First and foremost please give me your opinions on what I want/should to do for security. I would like to set up my system sp that the session times out and requires a password to unlock the screen. Also I would like a firewall and maybe virus detection just in case. I want to set up a guest user with minimal to no privileges. How should I go about doing this?
View 14 RepliesI'm using Slackware 13 with xfce4. The problem is that I've messed something with the xfce4 and now I want to reinstall it. Does "removepkg xfce4" will do the trick ?
View 7 Replies View RelatedI just installed p7zip with GUI from slackbuilds, but there is a problem, since i can't get it to work with XFCE4. After looking into package, i noticed that .desktop files are installed into:
Code:
/usr/share/apps/konqueror/servicemenus
there are total of 6 .desktop items:
Code:
ls -l /usr/share/apps/konqueror/servicemenus/
total 24
-rw-r--r-- 1 root root 952 2010-01-16 15:12 p7zip_compress.desktop
-rw-r--r-- 1 root root 949 2010-01-16 15:12 p7zip_compress2.desktop
[code]....
and if i look inside of one of these files, the syntax is quite KDE specific and are probably supposed to be seen in a menu when you right click on file. So the big question is: is it possible to make XFCE4/Thunar do something similar? So far i have tried to view p7zip_extract_to.desktop file in a text editor and i learned, that the command for this looks like this:
Code:
p7zipForFilemanager xd %U
And if I right click on archive and then select "Open With Another Application" and then input this command, then double click on archive, i get this nice pop up:
7zip.png
Which is fine for extracting, but when it comes to creating archives, it's a bit inconvenient to do this every time i need something archived. I would would really like to have 7zip menu when i right click on file, so i welcome ideas on this matter.
I'm giving Slackware a try Again.. But How can i upgrade xfce to xfce4.8?
View 2 Replies View RelatedUpgraded from 13.1. Certain panel plugins seem to be gone in XFCE4.
When I try to add the Icon Box, Task List or several others to the panel, I get "Could not open 'iconbox' module".
There is an iconbox module in /usr/lib/xfce4/panel-plugins, along with some others, but they all date back to 3/29. In /usr/share/xfce4/panel-plugins, there is a mix of newer and older files.
Did the icon box go away? Do I need to nuke ~/.config/xfce4?
Kernel 2.6.21.5, GNU/Linux (Slackware 12.0)
xfce 4.4
Qt 3.3.8
KDE 3.5.7
KGet v. 0.8.5
I've just installed all of the packages in disks 1 and 2 of the slack 12.0 distro so, among them, I have the slack series kde/ installed. I run xfce as the desktop environment, which is able to run KDE apps. In main menu>Network there is kget, a download manager and also supposedly a p2p client. I ran it and it said "It is the 1st time you run kget. Do you want to make the default download manager?". I replied "No". As nothing happened I restarted X (the startx command ends up running xfce), ran kget again, and it made the same question, which this time I answered in the affirmative.
Again nothing happened. So I tried to download some file from the web, in the hope that a kget window would open. But no window opened nor anything else happened! In the console, I did 'ps -e' and there it was, however. So I began the search for documentation. First I ran khelpcenter, and was presented with the kget help. It was all about menus. However, typing kget --help-all in a console, gives almost two screens of information. And I tried several commands, from the GUI, following the syntax displayed by this command, but it was no use. So, I finally had to fall back on LQ, like so many times.
I noticed that there is a 1.0.1 version of xfce4-power-manager, so I tried it out last night. Note: It requires libxfce4ui >= 4.7. I compiled it using the same SlackBuild script as the one in Slackware 13.1. It compiled and installed just fine. However, when I logged out of XFCE and logged back in, I could only set a few options, and battery options were completely non-existant.
I double-checked, and my user account in in the power group. Has anyone else had a similar problem? In the meantime, I've downgraded back to the 0.8.5 version that Slackware ships with.
I'm trying to build and install a package from source. I thought xfce4-systemload-plugin would be neat to have. I found the link to the source at http://goodies.xfce.org/projects/pan...temload-plugin. I struggled all the way through making the package and installing the package using "installpkg". When I try to add the plugin to my panel I don't see it in the "Add New Items" window as I expected.
View 2 Replies View RelatedI'm using Slackware64 13.37 with Robby's Xfce 4.8 build on a laptop with two batteries. I've noticed that when the charge for one battery is depleted, the empty battery icon for the xfce4-power-manager panel applet is displayed as an "image missing" icon (see the attachments for screenshots of how this progresses).
Is this just down to a missing image, or is it more subtle than that? Has anyone else had the same problem, and if so how did you fix it? So far I've tried clearing the GTK+ icon cache and reinstalling the hicolor icon theme package as suggested in other threads in this forum, but nothing changed.
Slackware 13.1, on a Dell... Opliplex GX260... running XFCE4, as root. Stuff runs fine. However, the monitor goes to powersave mode after 10 minutes of inactivity. I've turned off power management in the kernel, in the app., have checked the xorg.conf, checked everywhere I can think of, can't find where this is being set. how I can turn this off?
View 12 Replies View RelatedWhen I try to change the resolution, it only shows 800X600 and 640X480 or something similar, nothing regarding a custom resolution. When I use the "Install Guest Additions" it won't mount because of some error, and so I can't open it, and even if I could mount and open it *I've tried it in other distros that don't automatically install it for you* I have no idea what to use. I've tried all of the .sh, even the autorun.sh and giving it executable permissions, and it STILL doesn't work. Perhaps I'm missing something, or there's a documentation out there that I can't find, but I can never get them to work. How can I fix this problem? I know in sbopkg, there's 32-bit Virtualbox Guest Additions but that doesn't work. The reason why I installed the 64-bit one is because I don't have 6 CDs to spare and I'm almost out of bandwidth and it has to last me a week. *I think around 200GBs out of 250GBs taken up so far, or more*
View 14 Replies View RelatedI was just mucking about in xfce, trying out new window buttons in conjunction with the black theme - dusk?? - when POW! - X shut down. Rebooting didn't restore things. Error is along these lines:
xfce4-session: Fatal IO error 11 (Resource temporarily unavailable) on X server :0.0. xfwm4: Fatal IO error 11 (Resource temporarily unavailable) on X server :0.0.
[Code]....
Is there a config file I can edit to get away from the window button setting it dislikes, or is reinstalling xfce the only option?
I installed the xfce4-quicklauncher plugin from a tar file in Slackware 13.37. It is showing as installed in gslapt, but it is not showing in the xfce panel's "Add New Items" menu. (see attached images) I tried rebooting and a few google searches. What must I do to get the xfce4-quicklauncher plug-in to appear in the xfce panel's "add New Items" menu?
View 1 Replies View RelatedSetting up firewall
View 12 Replies View RelatedAfter discovering that the firewall was wide open I decided to finally study the iptables docs and learn how to add rules. Now, I've not yet finished reading guides and documentation but I'd like some advice before I set the default policy on the input chain to deny. I have added a permissive rule for the loopback adapter so that programs that use it do not become mute suddenly. I will also use netstat to see what ports to open for each program that connects to the internet. I'm not that interested in what ports to open but how to find what ports to open.
View 3 Replies View RelatedI am setting my firewall rules using the command iptables.My question is i wanna know what command i can use that list rule 2 and 3 for instance in my table?i want to create rule that: The host is administered using SSH, scp and sftp so allow incoming SSH traffic and securing remote file copying and transferring.
View 2 Replies View RelatedWe are a school and we share a samba folder with students and teacher groups. What we are trying to do is:
- Give students group users the permissions to rwx own files in folder
- Students must not be able to do anything with others files. I mean nothing so, at most, they could see the files in folder but not read it.
- Teachers can do anything with files in folder
As you can imagine, the idea is that students deliver their exams in that folder without the ability to read/copy the other students files. With sticky bit we can restrict students permissions to their own files, that is ok, but how to restrict all the permissions on other students files without restricting student access to that folder?
I wanna make a small web server for local use , I've installed apache, every thing works fine I'm the root
I wanna protect the folder that contain the htdocs files (www), i don't want any users that not in root group to access (not even read)
I changed the permission of the htdocs folder as next
Owner: www (apache user)
per: creat , delete
group: root
per: creat , delete
other: none
it only works on the main folder that i changed its permissions ! not all sub folders and files ! were my steps right ? and are their anyway to change all folders and files at once ?
Basically in addition to the first installation account on my system (my account) ive also set up another user alongside my own. Its not a admin account but 'desktop user' account but in the group id section this account comes as '1001'-what does this 1001 mean? Furthermore are there any risks i should know about arising from setting up another account on my pc?
View 9 Replies View Relatedcan anyone advise the best practice of installing and setting the iptables on U 8.04 LTS? currently iptables is not installed nor as package nor included as kernel module.
View 2 Replies View RelatedMy firewall , wich is an Ubuntu server 10.10 , have 3 interfaces:
eth0(192.168.0.254):linked to the DMZ
eth1(192.168.1.254):linked to the LAN
eth3(212.217.0.1):linked to the Internet
-The DMZ have one web server with a static address (192.168.0.1).
-My LAN address range is (192.168.1.2-192.168.1.100) managed by a DHCP server in the same firwall machine.
There are some of the rules that I need to set up :
-Allow HTTP between the LAN and the internet
-Allow HTTP between the web server in the DMZ, and the internet.
Is there a way to tell the firewall , to redirect all incoming HTTP requests only to the web server in the DMZ ?
I'm trying to secure the CentOS servers on our company network as the current situation is, shall we say, less-than-ideal: remote root logins with the same password across several servers (behind a firewall, on non-standard ports, but still) and several key processes running as root. My proposal to amend this consists of the following:
- setup a bare as possible SSH-gateway with only the normal user accounts to handle remote access
- disable the root login from anywhere else but LOCAL and create special accounts with root permissions for our ~4 system administrators, like admin.foo admin.bar that can only login from inside the company network, using SSH-keys.
