<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
body
{height:100%;
color:#000000;
font-size:12pt;
font-family:Times New Roman}
-->
</style><style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0, 0); font-size: 10px;">
<div style="">I just want to mention that the complexity of this discussion can be viewed as a microcosm of the complexity of "locking down" a workstation. There's more than one way to do it (always), and you can burn a LOT of time trying to make it just right.<br>
<br>
That's why I like reset option. It's not clean, it's not perfect, but it's fast. And in most cases, it's "good enough".<br>
</div>
<div><br>
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;"><font style="font-family: Courier New;" color="#888888" size="1">-Josh More, CISSP, GIAC-GSLC, GIAC-GCIH, RHCE, NCLP<br>
<a href="mailto:morej@alliancetechnologies.net" target="_blank"><span class="il">morej@alliancetechnologies.net</span></a>
<br>
515-245-7701 </font>
<div style="font-family: Tahoma; font-size: 13px;"></div>
</div>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: rgb(0, 0, 0); font-size: 16px;">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF564409"><font color="#000000" size="2" face="Tahoma"><b>From:</b> cialug-bounces@cialug.org [cialug-bounces@cialug.org] on behalf of j.bengtson@mchsi.com [j.bengtson@mchsi.com]<br>
<b>Sent:</b> Wednesday, June 30, 2010 14:56<br>
<b>To:</b> cialug@cialug.org<br>
<b>Subject:</b> Re: [Cialug] Kiosk suggestions?<br>
</font><br>
</div>
<div></div>
<div>>If you can install to a "USB thumb drive" you can install to a the hard drive -- they're both just random-access block devices.'<br>
<br>
I wonder if it's possible (without jumping through too many hoops) to set up a virtual machine inside of a Linux installation, with the browser, open office, etc. already installed and configured, and then when a user logs of the machine, erase that virtual
machine and replace it with a clean image from the template, so that the next user to log on gets a fresh install? You would have to chroot it so that the user couldn't do anything they're not supposed to do, but since the image is replaced every time a user
logs off you don't have to worry about resetting configurations. It might be slow, though, on an old PC.<br>
<br>
> I thought about cd idea but- cd would have to be remastered for secure wifi network.
<br>
> And many of the young users would not have the patience for cd boot time. <br>
<br>
That's only an issue when it boots...if you leave it up all day then it's already in RAM and ready to go.<br>
<br>
----- Original Message -----<br>
From: cialug-request@cialug.org<br>
To: cialug@cialug.org<br>
Sent: Wed, 30 Jun 2010 10:49:22 -0500 (CDT)<br>
Subject: Cialug Digest, Vol 62, Issue 37<br>
<br>
Send Cialug mailing list submissions to<br>
cialug@cialug.org<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
http://cialug.org/mailman/listinfo/cialug<br>
or, via email, send a message with subject or body 'help' to<br>
cialug-request@cialug.org<br>
<br>
You can reach the person managing the list at<br>
cialug-owner@cialug.org<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Cialug digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Kiosk suggestions? (Allen Kiddoo)<br>
2. Android Issue? (Josh More)<br>
3. Re: Android Issue? (Kenneth Younger)<br>
4. Re: Kiosk suggestions? (Zachary Kotlarek)<br>
5. Re: Kiosk suggestions? (L. V. Lammert)<br>
6. Re: Android Issue? (Ed Meacham (@work))<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Wed, 30 Jun 2010 09:43:57 -0500 (CDT)<br>
From: Allen Kiddoo <br>
Subject: Re: [Cialug] Kiosk suggestions?<br>
To: Central Iowa Linux Users Group <br>
Message-ID: <624312790.101277909033573.JavaMail.iadude@AK-iMac.local><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
not supported on this old hardware.<br>
<br>
----- Original Message -----<br>
From: "Matthew Nuzum" <br>
To: "Central Iowa Linux Users Group" <br>
Sent: Wednesday, June 30, 2010 9:28:27 AM GMT -06:00 US/Canada Central<br>
Subject: Re: [Cialug] Kiosk suggestions?<br>
<br>
<br>
<br>
On Tue, Jun 29, 2010 at 4:40 PM, Allen Kiddoo < adk@52761.com > wrote: <br>
<br>
<br>
I thought about cd idea but- cd would have to be remastered for secure wifi network.
<br>
And many of the young users would not have the patience for cd boot time. <br>
<br>
<br>
<br>
<br>
USB thumb drive boots almost as fast as a hard drive. Ubuntu can make a live usb thumb drive from an ISO. 1GB or larger thumb drive needed.
<br>
-- <br>
Matthew Nuzum <br>
newz2000 on freenode, skype, linkedin, identi.ca and twitter <br>
<br>
"Never stop learning" ?Robert Nuzum (My dad) <br>
<br>
_______________________________________________<br>
Cialug mailing list<br>
Cialug@cialug.org<br>
http://cialug.org/mailman/listinfo/cialug<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 30 Jun 2010 15:04:12 +0000<br>
From: Josh More <br>
Subject: [Cialug] Android Issue?<br>
To: "cialug@cialug.org" <br>
Message-ID:<br>
<97D930E86D94FB4E855DE7E58BD65B7504FF67AE@EX01.corp.alliancetechnologies.net><br>
<br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
So, for those of you who have Android, do you know of a way to block this: http://www.theregister.co.uk/2010/06/28/google_remote_android_application_install/<br>
<br>
This was one of the reasons I was leaning towards Android over iPhone. Now they're both back to being kinda sucky. (Admittedly, from a "company playing a parent" perspective, Apple is a lot worse.)<br>
<br>
-Josh More, CISSP, GIAC-GSLC, GIAC-GCIH, RHCE, NCLP<br>
morej@alliancetechnologies.net<br>
515-245-7701<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 30 Jun 2010 10:12:10 -0500<br>
From: Kenneth Younger <br>
Subject: Re: [Cialug] Android Issue?<br>
To: Central Iowa Linux Users Group <br>
Message-ID:<br>
<br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
I was curious about this myself. I would only imagine if you got an unlocked<br>
version of some phone and installed your own ROM, then you could avoid it. I<br>
just don't know though. Being that it's open source, I would doubt this made<br>
it into the core code, but I suppose it's possible.<br>
<br>
On Wed, Jun 30, 2010 at 10:04 AM, Josh More<br>
wrote:<br>
<br>
> So, for those of you who have Android, do you know of a way to block this:<br>
><br>
> http://www.theregister.co.uk/2010/06/28/google_remote_android_application_install/<br>
><br>
> This was one of the reasons I was leaning towards Android over iPhone. Now<br>
> they're both back to being kinda sucky. (Admittedly, from a "company<br>
> playing a parent" perspective, Apple is a lot worse.)<br>
><br>
> -Josh More, CISSP, GIAC-GSLC, GIAC-GCIH, RHCE, NCLP<br>
> morej@alliancetechnologies.net<br>
> 515-245-7701<br>
> _______________________________________________<br>
> Cialug mailing list<br>
> Cialug@cialug.org<br>
> http://cialug.org/mailman/listinfo/cialug<br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: http://cialug.org/pipermail/cialug/attachments/20100630/580c1cce/attachment-0001.htm
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Wed, 30 Jun 2010 10:31:18 -0500<br>
From: Zachary Kotlarek <br>
Subject: Re: [Cialug] Kiosk suggestions?<br>
To: Central Iowa Linux Users Group <br>
Message-ID: <0AB56AD8-051E-45CD-891E-4BB1249685AA@kotlarek.com><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
<br>
On Jun 30, 2010, at 9:28 AM, Matthew Nuzum wrote:<br>
<br>
> USB thumb drive boots almost as fast as a hard drive. Ubuntu can make a live usb thumb drive from an ISO. 1GB or larger thumb drive needed.<br>
<br>
<br>
If you can install to a "USB thumb drive" you can install to a the hard drive -- they're both just random-access block devices.<br>
<br>
Zach<br>
<br>
-------------- next part --------------<br>
A non-text attachment was scrubbed...<br>
Name: smime.p7s<br>
Type: application/pkcs7-signature<br>
Size: 2746 bytes<br>
Desc: not available<br>
Url : http://cialug.org/pipermail/cialug/attachments/20100630/a50d398e/attachment-0001.bin
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Wed, 30 Jun 2010 10:45:21 -0500<br>
