On Tue, 2024-01-16 at 10:19 -0600, John Hasler wrote:
> I  wrote:
> > You may be able to prevent Firefox from getting increased priority by
> > using polkit.
> 
> hw writes:
> > How would I do that?  All the freedektop stuff always has been a big
> > mystery, and polkit is part of it, or isn't it?
> 
> I don't know, but it at least has a man page and I think that this is
> the sort of stuff it is supposed to be for.  Worth investigating.

Cool, it has a man page :)  I checked the files/directories mentioned
in the page, and nothing seems to indicate that there is anything that
would allow firefox to increase its priority.

It might not need a special allowance because I have allowed the user
to set a nice level of up to -10 in /etc/security/limits.conf.  I
think that doesn't mean that firefox could get real time priority
though --- unless rtkit-daemon is somehow able to set any process that
asks for it to whatever priority the process asks for.

If rtkit-daemon can do that I wonder why the default configuration
is made to open such an enormous security backdoor.

Reply via email to