other user account in OpenBSD.
Do you also sandbox the browser with some sort of remote desktop, or run under a separate X session? AFAIK X allows any program to meddle with any other program under the same display. I was considering a separate user setup, but I'm not sure if it's worth the trouble if there's little added security. Do you know of a setup that provides both adequate isolation and doesn't make you want to throw the computer out the window in frustration over things like clipboard sharing? K.
