LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 05-16-2014, 06:25 PM   #1
cervantes100
LQ Newbie
 
Registered: Mar 2012
Posts: 5

Rep: Reputation: Disabled
Lock down a computer for Public use. Using Linux Mint 16


How do you install this? https://git.gnome.org/browse/archive...ESSULUS_2_30_4 I'm trying to lock down a computer for public use.
 
Old 05-16-2014, 07:02 PM   #2
yancek
LQ Guru
 
Registered: Apr 2008
Distribution: PCLinux, Slackware
Posts: 8,823

Rep: Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842
First step is to download either the .zip or tar.gz file and then extract it. You should get a pessulus-PESSULUS_2_30_4 directory in that same directory. There is a README file there which would be a starting point.
 
Old 05-16-2014, 07:59 PM   #3
cervantes100
LQ Newbie
 
Registered: Mar 2012
Posts: 5

Original Poster
Rep: Reputation: Disabled
There haves to be another way to install or how do you install?

pessulus
========

pessulus is a lockdown editor for GNOME, written in python.

pessulus enables administrators to set mandatory settings in GConf. The
users can not change these settings.

Use of pessulus can be useful on computers that are open to use by
everyone, e.g. in an internet cafe.

You may download updates to the package from:

http://download.gnome.org/sources/pessulus/

To discuss pessulus, you may use the desktop-devel-list mailing list:

http://mail.gnome.org/mailman/listin...top-devel-list


Installation
============

See the file 'INSTALL'. If you are not using a released version of
pessulus (for example, if you checked out the code from git), you first
need to run './autogen.sh'.


How to report bugs
==================

Bugs should be reported to the GNOME bug tracking system:

https://bugzilla.gnome.org/ (product pessulus)

You will need to create an account for yourself.

Please read the following page on how to prepare a useful bug report:

https://bugzilla.gnome.org/page.cgi?id=bug-writing.html

Please read the HACKING file for information on where to send changes or
bugfixes for this package.
 
Old 05-16-2014, 10:08 PM   #4
yancek
LQ Guru
 
Registered: Apr 2008
Distribution: PCLinux, Slackware
Posts: 8,823

Rep: Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842Reputation: 1842
You should be able to install it in Mint with: sudo apt-get install pessulus, or use the software center. You should then be able to find it in the Menu.
 
Old 05-19-2014, 01:47 PM   #5
cervantes100
LQ Newbie
 
Registered: Mar 2012
Posts: 5

Original Poster
Rep: Reputation: Disabled
Now it ask me to load these files. Trying to find out how do I go by installing these?
Please add the files
codeset.m4 gettext.m4 glibc21.m4 iconv.m4 isc-posix.m4 lcmessage.m4
progtest.m4
from the /usr/share/aclocal directory to your autoconf macro directory
or directly to your aclocal.m4 file.
You will also need config.guess and config.sub, which you can get from
ftp://ftp.gnu.org/pub/gnu/config/.
 
Old 05-19-2014, 07:09 PM   #6
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 18,378

Rep: Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040Reputation: 3040
Quote:
Originally Posted by gnome_wiki
/!\ Warning:
Pessulus is deprecated since GNOME 3.
Might expain why it's in an archive directory.
 
Old 05-20-2014, 03:30 PM   #7
arizonagroovejet
Senior Member
 
Registered: Jun 2005
Location: England
Distribution: openSUSE, Fedora, CentOS
Posts: 1,094

Rep: Reputation: 198Reputation: 198
Given Pessulus "enables administrators to set mandatory settings in GConf" and the default Mint 16 desktop environment Cinnamon is derived (maybe the wrong word) from GNOME Shell which uses dconf not GConf, it's probably no use to you.

You would probably do better to explain exactly what you it is you are trying to lock down.

This https://help.gnome.org/admin/system-.../index.html.en should help you with how to handle dconf settings including setting user over-ridable defaults and locking settings. Not that it's for GNOME not Cinnamon so some of the key names will not be relevant but the concept will be the same.
 
Old 05-21-2014, 07:16 AM   #8
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.10, Centos 7.5
Posts: 17,697

Rep: Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494Reputation: 2494
Possibly you're looking for 'kiosk mode linux'; try google of that.
Another alternative in terms of maintaining ctrl/easy re-initialising is ltsp.org
 
Old 05-21-2014, 08:51 AM   #9
rtmistler
Moderator
 
Registered: Mar 2011
Location: USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu, Debian
Posts: 8,299
Blog Entries: 13

Rep: Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696Reputation: 3696
I've not spent much time searching for this capability in a general sense, nor tried to customize a full distribution such as MINT or Ubuntu; rather instead picked a kernel and customized it "up". For instance there are ways to deploy a GUI such that it does not require a window manager or even the XServer. You can start up a system so that it does not show anything besides your customized start screens as well as the information you wish to show to the user. And you can limit access by disabling network sessions; like FTP, SSH, Telnet, and so forth; or just disable all network access completely and use the console through say COM1 and restrict COM1 to be inside an enclosure so a person can't access it without a laptop, cable, and also takes apart the public computer enclosure partially so they can plug in. Of course restricting the logins also applies there.

These things involve customizing your kernel and potentially your bootloader.

Doing some of these actions with a general purpose distribution are fine for demonstration purposes, but if your intention is to produce an actual product then you're best to put in the effort to perform these customizations; and they are not simple things, they do take some time to learn how to do them.

In response to the original question about how to install; I believe that has been answered. I do not believe it is the correct way to do this; you're allowing a general purpose distribution to fully load all of it's services and capabilities and hoping to load a python based application to control locking out the system. That's just not going to be secure enough IMHO.
 
Old 05-21-2014, 10:04 AM   #10
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 9,078
Blog Entries: 4

Rep: Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178Reputation: 3178
I'm not familiar with this package, but I do know that "kiosks" normally use a dedicated graphic shell – specified in the equivalent of the /etc/passwd file – instead of the normal, full-featured GUI or TTY-shell) ones. This is the only program that faces the user, and if the program ever dies, init is programmed to re-launch it. The program is dedicated solely to the purposes of presentation (or whatever the dedicated-task may be) and there is no "other shell" underneath it at all. So, there's nothing to break through or to break into. The only way to administer the machine is to ssh into it (or something), by actually attaching to a wired socket within a locked case. Yet the entire power of Linux is under there.
 
Old 05-21-2014, 03:54 PM   #11
jefro
Moderator
 
Registered: Mar 2008
Posts: 19,398

Rep: Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992Reputation: 2992
I would be tempted to use a remote boot or diskless boot or freenx type. Hard to lock down stuff people have access to.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to transfer from old computer of Windows 7 & Linux Mint files to new computer Socrates2 Linux Mint 12 07-02-2014 02:20 PM
Caps lock inverted in Linux Mint, won't reboot, encrypt-fs message mazinoz Linux - Software 2 10-12-2012 03:12 AM
LXer: How to disable lock screen in Linux Mint 13 Cinnamon LXer Syndicated Linux News 0 06-30-2012 11:50 PM
LXer: How to enable screen lock in Linux Mint 13 MATE LXer Syndicated Linux News 0 06-27-2012 05:11 PM
Linux on public computer Tepsunius Debian 11 06-27-2005 09:09 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 04:44 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration