Re: [Tails-dev] Block/unblock wireless devices?

2012-09-25 Thread Ague Mill
On Mon, Sep 24, 2012 at 10:42:51PM +0200, intrigeri wrote:
> at boot time, Liberté Linux now explicitly unblocks Wi-Fi, WWAN and
> WiMAX, and soft-blocks all other kind of wireless devices (Bluetooth,
> UWB, GPS, FM). This is implemented using rfkill.
> 
> This may prevent some unwanted leaks through the wireless devices that
> are unlikely to be useful in the context of Tails, and at the same
> time, improve the user experience with wireless devices that come up
> in blocked state after boot.
> 
> I think we should do this in Tails, and write a short documentation
> page about how to manually unblock a blocked (e.g. GPS) device when
> needed (e.g. sudo rfkill unblock gps).
> 
> Thoughts?

Bluetooth can be problematic. Some systems use Bluetooth to communicate
with their keyboards and mouses.

AFAIU, that is one of the reason why most Bluetooth enabled systems will
always powerup the radio during first stage of the boot process, so one
with a Bluetooth keyboard can reach firmware settings.

I was thinking something like "yeah, we could have a checkbox in the
greeter", but many laptops have an hardware kill switch these days.

In any cases, blocking GPS by default sounds like a good plan.

-- 
Ague


pgptLmhPoFhEX.pgp
Description: PGP signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Block/unblock wireless devices?

2012-09-25 Thread intrigeri
Hi,

Ague Mill wrote (25 Sep 2012 07:53:02 GMT) :
> Bluetooth can be problematic. Some systems use Bluetooth to
> communicate with their keyboards and mouses.

OK. Let's keep Bluetooth enabled, then :(

Just curious, are you thinking of desktop wireless keyboards and mice,
or are hardware vendors crazy enough to implement such a thing for
laptop input devices?

> I was thinking something like "yeah, we could have a checkbox in the
> greeter", but many laptops have an hardware kill switch these days.

Sorry, this sentence of yours is totally unclear to me.

What would this checkbox do?

The hardware kill switch generally toggles an "airplane mode", which
enables/disables *all* radio devices, so I don't think it has the same
use as the proposed change.

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] [patch, please review] generate Iceweasel profile at build time

2012-09-25 Thread Ague Mill
On Mon, Sep 24, 2012 at 05:24:51PM +0100, Alessandro Grassi wrote:
> > How far have you tested this patch?
> >
> > Does calling `iceweasel -CreateProfile` requires to have an X server
> > running?
> >
> I didn't test this. Turns out that it requires an X server! Thanks for
> asking!
> We need to work around this somehow.

People usually use Xvfb when they need a 'fake' X server. See the 'xvfb'
package in Debian, and the `xvfb-run` script it contains.

Overall, I am still having a hard time convincing myself that generating
an Iceweasel profile on build time is the way to go. That is why I have
been researching how complicated it would be to create a dedicated
extension...

But I am happy to see you trying this approach. We will be able to see
how far it goes! :)
 
> Also, it would be better if the hook would start with `set -e` in order
> > to catch any errors that can happen in the process.
> >
> How do I do that? I just put `set -e` before other commands?

Yes, just put it at the start of the script. For what it does, let's
quote dash(1):

   If not interactive, exit immediately if any
   untested command fails.  The exit status of a com‐
   mand is considered to be explicitly tested if the
   command is used to control an if, elif, while, or
   until; or if the command is the left hand operand
   of an “&&” or “||” operator.

-- 
Ague


pgpYUyniA26sA.pgp
Description: PGP signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Improvement of the shutdown sequence

2012-09-25 Thread intrigeri
Hi,

Ague Mill wrote (24 Sep 2012 16:03:58 GMT) :
> I'd be happy to get reviews of what is in feature/shutdown_cleanup.

Static review: fine with me, but now that we have merged
feature/catch_errors_in_hooks, you want to add a "set -e" in
config/chroot_local-hooks/52-update-rc.d. That's not much, but it
still needs to be done and tested.

Initial test works fine, but I skipped the emergency shutdown test.
That one will be for the next (hopefully final) iteration :)
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Block/unblock wireless devices?

2012-09-25 Thread Maxim Kammerer
On Tue, Sep 25, 2012 at 9:53 AM, Ague Mill  wrote:
> Bluetooth can be problematic. Some systems use Bluetooth to communicate
> with their keyboards and mouses.

True, see, e.g., https://forum.dee.su/topic/wireless-mouse-french-keyboard.

> AFAIU, that is one of the reason why most Bluetooth enabled systems will
> always powerup the radio during first stage of the boot process, so one
> with a Bluetooth keyboard can reach firmware settings.

Systems boot in all kinds of crazy states, some apparently relying on
initialization by Windows drivers. The main reason I added rfkill
calls during boot is that some systems turn wireless radio off on
boot: https://forum.dee.su/topic/wireless-problem. I also think that
having Bluetooth off by default is the optimal choice, but there are
still problems with it, as you noted.

-- 
Maxim Kammerer
Liberté Linux: http://dee.su/liberte
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


[Tails-dev] Please review bugfix/default_search_engines

2012-09-25 Thread Ague Mill
Hi!

The branch bugfix/default_search_engines fixes the default search
engine selected for Portugese and Spanish.

Short log:

  46a7885 Fix localized search plugins for 'es' and 'pt'
  f9d73a5 Be consistent when giving a locale to check.torproject.org
  47629ce Update bug status and known issues

(Yes, the second is not strictly related.)

Candidate for next release (point or major).

-- 
Ague


pgpihZf2pHPwU.pgp
Description: PGP signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Please merge feature/Tor_0.2.3

2012-09-25 Thread Ague Mill
On Mon, Sep 24, 2012 at 05:31:26PM +0200, intrigeri wrote:
> please review and merge feature/Tor_0.2.3
> 
> It has been in experimental for a while, I've just sync'd it against
> current devel and re-tested, candidate for Tails 0.14.

Reviewed, merged in devel.

Maybe 0.2.3 will even be declared stable before 0.14 is out. Who knows?
:)

-- 
Ague


pgpYKxGIGBMui.pgp
Description: PGP signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev