From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Sun, 13 Nov 2011 12:12:50 +0100 Subject: [refpolicy] [PATCH v2 1/2] Support the console/graphical links browser In-Reply-To: <201111132112.58117.russell@coker.com.au> References: <20111113093714.GA16792@siphos.be> <20111113093751.GB16792@siphos.be> <201111132112.58117.russell@coker.com.au> Message-ID: <20111113111250.GA16421@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Sun, Nov 13, 2011 at 09:12:57PM +1100, Russell Coker wrote: > Why do we need separate domains for links and other browsers? When do you consider the need for separate domains and not? An earlier discussion on nginx versus apache was in the direction of a separate domain for nginx because it did some stuff that apache couldn't. Likewise, I can argue that the mozilla module does more than links, so why use a much more elaborate policy for a small application? Wkr, Sven Vermeulen