LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-01-2020, 08:12 PM   #1
quickquestion111
LQ Newbie
 
Registered: Apr 2020
Posts: 12

Rep: Reputation: Disabled
Trying to whitelist an application in Tails


Im trying to whitelist an appimage game in Tails that uses networking for multiplayer (so it should not run through Tor; latency is too bad). I discovered Tails use the 'clearnet' user to run the 'unsafe browser' (the unsafe browser does not use Tor, so that you may login at captive portals). This clearnet user is permitted in the firewall to use TCP (in all other cases Tails only uses UDP)

So im trying run the appimage as the user clearnet (via sudo -u clearnet game.AppImage).. But for some reason that I dont understand is the game is reporting an error saying that "No supported OpenGL profiles were found". I'd like to say the game does run fine when ran as 'amnesia' (the default user), but it doesnt run as any other user (not even root!), giving that error. However it does run as root when invoked via sudo (i.e sudo game.AppImage). So im guesing that amnesia has something in it's environment that no other user has that allows it to use these OpenGL profiles. Which would explain why 'sudo game.AppImage works', as sudo may be preserving some portion of amnesia's environment (but then again maybe not, as sudo -u clearnet does not work). I also disabled all apparmor profiles, but still that didn't work. And rememeber I dont want to run it as user 'amnesia' as I dont want it to go through Tor, so it seems the user 'clearnet is key here.

Here is the full error log message from: ~/.config/thegame/graphics.log

Code:
System.InvalidOperationException: No supported OpenGL profiles were found.
  at OpenRA.Platforms.Default.Sdl2PlatformWindow..ctor (OpenRA.Primitives.Size requestEffectiveWindowSize, OpenRA.WindowMode windowMode, System.Single scaleModifier, System.Int32 batchSize, System.Int32 videoDisplay, OpenRA.GLProfile requestProfile) [0x000c3] in <044321142f104d319ff35c7ee1a9937e>:0 
  at OpenRA.Platforms.Default.DefaultPlatform.CreateWindow (OpenRA.Primitives.Size size, OpenRA.WindowMode windowMode, System.Single scaleModifier, System.Int32 batchSize, System.Int32 videoDisplay, OpenRA.GLProfile profile) [0x00000] in <044321142f104d319ff35c7ee1a9937e>:0 
  at OpenRA.Renderer..ctor (OpenRA.IPlatform platform, OpenRA.GraphicSettings graphicSettings) [0x00057] in <935747805c924a31bc5fa5fcaf2e207c>:0 
  at OpenRA.Game.Initialize (OpenRA.Arguments args) [0x00204] in <935747805c924a31bc5fa5fcaf2e207c>:0 
System.InvalidOperationException: No supported OpenGL profiles were found.
  at OpenRA.Platforms.Default.Sdl2PlatformWindow..ctor (OpenRA.Primitives.Size requestEffectiveWindowSize, OpenRA.WindowMode windowMode, System.Single scaleModifier, System.Int32 batchSize, System.Int32 videoDisplay, OpenRA.GLProfile requestProfile) [0x000c3] in <044321142f104d319ff35c7ee1a9937e>:0 
  at OpenRA.Platforms.Default.DefaultPlatform.CreateWindow (OpenRA.Primitives.Size size, OpenRA.WindowMode windowMode, System.Single scaleModifier, System.Int32 batchSize, System.Int32 videoDisplay, OpenRA.GLProfile profile) [0x00000] in <044321142f104d319ff35c7ee1a9937e>:0 
  at OpenRA.Renderer..ctor (OpenRA.IPlatform platform, OpenRA.GraphicSettings graphicSettings) [0x00057] in <935747805c924a31bc5fa5fcaf2e207c>:0 
  at OpenRA.Game.Initialize (OpenRA.Arguments args) [0x00204] in <935747805c924a31bc5fa5fcaf2e207c>:0
Ofc I can just open up the firewall to allow full network access to the program, but I would like to offer the same protections for it as they did their 'unsafe browser' (i.e. running it as user clearnet whom can't login, and chooting the application).. Here's is how Tor is enforced in Tails (if you're interested in how Tails enforces Tor, and how the security of that works then this is the most interesting information: https://tails.boum.org/contribute/de...r_enforcement/)

Last edited by quickquestion111; 06-01-2020 at 08:27 PM.
 
Old 06-09-2020, 01:06 PM   #2
business_kid
LQ Guru
 
Registered: Jan 2006
Location: Ireland
Distribution: Slackware & Android
Posts: 11,625

Rep: Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357Reputation: 1357
348 views, no replies, so I'll have a go.

As a general rule & IME, when I get 200+ views and no replies, I conclude I'm mad, or starting from the wrong place.

You have The Amnesiac Incognito Linux System as your OS. Now you're going to great lengths to 'bend it' and play your game. You want Tails at the default settings. Otherwise, it isn't Tails.

The game will suck, no fast video drivers, no fast disk access, no saved games = lousy performance.

There's a saying: "Horses for courses." Some are sprinters, endurance runners, steeple-chasers, show jumpers. Just like Usain Bolt was a great sprinter, but he never did a marathon that I heard of. Mo Farah never tried sprinting. Both were winners.

Follow the R&D (joke) motto: "If at first you don't succeed - give up!" Give the game what it wants, and enjoy tails for what it is. If you're worried about being secure, use a vm, or wine. If you have data in wine, add another luser, and just install the game(s) there. There's tools for IP masquerading.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Just starting in linux from windows 10. Have a tails USB version I'm running on my PC. Tails won't recognize or start using my A6100 Netgear Rhix59 Linux - Newbie 3 07-08-2019 03:48 AM
generate an audit log when a non-whitelist IP is trying to access satlx Linux - Newbie 6 03-27-2019 07:32 AM
Tails Site is 'Port Scanning' Computers that download 'Tails.iso' !!! ??? SethJ Incognito 8 09-03-2016 02:55 AM
LXer: Tails 2.3 Anonymous Live CD Gets Tor Browser 5.5.5, Tails 2.4 Coming June 7 LXer Syndicated Linux News 0 04-27-2016 05:12 AM
LXer: The Tails Project's The Amnesic Incognito Live System (Tails) LXer Syndicated Linux News 0 09-17-2011 01:51 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:19 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration