32 ms·
I run FireFox on Linux for personal on-line banking. It's the only browser that I am able to run with Tomoyo Linux in enforcing mode (level 3). I'm sure, if giv
by w8rbt 10y ago
I run FireFox on Linux for personal on-line banking. It's the only browser that I am able to run with Tomoyo Linux in enforcing mode (level 3). I'm sure, if given enough time, I could build a Tomoyo policy for Chrome, but it's far more verbose than FireFox and the last few times I tried, I gave up.
- hackuser 10y agoIf you don't mind answering: How usable is Tomoyo for you overall? How much extra time does it consume? Are there things that just don't run? Are there many bugs in applications that do run? (Also, which distro are you using?) Thanks!
- w8rbt 10y agoDebian 8. I find Tomoyo to be the most usable of the LSMs. You can be up and running in a few days with rather complex policies. I could not get Chrome to work with it. It just reads and writes all over the place in ways that are hard to manage. No bugs yet.