Hi, Black

Maybe you miss the Cc address.

The design of Moblin haven't clear yet. But I thougth every user should
have all privilege to control thire computer. Maybe we could give a warn
to they when they do a dangerous thing.

I thought the user is intelligent if we support much warn.


Thanks,

Black Stone <[email protected]> writes:

> The design of the Moblin sysytem is not clear; anyone has a website or doc's 
> that describe
> it?
>  
> It seems to me that the there should be two processors; one for the user and 
> the other for
> the network.Communication between the processors goes through a firewall or 
> security check.
> No worm can launch a program that modifies or corrupts other files without 
> going through
> this firewall. So when a packet is passed through the firewall dbefore it is 
> handed to an
> application the Operating system should have a layer that a) logs the 
> intrusion
>                 b) monitors the intrusion as receiving appliation processes 
> the packet; if
> files are opened there should be an audit trail and /or notification to the 
> user
>                 c) all packets must preserve the senders ip address and a 
> trace like caller
> id should be included
>  
> The network processor should provide line monitooring capability:
>         a) all packets that are processed are logged into an audit file
> To be able to trace the origin of the packets there should be sufficient 
> information in the
> frame to locate the sender...an ip address does not reveal much...however a 
> telephone
> number or an address and a name, an email id would be more like a caller id 
> and should be
> included with each packet.
>  
> An intruder on the network that intercepts a packet can modify the packet 
> only if the
> format is known; so if the format is in the packet the intruder would have to 
> decipher the
> packet to get the format.....this kind of communication would be slower and 
> bulkier but it
> would increase the integrity of packets.
>  
> Finally there should be an avenue for prosecution; electronic packets should 
> be treated
> just like the post office mail - tampering with a packet should become 
> prosecutable and
> ther eshould be an agency to which complaints can be sent.
>  
> sincerely
>  
> Black stone
>
> ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
> From: Jian Lee <[email protected]>
> To: "Kok, Auke" <[email protected]>
> Cc: "[email protected]" <[email protected]>
> Sent: Tuesday, July 7, 2009 8:04:01 PM
> Subject: Re: [Moblin Dev] Did normal user can use brasero to burn cd ?
>
> Hi, kok
>
> the normal user was created when I installed the usb image to my disk.
>
> following is info on my system:
>
> -----------------------------
> [r...@localhost ~]# ll /dev/scd0
> lrwxrwxrwx 1 root root 3 07-07 01:09 /dev/scd0 -> sr0
> [r...@localhost ~]# ll /dev/sr0
> brw-rw---- 1 root cdrom 11, 0 07-07 01:09 /dev/sr0
> [r...@localhost ~]# grep jianlee /etc/passwd
> jianlee:x:501:501:Jian Lee:/home/jianlee:/bin/bash
> [r...@localhost ~]# grep jianlee /etc/group
> video:x:62:turbolinux,jianlee
> audio:x:64:turbolinux,jianlee
> jianlee:x:501:
> [r...@localhost ~]# grep cdrom /etc/group
> cdrom:x:61:
> [r...@localhost ~]#
> ===================================
>
> group "cdrom" on the device sr0 have "rw-" permission. but "jianlee"
> doesn't in that group.
>
> "Kok, Auke" <[email protected]> writes:
>
>> Jian Lee wrote:
>>> Hi, everybody
>>>
>>> Did normal user can use brasero to burn cd ? I found it cann't. The
>>> normal haven't authority to open DVD driver, so cann't burn cd.
>>>
>>> I've used consolehelper to do this :
>>>
>>> ----------------
>>> [r...@localhost rpm]# ll /usr/bin/brasero*
>>> lrwxrwxrwx 1 root root      22 07-01 11:41 /usr/bin/brasero -> 
>>> /usr/bin/consolehelper
>>> -rwxr-xr-x 1 root root 1073376 06-24 15:42 /usr/bin/brasero.normal
>>> [r...@localhost rpm]# ll /usr/bin/consolehelper
>>> -rwxr-xr-x 1 root root 5568 06-05 01:30 /usr/bin/consolehelper
>>> [r...@localhost rpm]# cat /etc/pam.d/brasero
>>> #%PAM-1.0
>>> auth            include        config-util
>>> account        include        config-util
>>> session        include        config-util
>>> [r...@localhost rpm]# cat /etc/security/console.apps/brasero
>>> . config-util
>>> PROGRAM=/usr/bin/brasero.normal
>>> SESSION=true
>>> ==============================================================
>>>
>>> Maybe someone have another good idea.
>>>
>>> Thanks.
>>>
>>
>>
>> -what are the permissions on the cd device nodes?
>> -what groups are the 'normal user' in?
>>
>> this should work without any special pam stuff, looks like there might be 
>> some
>> console stuff missing, or consolehelper messing it up
>>
>> Auke
>>
>
> --
>
> Jian Lee
> MSN : [email protected]
> _______________________________________________
> Moblin dev Mailing List
> [email protected]
>
> To manage or unsubscribe from this mailing list visit:
> http://lists.moblin.org/listinfo/dev or your user account on 
> http://moblin.org once logged
> in.
>
> For more information on the Moblin Developer Mailing lists visit:
> http://moblin.org/community/mailing-lists
>

-- 

Jian Lee
MSN : [email protected]
_______________________________________________
Moblin dev Mailing List
[email protected]

To manage or unsubscribe from this mailing list visit:
http://lists.moblin.org/listinfo/dev or your user account on http://moblin.org 
once logged in.

For more information on the Moblin Developer Mailing lists visit:
http://moblin.org/community/mailing-lists

Reply via email to