From: "L. V. Lammert" <br>
Subject: Re: [Cialug] Kiosk suggestions?<br>
To: Central Iowa Linux Users Group <br>
Message-ID: <201006301545.o5UFjMwo018890@mail.omnitec.net><br>
Content-Type: text/plain; charset="us-ascii"; format=flowed<br>
<br>
At 10:31 AM 6/30/2010, you wrote:<br>
<br>
>On Jun 30, 2010, at 9:28 AM, Matthew Nuzum wrote:<br>
><br>
> > USB thumb drive boots almost as fast as a hard drive. Ubuntu can <br>
> make a live usb thumb drive from an ISO. 1GB or larger thumb drive needed.<br>
><br>
>If you can install to a "USB thumb drive" you can install to a the <br>
>hard drive -- they're both just random-access block devices.<br>
<br>
Why not just reset permissions on the HD to RO for everything except <br>
/var/log, .. and then tweak the /home partition so as to prevent <br>
downloads? A cron job could also blow out a 'stock' user profile if <br>
anything changed.<br>
<br>
Lee <br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Wed, 30 Jun 2010 10:51:35 -0500<br>
From: "Ed Meacham \(@work\)" <br>
Subject: Re: [Cialug] Android Issue?<br>
To: "'Central Iowa Linux Users Group'" <br>
Message-ID: <003301cb186c$1f920930$5eb61b90$@com><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
To answer your question: I don't know of a way to block it.<br>
<br>
<br>
<br>
But, I'm sure it possible if you have a root access. Maybe even if you<br>
don't. My first thought is to find out the service name (someone out there<br>
has to know what it is) then write a cronjob to kill it.<br>
<br>
<br>
<br>
I'm not going to try to root my Droid (Milestone) until I get the X. (a<br>
month or so from now) By then, someone should definitely have an answer to<br>
this though. :/ <br>
<br>
<br>
<br>
In my opinion, Google is pretty relaxed on the app approval process. it's<br>
nice for honest developers, and for getting updates. Maybe this will<br>
motivate them to start/do better unit testing on apps. I wonder if they<br>
could use this kill method on apps that not installed via the Market?<br>
(they'd need to know the package name, but still.)<br>
<br>
<br>
<br>
-emeacham (@work)<br>
<br>
<br>
<br>
From: cialug-bounces@cialug.org [mailto:cialug-bounces@cialug.org] On Behalf<br>
Of Kenneth Younger<br>
Sent: Wednesday, June 30, 2010 10:12 AM<br>
To: Central Iowa Linux Users Group<br>
Subject: Re: [Cialug] Android Issue?<br>
<br>
<br>
<br>
I was curious about this myself. I would only imagine if you got an unlocked<br>
version of some phone and installed your own ROM, then you could avoid it. I<br>
just don't know though. Being that it's open source, I would doubt this made<br>
it into the core code, but I suppose it's possible.<br>
<br>
On Wed, Jun 30, 2010 at 10:04 AM, Josh More <br>
wrote:<br>
<br>
So, for those of you who have Android, do you know of a way to block this:<br>
http://www.theregister.co.uk/2010/06/28/google_remote_android_application_in<br>
stall/<br>
<br>
This was one of the reasons I was leaning towards Android over iPhone. Now<br>
they're both back to being kinda sucky. (Admittedly, from a "company<br>
playing a parent" perspective, Apple is a lot worse.)<br>
<br>
-Josh More, CISSP, GIAC-GSLC, GIAC-GCIH, RHCE, NCLP<br>
morej@alliancetechnologies.net<br>
515-245-7701<br>
_______________________________________________<br>
Cialug mailing list<br>
Cialug@cialug.org<br>
http://cialug.org/mailman/listinfo/cialug<br>
<br>
<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: http://cialug.org/pipermail/cialug/attachments/20100630/a0f83fcc/attachment.htm
<br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
Cialug mailing list<br>
Cialug@cialug.org<br>
http://cialug.org/mailman/listinfo/cialug<br>
<br>
<br>
End of Cialug Digest, Vol 62, Issue 37<br>
**************************************<br>
<br>
</div>
</div>
</div>
</body>
</html>