So far my biggest obstacle seems to be creating the administrative users, how do I go about and do that? When I simply create a user adminfoo with uid=0 it will show on my shell as root, which makes it useless as a way to make our admins accountable for their actions. BTW, my initial proposal to use sudo unfortunately met with strong resistance, because it compromises usability.
I was willing to create proxy in between the web app. and MySQL database so that I can do some modification before sending the query to the DB. But how to grep the query in the middle isn't working in the head yet. I found a tool named 'greensql' which captures the query in the middle but couldn't get how they are doing it.
View 4 Replies View RelatedAs part of the project I'm working on, I need to set up a server with IPSec authentication only connections to a large number of low bandwidth clients. I'm making use of the PF_KEY interface to populate the keys on the server and while prototyping things I've found that the initial setup is taking longer than I had expected. At the start of my test, entries are being added to the database at a rate of around 30/second, but as time goes on this is dropping significantly. I ran a test up to around 100k entries and by then the rate had dropped to 10/second. It's key to me that if I reboot my server that the Security Associations can be repopulated in a very short period, so I do genuinely need this to be much faster.
Two questions:
1) Does anyone have any experience of running with a large number of SAs set up, and if so what sort of setup rate did you get?
2) Are there things I can do to speed up the provisioning of these SAs? I'd really like to see a rate in the thousands per second.
We've been doing the prototyping on the 2.6 kernel.
I am trying to set a wireless connection up. I have uncommented the ath9k module for my card. I have configured rc.inet1.conf :
IFNAME[4]="wlan0"
USE_DHCP[4]="yes"
DHCP_KEEPRESOLV[4]="yes"
DHCP_KEEPNTP[4]="yes"
[Code]....
AS you can see, everything seem fine when I start wlan0, but I can't connect to the internet through firefox.
I'm having problems getting my Canon MP-210 printer/scanner recognized as a scanner device in Slackware 13.0.CUPS setup was a breeze - in less than two seconds it was installed and within 10 more seconds it was printing a test page.Its URI is here, according to CUPS:
usb://Canon/MP210%20series (Printing works flawlessly).My non-privileged user account is a member of the 'wheel', 'scanner', and 'plugdev' groups in /etc/group (among the others recommended by the adduser script. I've tried running xsane as root (Still no devices found) with no success, and the CLI 'scanimage -L' doesn't produce anything either.They just report that there is no configured device.
I've run 'sane-find-scanner' and it reports the following:
Code:
found USB scanner (vendor=0x04a9 [Canon], product=0x1721 [MP210 series]) at libusb:001:003 Rebooting and unplugging/plugging in the scanner produces no positive results. /etc/sane.d/dll.conf has the following canon lines in it:
Code:
canon
canon630u
#canon_pp
I believe the appropriate entry is the canon630u.
/etc/sane.d/canon630u.conf contains the following:
Code:
# Options for the canonusb backend
# Autodetect the Canon CanoScan FB630u
usb 0x04a9 0x2204
[code]....
reading through the documentation for pk2cmd, required for using the PICkit2 programmer. I aim to install using the source, and thus libusb-dev is needed. The docs says that the runtime is usually included with the distro but the dev-part is not. Well, to be on the safe side, I downloaded the source for libusb (0.1.12), which in turn should contain libusb-dev.One step down, a few more to go. pk2cmd should be pretty straightforward to compile, but ...
Now I am asked to set up USB so that it can be used by users other than root. A document is filled to the brim with instruction for cases old and new. It makes my head spin and that's why I am asking. The programmer shows up fine with lsusb,I see it as/dev/bus/usb/001/006So, basically, as I understand it, the device need the proper rights to be used by a regular user. But how do I do that?
I'm trying to set up my system to act as a vnc so I can access it remotely via a vnc viewer on my android phone. I've never tried this before but from what I've found online, with KDE4 a lot of the usual vnc server programs won't work correctly. Anyone have any tips for getting it to work? It doesn't necessarily have to be vnc. If there's an alternative method to remote control of a computer, that will work too.
View 5 Replies View Relatedone thing i can't seem to be able to do is give the guest account just these permissions: using firefox (or other browser) and using one file directory and using a text editor. means the guest can browse the net and sefe some infos form that - nothing more. the previous version had something like that, it was really easy for me, a noob, to do it with two or three clicks. if this possibiility exists, what to do. if it's not implemented... maybe it should be. 'cause many people let others use the computer but don't want any complications...
View 6 Replies View RelatedI can't get this to work on my machines.
So far I have:
1. created a key with ssh-keygen on the server to be logged in to
2. copied the .pub key to my local machine
3. chmod 700 ~/.ssh on both machines
4. chomd 600 ~/.ssh/ic_rsa on the server, and on known_hosts on my local machine
5. added the .pub key to ~/known_hosts on my local machine
my local machine doesn't have an "authorized_keys" file which is what everything is telling me I should append my .pub key to. The only thing that was in my .ssh folder was known_hosts, so I tried that. I also tried making an authorized_hosts file to no avail, changing permissions appropriatly on all files.
Should I/Can I reset ssh in some way? Is there are reason I don't have an authorized_keys file or is my known_hosts file my authorized_keys file?
Would it be better just to uninstall/reinstall ssh?