Linux

Firefox fullscreen kiosk machine

Update (2 Dec 2005): kiosk extension is broken, I'm now using a hacked browser.jar (version 1.0.7), I made a few changes to xinitrc-common as well Simple kiosk implementation, not entirely thorough, but enough for our purposes. Machine boots and gdm logs into a user without a password, firefox starts fullscreen and opens our homepage. Simple to implement.
  • kiosk extension is incomplete, you can open a new browser window and circumvent the chrome security, I changed my browser.jar file to take away this functionality, here is a…

Replacing selinux policy

Make a backup and set the security context:

[root@surrey policy]# mv /etc/selinux/targeted/policy/policy.18 /etc/selinux/targeted/policy/policy.18.orig
[root@surrey policy]# cp new/policy.18 /etc/selinux/targeted/policy/
[root@surrey policy]# chcon system_u:object_r:policy_config_t /etc/selinux/targeted/policy/policy.18
[root@surrey policy]# /usr/sbin/setfiles -q -c /etc/selinux/targeted/policy/policy.18
/etc/selinux/targeted/contexts/files/file_contexts
[root@surrey policy]# load_policy /etc/selinux/…

SELinux targeted preventing gnome-volume-manager from automounting filesystems

Symptom:

[user@surrey ~]: gnome-volume-manager ** (gnome-volume-manager:10207): WARNING **: manager.c/912: failed to initialize HAL!

Generate policy rules using audit2allow

[root@surrey ~]# audit2allow -i /var/log/messages allow initrc_t unconfined_t:dbus send_msg; allow unconfined_t initrc_t:dbus { acquire_svc send_msg };

Install policy source rpm

[root@surrey ~]# yum install selinux-policy-targeted-sources

Add local rules to local.te

[root@surrey ~]# pushd /etc/selinux/targeted/src…

Displaying international characters in Firefox (installing unicode fonts in fontconfig)

Using unicode fonts is the easiest way to properly display hindi, arabic, hebrew and other non latin languages. We install the unicode fonts in a local directory and then tell fontconfig to look in that directory. Edit /etc/fonts/local.conf 


/usr/ias/share/fonts/fc
Then tell fontconfig to rehash it's tables 
[root@host] # fc-cache
Check that your new font is there 
[root@host] # fc-list |grep

Linux