Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 27 Nov 2014, 12:10
All times are UTC - 4
 Forum index » Off-Topic Area » Security
Run puppy as spot
Post new topic   Reply to topic View previous topic :: View next topic
Page 3 of 6 [83 Posts]   Goto page: Previous 1, 2, 3, 4, 5, 6 Next
Author Message
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Fri 29 Apr 2011, 22:38    Post subject:  

Fido will save you
http://bkhome.org/blog/?viewDetailed=02240

_________________
Puppy WIKI
Back to top
View user's profile Send private message Visit poster's website 
noryb009

Joined: 20 Mar 2010
Posts: 540

PostPosted: Sat 30 Apr 2011, 08:02    Post subject:  

Lobster wrote:
Fido will save you
http://bkhome.org/blog/?viewDetailed=02240


Very Happy
Back to top
View user's profile Send private message 
Bernie_by_the_Sea


Joined: 09 Feb 2011
Posts: 329

PostPosted: Sat 30 Apr 2011, 10:56    Post subject:  

Okay, to avoid letting Fido in the house we could try cleaning up spot.

Barry wants the "browser working perfectly in every respect. That would include GTK themes, SSL, font rendering, etc. Plus, a mechanism for downloading files outside of /root/spot is needed." He also wants "drag-and-drop browser to the desktop and other rox windows."

My spot browser system (that is a total of 26 bytes) works with drag-and-drop. I just copied it from /root/ to /usr/share and I can drag it to the desktop. My SeaMonkey fonts in spot look fine. How is font rendering tested? Mine is not using my GTK theme -- I'll look at that. SSL? How is this tested? SSL for what? Internet banking? Web hosting? Privacy? Security? Downloads outside of /root/spot? It looks like that might cancel browser-in-spot security.
^

Last edited by Bernie_by_the_Sea on Sat 30 Apr 2011, 11:51; edited 1 time in total
Back to top
View user's profile Send private message 
jpeps

Joined: 31 May 2008
Posts: 3220

PostPosted: Sat 30 Apr 2011, 11:45    Post subject:  

Bernie_by_the_Sea wrote:
Okay, to avoid letting Fido in the house we could try cleaning up spot.

Barry wants the "browser working perfectly in every respect. That would include GTK themes, SSL, font rendering, etc. Plus, a mechanism for downloading files outside of /root/spot is needed." He also wants "drag-and-drop browser to the desktop and other rox windows."

My spot browser system (that is a total of 26 bytes) works with drag-and-drag. I just copied it from /root/ to /usr/share and I can drag it to the desktop. My SeaMonkey fonts in spot look fine. How is font rendering tested? Mine is not using my GTK theme -- I'll look at that. SSL? How is this tested? SSL for what? Internet banking? Web hosting? Privacy? Security? Downloads outside of /root/spot? It looks like that might cancel browser-in-spot security.


I think gmail uses SSL; it will probably work in Spot. Fonts generally get installed to /usr/share/fonts, so will need permissions. I use msttcorefonts, so would have to place them somewhere else to work with SPOT.
Back to top
View user's profile Send private message 
rcrsn51


Joined: 05 Sep 2006
Posts: 9260
Location: Stratford, Ontario

PostPosted: Sat 30 Apr 2011, 12:14    Post subject:  

jpeps wrote:
Fonts generally get installed to /usr/share/fonts, so will need permissions. I use msttcorefonts, so would have to place them somewhere else to work with SPOT.

You shouldn't need write permission to use a font. Spot should still have read permission on places like /usr/share/fonts.
Back to top
View user's profile Send private message 
jpeps

Joined: 31 May 2008
Posts: 3220

PostPosted: Sat 30 Apr 2011, 13:08    Post subject:  

rcrsn51 wrote:
jpeps wrote:
Fonts generally get installed to /usr/share/fonts, so will need permissions. I use msttcorefonts, so would have to place them somewhere else to work with SPOT.

You shouldn't need write permission to use a font. Spot should still have read permission on places like /usr/share/fonts.


You're right, they're available. They didn't initially show up because my setting are in /root
Back to top
View user's profile Send private message 
L18L

Joined: 19 Jun 2010
Posts: 2579
Location: www.eussenheim.de/

PostPosted: Sat 30 Apr 2011, 14:39    Post subject: run puppy as spot
Subject description: run browser as spot ONLY
 

Browsing as root and spot will confuse everybody
Downloads
The only change in our behaviour is that installing directly from browser will not work for spot. It is just 1 click more if Downloads is opened in rox.
But the entire discussion is for safety of especially new users (and reviewers' opinions about puppy)
So
- browsing as root should become not possible anymore.
- /root/Downloads will be owned by spot
- changes in browser configuration: no open as petget
- offering only directories writeable by spot

HTTPS
no problem, I have already inspected my banking account as user spot

Drag and Drop no problem to drag text from browser to root's console or geany

So I am very confidont Smile
Back to top
View user's profile Send private message 
rcrsn51


Joined: 05 Sep 2006
Posts: 9260
Location: Stratford, Ontario

PostPosted: Sat 30 Apr 2011, 16:30    Post subject:  

In Quirky 1.3 and Wary 5.11, sound doesn't work in Spot. You can fix it by increasing permissions
Code:
chmod -R o+rw /dev

L18L wrote:
browsing as root should become not possible anymore.

So what happens to a user with a frugal install inside a Windows partition whose savefile isn't big enough to hold a download?
Back to top
View user's profile Send private message 
Bruce B


Joined: 18 May 2005
Posts: 11131
Location: The Peoples Republic of California

PostPosted: Sat 30 Apr 2011, 19:10    Post subject:  

rcrsn51 wrote:
So what happens to a user with a frugal install inside a Windows partition whose savefile isn't big enough to hold a download?


Does Windows understand Linux permissions?

On a Linux partition, I made a download directory, outside pupsave, with spot as
the owner. Spot can read and write to this directory.

Then of course that directory is spot's default download directory. To keep
things more orderly, spot can make subdirectories within it, before committing the download.

~

_________________
New! Puppy Linux Links Page
Back to top
View user's profile Send private message 
rcrsn51


Joined: 05 Sep 2006
Posts: 9260
Location: Stratford, Ontario

PostPosted: Sat 30 Apr 2011, 19:33    Post subject:  

Quote:
Does Windows understand Linux permissions?

That's the point. Forcing users to browse as Spot means that they can only download into a Linux partition.
Back to top
View user's profile Send private message 
Lobster
Official Crustacean


Joined: 04 May 2005
Posts: 15117
Location: Paradox Realm

PostPosted: Sun 01 May 2011, 01:30    Post subject:  

Fido available as a pet Smile
http://bkhome.org/blog/?viewDetailed=02241

_________________
Puppy WIKI
Back to top
View user's profile Send private message Visit poster's website 
James C


Joined: 26 Mar 2009
Posts: 5939
Location: Kentucky

PostPosted: Sun 01 May 2011, 01:33    Post subject:  

Lobster wrote:
Fido available as a pet Smile
http://bkhome.org/blog/?viewDetailed=02241


Believe I'll stick with running as Root.
Back to top
View user's profile Send private message 
nooby

Joined: 29 Jun 2008
Posts: 10557
Location: SwedenEurope

PostPosted: Sun 01 May 2011, 04:16    Post subject:  

http://bkhome.org/blog/?viewDetailed=02240

That is the link to Fido on Barry's blog on my computer Smile

_________________
I use Google Search on Puppy Forum
not an ideal solution though
Back to top
View user's profile Send private message 
L18L

Joined: 19 Jun 2010
Posts: 2579
Location: www.eussenheim.de/

PostPosted: Sun 01 May 2011, 04:50    Post subject: run puppy as spot
Subject description: browse spot ONLY
 

rcrsn51 wrote:
...
L18L wrote:
browsing as root should become not possible anymore.

So what happens to a user with a frugal install inside a Windows partition whose savefile isn't big enough to hold a download?

I admit, I had not been thinking about windows when making that statement. It has been influenced by Bruce's comment
Now there is no root .mozilla. I changed things so if I accidentally try and start Firefox as root, it won't run. Basically, modifying start scripts to verify the user is spot.
I don't have a windows partition and can now only speculate about what would happen in that situation:
if the savefile is not big enough the system will request to increase the savefile. The savefile itself is .sfs, permissions in windows(none= all =777). Inside the savefile there are permissions set linux files.

Of course this needs to be confirmed by real tests, volunteers to the rescue please.

Until that I stay confidont.
Back to top
View user's profile Send private message 
nooby

Joined: 29 Jun 2008
Posts: 10557
Location: SwedenEurope

PostPosted: Sun 01 May 2011, 05:34    Post subject:  

As you all know I am not the sharpest knife in our collective drawer Smile

So take this as a friendly teaser.

Would it be easier to do without a pupsave file? English user don't need it for changing the keyboard map to no or dk or de or fr or es or whatever.

Each time I try a non puppy linux distro I end uo going to Terminal and writing setxkbmap se to know where to find / or [ or something else needed.

What else does one need a pupsavefile for. Time. We all live in different time zones. Could that be handled in some other way?

Sure one want to retain the Firefox bookmarks and kind people tell me to use a free online sync but that makes me to rely on them getting enough ads that pay for it or they go pay or go broke.
so I have tried to solve this by exporting bookmarks as a html and then one click on these and add them as bookmarks maually each time at boot when one need them. Cumbersome but one need no pupsavefile.

What else is it needed for. oh yes all the other changes that people love. Switch the background image and change style and icons and how the menu list things and so on. Screen savers and what not.

So could one just load such as an sfs file instead using SFS-Exec that Seaside has a thread about? I don't know just trying to think Smile

_________________
I use Google Search on Puppy Forum
not an ideal solution though
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 3 of 6 [83 Posts]   Goto page: Previous 1, 2, 3, 4, 5, 6 Next
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0941s ][ Queries: 13 (0.0066s) ][ GZIP on ]