Re: [Firestarter-user] Community update (Was: Alternativeto firestarter?)
Brought to you by:
majix
From: J.O. A. <tr...@in...> - 2007-08-28 18:47:40
|
On Tue, 28 Aug 2007, John Emmas wrote: > ----- Original Message ----- > From: "J.O. Aho" <tr...@in...> >> >> No, this won't be possible as the service is just a script that >> runs iptable rules. > Well if I was revamping FS I'd ditch the script and write a proper service > that runs the iptable rules, puts an icon on the launch bar and does > whatever the GUI currently does to keep the icon updated. The GUI then > wouldn't be needed at all - except for changing settings and preferences. At least I don't buy a new superfast computer each month, I need my CPU cycles to other stuff than having a daemon running which don't really do anything more than when started, which you anyway do faster with a normal shell script. X11 is a multi user GUI (not a single user GUI as microsoft uses, where unprivileged users can get admin rights if there is a window open by admin in another session), this will prevent applications run by other users to mess things up for you. >> it would be possible to make the applet to start >> the Firestarter GUI, which in it turn will require root password > Well, if the GUI is absolutely essential, maybe a better solution would have > been to allow the GUI to be launched by anyone - but the password is only > needed if the user tries to change any settings? That would require you modulize the whole GUI application, as the tool that will do iptable changes, needs to have the right to make iptable changes, we still using a multiuser environment. I'm not saying it's impossible to do, but it will make a simple toole more difficult to use. >> I do still sugest the use of sudo, even if it will lessen the "security" >> of the environment on that machine. > As it happens, I did set up sudoers some time ago so that I no longer need > to enter a password - but every time I boot up, I'm still required to launch > the FS GUI, for which I seldom have any use. It seems to be a clumsy (and > yet obvious) design flaw in an otherwise exccellent product. In all desktop environments I have seen, you can include programs to be started during the startup of the environment. Gnome2 uses some frontend that you can add programs to be started when you login, with other words, you do it once and all times you login, it will be started. If you use KDE, you have ~/.kde/Autostart where you can place scriptes, programs or symlinks to start programs automatically at login time. If you want that all future users of your system will have the same, then save the Gnome2 register or the ~/.kde/Autostart directory to /etc/skel and they will be added when creating the new user. For current users, you need to edit their settings, don't forget to check the ownership of files when you are finished, so that the user still owns the files and not root. -- //Aho ------------------------------------------------------------------------ E-Mail: tr...@in... URL: http://www.kotiaho.net/~trizt/ ICQ: 13696780 Skype: jo_aho System: Linux System (PPC7447/1000 AMD K7A/2000) ------------------------------------------------------------------------ EU forbids you to send spam without my permission ------------------------------------------------------------------------ |