Re: [Tails-dev] Block/unblock wireless devices?
On Mon, Sep 24, 2012 at 10:42:51PM +0200, intrigeri wrote: > at boot time, Liberté Linux now explicitly unblocks Wi-Fi, WWAN and > WiMAX, and soft-blocks all other kind of wireless devices (Bluetooth, > UWB, GPS, FM). This is implemented using rfkill. > > This may prevent some unwanted leaks through the wireless devices that > are unlikely to be useful in the context of Tails, and at the same > time, improve the user experience with wireless devices that come up > in blocked state after boot. > > I think we should do this in Tails, and write a short documentation > page about how to manually unblock a blocked (e.g. GPS) device when > needed (e.g. sudo rfkill unblock gps). > > Thoughts? Bluetooth can be problematic. Some systems use Bluetooth to communicate with their keyboards and mouses. AFAIU, that is one of the reason why most Bluetooth enabled systems will always powerup the radio during first stage of the boot process, so one with a Bluetooth keyboard can reach firmware settings. I was thinking something like "yeah, we could have a checkbox in the greeter", but many laptops have an hardware kill switch these days. In any cases, blocking GPS by default sounds like a good plan. -- Ague pgptLmhPoFhEX.pgp Description: PGP signature ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev
Re: [Tails-dev] Block/unblock wireless devices?
Hi, Ague Mill wrote (25 Sep 2012 07:53:02 GMT) : > Bluetooth can be problematic. Some systems use Bluetooth to > communicate with their keyboards and mouses. OK. Let's keep Bluetooth enabled, then :( Just curious, are you thinking of desktop wireless keyboards and mice, or are hardware vendors crazy enough to implement such a thing for laptop input devices? > I was thinking something like "yeah, we could have a checkbox in the > greeter", but many laptops have an hardware kill switch these days. Sorry, this sentence of yours is totally unclear to me. What would this checkbox do? The hardware kill switch generally toggles an "airplane mode", which enables/disables *all* radio devices, so I don't think it has the same use as the proposed change. Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev
Re: [Tails-dev] [patch, please review] generate Iceweasel profile at build time
On Mon, Sep 24, 2012 at 05:24:51PM +0100, Alessandro Grassi wrote: > > How far have you tested this patch? > > > > Does calling `iceweasel -CreateProfile` requires to have an X server > > running? > > > I didn't test this. Turns out that it requires an X server! Thanks for > asking! > We need to work around this somehow. People usually use Xvfb when they need a 'fake' X server. See the 'xvfb' package in Debian, and the `xvfb-run` script it contains. Overall, I am still having a hard time convincing myself that generating an Iceweasel profile on build time is the way to go. That is why I have been researching how complicated it would be to create a dedicated extension... But I am happy to see you trying this approach. We will be able to see how far it goes! :) > Also, it would be better if the hook would start with `set -e` in order > > to catch any errors that can happen in the process. > > > How do I do that? I just put `set -e` before other commands? Yes, just put it at the start of the script. For what it does, let's quote dash(1): If not interactive, exit immediately if any untested command fails. The exit status of a com‐ mand is considered to be explicitly tested if the command is used to control an if, elif, while, or until; or if the command is the left hand operand of an “&&” or “||” operator. -- Ague pgpYUyniA26sA.pgp Description: PGP signature ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev
Re: [Tails-dev] Improvement of the shutdown sequence
Hi, Ague Mill wrote (24 Sep 2012 16:03:58 GMT) : > I'd be happy to get reviews of what is in feature/shutdown_cleanup. Static review: fine with me, but now that we have merged feature/catch_errors_in_hooks, you want to add a "set -e" in config/chroot_local-hooks/52-update-rc.d. That's not much, but it still needs to be done and tested. Initial test works fine, but I skipped the emergency shutdown test. That one will be for the next (hopefully final) iteration :) ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev
Re: [Tails-dev] Block/unblock wireless devices?
On Tue, Sep 25, 2012 at 9:53 AM, Ague Mill wrote: > Bluetooth can be problematic. Some systems use Bluetooth to communicate > with their keyboards and mouses. True, see, e.g., https://forum.dee.su/topic/wireless-mouse-french-keyboard. > AFAIU, that is one of the reason why most Bluetooth enabled systems will > always powerup the radio during first stage of the boot process, so one > with a Bluetooth keyboard can reach firmware settings. Systems boot in all kinds of crazy states, some apparently relying on initialization by Windows drivers. The main reason I added rfkill calls during boot is that some systems turn wireless radio off on boot: https://forum.dee.su/topic/wireless-problem. I also think that having Bluetooth off by default is the optimal choice, but there are still problems with it, as you noted. -- Maxim Kammerer Liberté Linux: http://dee.su/liberte ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev
[Tails-dev] Please review bugfix/default_search_engines
Hi! The branch bugfix/default_search_engines fixes the default search engine selected for Portugese and Spanish. Short log: 46a7885 Fix localized search plugins for 'es' and 'pt' f9d73a5 Be consistent when giving a locale to check.torproject.org 47629ce Update bug status and known issues (Yes, the second is not strictly related.) Candidate for next release (point or major). -- Ague pgpihZf2pHPwU.pgp Description: PGP signature ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev
Re: [Tails-dev] Please merge feature/Tor_0.2.3
On Mon, Sep 24, 2012 at 05:31:26PM +0200, intrigeri wrote: > please review and merge feature/Tor_0.2.3 > > It has been in experimental for a while, I've just sync'd it against > current devel and re-tested, candidate for Tails 0.14. Reviewed, merged in devel. Maybe 0.2.3 will even be declared stable before 0.14 is out. Who knows? :) -- Ague pgpYKxGIGBMui.pgp Description: PGP signature ___ tails-dev mailing list tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev