Re: SELinux Coloring book?
by Daniel J Walsh
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 11/13/2013 12:35 PM, Dominick Grift wrote:
> On Wed, 2013-11-13 at 11:13 -0600, Bruno Wolff III wrote:
>> On Wed, Nov 13, 2013 at 17:10:43 +0000, Tony Scully
>> <tonyjscully(a)gmail.com> wrote:
>>> That's excellent!
>>
>> The mls case might have been overly simplified. It didn't cover writing,
>> where the dominance goes in the other direction. People might be
>> incorrectly left with the impression the top secret can do everything
>> that secret can do. --
>
> I agree with you on the danger of oversimplification in generel with regard
> to explaining SELinux
>
> This is also why i find it sub-optimal to leave the two other default
> security models out of the equation (RBAC/IBAC)
>
> It is mentioned in the article that SELinux complements Linux security, by
> briefly touching on IBAC one would clarify at least to some degree how
> SELinux associates with Linux security
>
> RBAC by itself is worth mentioning in my view, if only to have touched on
> each security attribute in a security context tuple.
>
> The idea of the illustrated article is nice, but the article is not
> comprehensive.
>
> Granted, there are constraints. You cannot simply publish a three page
> article on a medium like this i suspect
>
>
>
Maybe a followup that describes RBAC. Not sure how the analogy would work
though.
Suggestions welcome.
Dog Role, See Eye Dog Role, Rescue Dog Role.
RBAC is always hard to describe especially when you start defining SELinux Users.
Login User -> SELinux User -> roles -> Types.
The Russian dolls model is the best I have come up with.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlKDwH0ACgkQrlYvE4MpobOmDACgnwBUbk7Vg1DwpkGTO8SenHLD
dFwAoOmzqZ+sfFVRkHH4r+hbxS8x1sgK
=ge9w
-----END PGP SIGNATURE-----
10 years, 5 months
Re: SELinux Coloring book?
by Bruno Wolff III
On Wed, Nov 13, 2013 at 17:10:43 +0000,
Tony Scully <tonyjscully(a)gmail.com> wrote:
>That's excellent!
The mls case might have been overly simplified. It didn't cover writing,
where the dominance goes in the other direction. People might be incorrectly
left with the impression the top secret can do everything that secret
can do.
10 years, 5 months
gtk-recordmydesktop creates video completely out of sync with audio on F19
by Ranjan Maitra
Hello,
I recently recorded a lecture video at:
https://streaming.stat.iastate.edu/~stat580/video/R-video2.ogv
but the video seems to have been recorded at a supersonic speed. The
audio is fine but as a result, completely out of sync with the video.
Would anyone know of a way to bring back the audio and the video into
sync? I prefer using tools available on Fedora.
I have no clue as to how this happened. I have been recording such
videos on Fedora for a long time (3 years), albeit on a different
machine from this one, and I have never had this problem.
I really don't want to go over and have to redo this video again. Other
than the unnecessary effort, the big issue is that I have no way of
knowing if the same problem will not recur.
Many thanks again for any help you can possibly give!
Best wishes,
Ranjan
____________________________________________________________
FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop!
Check it out at http://www.inbox.com/earth
10 years, 5 months
Can't clear a duplicate
by Robert McBroom
Pulling entry from the database--
rpm -qa |sort|grep acpid
acpid-2.0.19-5.fc19.x86_64
acpid-2.0.20-1.fc19.x86_64
Can't get the rpm to update.
rpm --rebuilddb
Yum output segment--
Resolving Dependencies
--> Running transaction check
---> Package acpid.x86_64 0:2.0.19-5.fc19 will be updated
---> Package acpid.x86_64 0:2.0.20-1.fc19 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
====================================================================================================
Package Arch Version
Repository Size
====================================================================================================
Updating:
acpid x86_64 2.0.20-1.fc19
updates 68 k
Transaction Summary
====================================================================================================
Upgrade 1 Package
Updating : acpid-2.0.20-1.fc19.x86_64 1/2
/var/tmp/rpm-tmp.XAEOe4: line 1: fg: no job control
error: %preun(acpid-2.0.19-5.fc19.x86_64) scriptlet failed, exit status 1
Error in PREUN scriptlet in rpm package acpid-2.0.19-5.fc19.x86_64
Verifying : acpid-2.0.20-1.fc19.x86_64 1/2
Verifying : acpid-2.0.19-5.fc19.x86_64 2/2
Updated:
acpid.x86_64 0:2.0.20-1.fc19
Failed:
acpid.x86_64 0:2.0.19-5.fc19
Robert McBroom
10 years, 5 months
Installing Fedora On A Chromebook......
by EGO-II.1
Hello all....I have been searching online looking for info in regards to
installing Fedora on a Chromebook, and while I've seen many tutorials,
(at least for Ubuntu anyways!) I have a question:
Is it possible to install Fedora on a Chromebook and completely REMOVE
the ChromeOS? if so...how? everything I've seen so far says "dual-boot"
but nothing seems to give you instructions as to how it can be
completely removed from the system..
TIA
EGO II
10 years, 5 months
Scrabble??
by Beartooth
Does anyone know a way to run a Scrabble program on
Fedora? (I realize the obvious existence of Wine and of virtual
machines; but my experience with both has been thoroughly
unsatisfactory; my hope is that a linux-native app may exist.)
There seem to be two proprietary Scrabble programs, one
in which you play against the computer, and one in which you play
against a remote friend. (I don't play Scrabble.)
--
Beartooth Staffwright, Neo-Redneck Not Quite Clueless Power User
Remember I have precious (very precious!) little idea where up is.
10 years, 5 months
Meaning of boot messages?
by Robert McBroom
While starting my system I get the following messages. What is
happening? Up to date Fedora 19
[ 11.835466] systemd[1]: Unit iscsid.service entered failed state.
[ 14.019245] systemd-udevd[991]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.020512] systemd-udevd[992]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.021693] systemd-udevd[993]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.022663] systemd-udevd[995]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.023827] systemd-udevd[996]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.024601] systemd-udevd[994]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.024904] systemd-udevd[998]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.025179] systemd-udevd[997]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.028321] systemd-udevd[1000]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
[ 14.028338] systemd-udevd[999]: failed to execute
'/usr/lib/udev/socket:@/org/freedesktop/hal/udev_event'
'socket:@/org/freedesktop/hal/udev_event': No such file or directory
Robert McBroom
10 years, 5 months
Frozen screen
by Patrick Dupre
Hello,
Every time that I have an USB key plugged inside my computer, if it switches
to screensaver mode, I lost the access to the graphics session.
gnome3 on fedora18
The only way that I found to recover is to open a text session and to kill the
graphic session.
Thank for your help.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
10 years, 5 months
Firefox absolute positioning stopped working
by Gary Stainburn
Hi folks,
Sorry if this is O.T. but I only seem to be having the problem on my Fedora
workstations.
I use popup div's in my web pages - div's that are initally display:none but
then on an event have their absolute size and position changed.
This method worked fine until recently (not sure how recent, but it's been
broken for a couple of weeks at least). It still works in I.E., Chrome and
Firefox on Win7 PC's.
However, on my Fedora workstations, the div is no longer appearing in the
right place (top left corner appearing where mouse pointer is). It now
appears on the very left corner of the window.
The only thing I can think of is that my Fedora boxes are regularly updated
while my Windows PC's only get software updates occassionally. This would
point to the problem being a recent firefox update.
Can anyone help as Google is only showing me old items.
Gary
HTML
<body bgcolor="white" >
<div id='hoverpopup' style='visibility:hidden; position: absolute;
width:200px; border:1px solid #000000; background-color:#ffffff;'
onMouseOver='Keeppopup(this);' onMouseOut='Hidepopup();'></div>
.............
<table id=vista width=100% onMouseOver="vistaTableMouseOver(event);"
onMouseOut="vistaTableMouseOut(event);" onclick="vistaTableClick(event);">
JAVASCRIPT (called from onMouseOver
function vistaTableMouseOver(e) {
if (!e)
return;
var t=e;
if (!t.id) { // event mode
if (e && ((t = e.target) || (t = e.srcElement))) {
while (! t.id && t.parentNode && t.nodeName != 'TR')
t=t.parentNode;
}
}
if (!t.id)
return;
var windowLowerX=window.innerWidth;
var windowLowerY=window.innerHeight;
if (e.clientX) { // store target X/Y
var vistaDivX=e.clientX; // location of mouse click
var vistaDivY=e.clientY;
} else {
var vistaDivX=findX(t); // location of TD
var vistaDivY=findY(t);
}
var vistaKey=t.id;
var hp = document.getElementById("hoverpopup");
hp.style.width='200px';
hp.innerHTML='Please wait....';
var xOffset=vistaDivX+20;
var yOffset=vistaDivY+10;
var divLowerX=vistaDivX+200;
var divLowerY=vistaDivY+hp.clientHeight;
// ensure the div is visible, i.e. not off the right / bottom
if (divLowerY > windowLowerY) {
yOffset=window.innerHeight-(hp.clientHeight+10);
}
if (divLowerX > windowLowerX) {
xOffset=window.innerWidth-(hp.clientWidth+10);
}
}
--
Gary Stainburn
Group I.T. Manager
Ringways Garages
http://www.ringways.co.uk
10 years, 5 months
