Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
Probably it's not the best solution (and it's easily revertable), but you may try disabling Javascript in Firefox (or whatever browser your user will use). Another solution (but I don't think it will work) is to chmod /opt/netscape/plugins/libflashplayer.so to -rwxr-x--- (0750) and then change it's ownerships to root:video (or another group you may want to create). On Fri, Sep 11, 2009 at 05:24:23PM -0700, Mark Knecht wrote: > Is it possible to shut off all multimedia stuff for a single account? > It's doesn't have to be securely off, just off, so if it cannot be > done by meddling with group membership then doing something in a root > owned bash file that executes when the user logs in even that's fine > with me. (Uh - even I don't know much about what Linux/Gnome does when > a user logs in so I'll get to learn a bit also!) > -- _ * Massimo Gengarelli ~0 (_| * Computer Science student @ http://www.unibo.it |(_~|^~~| * http://massitm.sohead.org <-- my personal, outdated website TT/_ T"T * Kiss your keyboard goodbye!
Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
On Fri, Sep 11, 2009 at 7:24 PM, Mark Knecht wrote: > Is it possible to shut off all multimedia stuff for a single account? > It's doesn't have to be securely off, just off, so if it cannot be > done by meddling with group membership then doing something in a root > owned bash file that executes when the user logs in even that's fine > with me. (Uh - even I don't know much about what Linux/Gnome does when > a user logs in so I'll get to learn a bit also!) > > I've removed the user account from the audio, video and games groups. > When playing YouTube stuff sound is gone but the Flash video is still > there. Can I stop that from working. maybe by changing paths if > there's not an easier way to do it? Is the user a willing participant? If so, I think you can use NoScript/FlashBlock to block that kind of stuff with success. If you don't want someone to play video, you'll not only need to block the browser plugins, but any software on the company capable of playing video (such as mplayer, xine, etc). Massimo's suggestion of altering the file modes to remove read access from that user sounds good. Maybe it would be easier with ACLs so you can specifically deny that one user access. But I've never used ACLs so I can't say for sure it would be easier. :)
Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
On Samstag 12 September 2009, Mark Knecht wrote: > Is it possible to shut off all multimedia stuff for a single account? > It's doesn't have to be securely off, just off, so if it cannot be > done by meddling with group membership then doing something in a root > owned bash file that executes when the user logs in even that's fine > with me. (Uh - even I don't know much about what Linux/Gnome does when > a user logs in so I'll get to learn a bit also!) > > I've removed the user account from the audio, video and games groups. > When playing YouTube stuff sound is gone but the Flash video is still > there. Can I stop that from working. maybe by changing paths if > there's not an easier way to do it? > > Thanks, > Mark > put all users except the one into one group. change ownership of flash and multimedia stuff to that group. change permissions, make flash and multimedia stuff only owner and group readable/executable. Everybody can use flash and multimediastuff except that user
Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann wrote: > On Samstag 12 September 2009, Mark Knecht wrote: >> Is it possible to shut off all multimedia stuff for a single account? >> It's doesn't have to be securely off, just off, so if it cannot be >> done by meddling with group membership then doing something in a root >> owned bash file that executes when the user logs in even that's fine >> with me. (Uh - even I don't know much about what Linux/Gnome does when >> a user logs in so I'll get to learn a bit also!) >> >> I've removed the user account from the audio, video and games groups. >> When playing YouTube stuff sound is gone but the Flash video is still >> there. Can I stop that from working. maybe by changing paths if >> there's not an easier way to do it? >> >> Thanks, >> Mark >> > > put all users except the one into one group. > > change ownership of flash and multimedia stuff to that group. > change permissions, make flash and multimedia stuff only owner and group > readable/executable. > > Everybody can use flash and multimediastuff except that user > > Makes sense. thanks. What happens after an emerge that updates the files? I have to go back in and change owner:group on the files again? I'm sure you're right and this is probably the right way to do it. Thanks, Mark
Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
On Samstag 12 September 2009, Mark Knecht wrote: > On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann > > wrote: > > On Samstag 12 September 2009, Mark Knecht wrote: > >> Is it possible to shut off all multimedia stuff for a single account? > >> It's doesn't have to be securely off, just off, so if it cannot be > >> done by meddling with group membership then doing something in a root > >> owned bash file that executes when the user logs in even that's fine > >> with me. (Uh - even I don't know much about what Linux/Gnome does when > >> a user logs in so I'll get to learn a bit also!) > >> > >> I've removed the user account from the audio, video and games groups. > >> When playing YouTube stuff sound is gone but the Flash video is still > >> there. Can I stop that from working. maybe by changing paths if > >> there's not an easier way to do it? > >> > >> Thanks, > >> Mark > > > > put all users except the one into one group. > > > > change ownership of flash and multimedia stuff to that group. > > change permissions, make flash and multimedia stuff only owner and group > > readable/executable. > > > > Everybody can use flash and multimediastuff except that user > > Makes sense. thanks. > > What happens after an emerge that updates the files? I have to go back > in and change owner:group on the files again? > > I'm sure you're right and this is probably the right way to do it. > > Thanks, > Mark > you could either add it to a cron job or run a little script that you run after every emerge.
Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
On Sat, Sep 12, 2009 at 12:32 PM, Volker Armin Hemmann wrote: > On Samstag 12 September 2009, Mark Knecht wrote: >> On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann >> >> wrote: >> > On Samstag 12 September 2009, Mark Knecht wrote: >> >> Is it possible to shut off all multimedia stuff for a single account? >> >> It's doesn't have to be securely off, just off, so if it cannot be >> >> done by meddling with group membership then doing something in a root >> >> owned bash file that executes when the user logs in even that's fine >> >> with me. (Uh - even I don't know much about what Linux/Gnome does when >> >> a user logs in so I'll get to learn a bit also!) >> >> >> >> I've removed the user account from the audio, video and games groups. >> >> When playing YouTube stuff sound is gone but the Flash video is still >> >> there. Can I stop that from working. maybe by changing paths if >> >> there's not an easier way to do it? >> >> >> >> Thanks, >> >> Mark >> > >> > put all users except the one into one group. >> > >> > change ownership of flash and multimedia stuff to that group. >> > change permissions, make flash and multimedia stuff only owner and group >> > readable/executable. >> > >> > Everybody can use flash and multimediastuff except that user >> >> Makes sense. thanks. >> >> What happens after an emerge that updates the files? I have to go back >> in and change owner:group on the files again? >> >> I'm sure you're right and this is probably the right way to do it. >> >> Thanks, >> Mark >> > > you could either add it to a cron job or run a little script that you run > after every emerge. > > Certainly. Thanks.
Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?
ACLS maybe? I've read about it but never had a need to do so. On Sat, 2009-09-12 at 21:32 +0200, Volker Armin Hemmann wrote: > On Samstag 12 September 2009, Mark Knecht wrote: > > On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann > > > > wrote: > > > On Samstag 12 September 2009, Mark Knecht wrote: > > >> Is it possible to shut off all multimedia stuff for a single account? > > >> It's doesn't have to be securely off, just off, so if it cannot be > > >> done by meddling with group membership then doing something in a root > > >> owned bash file that executes when the user logs in even that's fine > > >> with me. (Uh - even I don't know much about what Linux/Gnome does when > > >> a user logs in so I'll get to learn a bit also!) > > >> > > >> I've removed the user account from the audio, video and games groups. > > >> When playing YouTube stuff sound is gone but the Flash video is still > > >> there. Can I stop that from working. maybe by changing paths if > > >> there's not an easier way to do it? > > >> > > >> Thanks, > > >> Mark > > > > > > put all users except the one into one group. > > > > > > change ownership of flash and multimedia stuff to that group. > > > change permissions, make flash and multimedia stuff only owner and group > > > readable/executable. > > > > > > Everybody can use flash and multimediastuff except that user > > > > Makes sense. thanks. > > > > What happens after an emerge that updates the files? I have to go back > > in and change owner:group on the files again? > > > > I'm sure you're right and this is probably the right way to do it. > > > > Thanks, > > Mark > > > > you could either add it to a cron job or run a little script that you run > after every emerge. >