Hello I am trying to increase system security by restricting Firefox with TOMOYO Linux 2.2. I have configured initialize_domain and keep_domain for Firefox and everything seems to work perfect. Will my system be protected if some vulnerability is found in a system library ex. Pango and a website exploit this vulnerability when using Pango to render the text? I have configured read access for Firefox to the Pango .so files.
TOMOYO
Fork