Friday, July 23, 2010

How to Configure Linux for Children

Today I found this article originally posted by Tavis J. Hampton, and I think this worth to be shared around (especially when today is Children's Day in Indonesia).

---

Many people still cling to the notion that Linux is for 30-year-old male geeks. While that may be true, there are plenty of other people of all ages, ethnicities, and genders who enjoy Linux and other free and open source software.

For the most part, the operating systems a child uses are determined by the child’s parents and school. As the parent and Linux user yourself, you may prefer your child to use Linux at home.

One feature of Linux desktop environments like KDE and Gnome is that they are extremely customizable. You can have one panel, two panels, or no panel at all. Just as easily as icons, menus, and widgets can appear, they can also disappear.

For that reason, you may find it necessary to set parameters for your children when using Linux. Whether you need tools to lockdown the desktop or filter Internet content, there is free software out there to help you. What follows is a short guide to preparing a Linux desktop for a child, complete with game recommendations.

Desktop Restrictions

Even if your child has his own computer, he may become very frustrated when he accidentally deletes the icon he wants to use. You can prevent such accidents with desktop restrictions.

KDE has a Kiosk Admin system that is controlled in the kdeglobals configuration file. You can find the file at ~/.kde/share/config/kdeglobals. Kiosk settings are added using keys in the following format:

     [KDE Action Restrictions][$i]
     action/=false

For example, if you want to disable print properties so that children can print but cannot change or add printers, you would enter:

     print/properties=false

A complete list of available keys, including plasma keys is available at: KDE Techbase.



Gnome has a similar feature for desktop restrictions called “lockdown”. The keys for Gnome lockdown are found in gconf. The easiest way to edit gconf keys is with gconf-editor. If, for example, you want to lock down the panel, you would edit the following key:

     apps -> panel -> global ->locked_down and set the value to “true” to enable it.

For a detailed list of lockdown functions, visit the Gnome Desktop Administrator’s Guide.

[singlepic id=265 w=320 h=240 float=center]

One important thing to remember is that these restrictions will primarily prevent your child from accidentally modifying the desktop settings. Children who attempt to do so intentionally will more than likely be smart enough to figure it out, and that is an issue requiring parental attention, not increased restrictions. For very young children, however, this is an excellent way to keep things in order.



Internet Restrictions

There are a couple of methods for filtering the Internet for your child. One is to essentially block all sites and only whitelist the ones you want your child to visit. Young children will probably only have a few sites they like anyway. The second method is to use a more traditional filter to block sites you deem inappropriate. Filters like these are not 100% effective, but they should prevent a lot of accidental visits to inappropriate sites.

An example of a Firefox extension that can be configured to use either method is ProCon Latte.

Like desktop restrictions, an Internet filter will not stop older children from purposely visiting sites you believe are inappropriate, but it will reduce accidental visits.

Aside from filtering content, you can also filter ads with browser extensions. This will prevent children from following ads that may lead them to sites asking for personal information. Adblock Plus is available for Firefox and Adblock for Google Chrome.



Fun Stuff

Kids ultimately will use their computers for fun and learning, so here is a brief list of games and learning activities for kids. It is not a complete list, but should give you an idea of the wide range of games and activities available for children.

[singlepic id=266 w=320 h=240 float=center]

  • Super Tux Kart (Racing)

  • Secret Maryo Chronicles (Super Mario clone)

  • GCompris (Educational game suite)

  • Pink Pony (Trone clone with ponies)

  • KTuberling (a.k.a. Potato Guy)

  • Bouncy the Hungry Rabbit

  • Fizzball (commercial game)

  • Acorn Drop

  • Jammer the Gardener

  • TuxPaint (art)


  • As you can see, with just a little work on your part, Linux can be educational, safe, and fun for your children.

    ---

    Tuesday, July 13, 2010

    Speed up your Ubuntu machine boot time

    If you are using Ubuntu 10.04, you may already know that one of its feature is to be able to boot faster. Here's an article on how to enable your Ubuntu to do so. Original post is located here.

    ---

    [singlepic id=264 w=160 h=120 float=left]Are you desperately searching for ways to finally reach that elusive 10 second boot time? You certainly heard that Ubuntu 10.04 has the capability of doing just that right? It can…but you have to help it along. One of the ways you can help your boot time is removing unnecessary services and drivers that are loaded at boot time. Fortunately, this isn’t something you have to manually do. How is this? There is a tool that can help the Grub boot loader learn what it is you need at start up. This tool is called profile.

    Profile is not a tool you install, or run from the command line. Instead, profile is an option you add to your grub configuration file to inform the boot loader you want to create a profile during the next boot loading sequence. In this article I am going to show you how to profile your grub boot sequence for a faster boot process.

    How this works

    When you boot up your machine Grub does a search for all the necessary drivers to load. This takes time. Instead of making Grub search for these drivers, the profiling actually makes Grub remember every driver necessary to work, thereby cutting down all of the driver load times.

    This is a proven technique that can help the boot process. It has actually been around since Ubuntu 6.04, so it has been tested and tested and does work. I will make this normal disclaimer. Even though Grub profile works, anytime you deal with your bootloader you take the chance that you can render your machine unbootable. So you use this tool at your own risk. Don’t take that to mean profile is a dangerous tool and your machine will wind up bricked and mocking you…that is just to say should something happen, you were warned.



    How to add profiling

    To do this you are going to have to modify your /etc/default/grub file. The edits are not challenging at all. So, open up a terminal window and get ready to work.

    The line you are looking for is:

         GRUB_CMDLINE_LINUX_DEFAULT=”quiet splash”

    This is the line that gives the options to Grup upon boot. You need to add one more option to that line so it now looks like:

         GRUB_CMDLINE_LINUX_DEFAULT=”quiet splash profile”

    Save that file and then issue the command:

         sudo update-grub2

    You are ready to reboot your machine.

    During this next boot time you will see a noticeable SLOW DOWN. This is normal because Grub is now running the profile. This is quite necessary.

    Once the boot up is complete, open up that /etc/default/grub file, remove the profile entry you just added, and re-run the command sudo update-grub2. Now reboot your machine again and see if you don’t notice a distinct speed increase in your boot times.

    Final thoughts

    There are so many ways to speed up the boot process of your Ubuntu Linux machine. This process, however, is one of the ones that will truly speed up the process and is tested and safe to use. You should gain some noticeable increases and should even speed up after 2 or 3 more start ups.

    ---

    Thursday, July 8, 2010

    Upgrading to Wordpress 3.0

    wordpress-logo.jpgWordpress 3.0 has been out for almost one month now. This new version 3.0 has many new features that are listed in the following page.

    I have tried to upgrade my Wordpress on the day it was released, but I got into a problem with locales.php file. I suspect it has something to do with one of my plugins, but since I can't even logged in to my administrator page, I decidec to revert back to version 2.9.2 until the plugins are supported. And apparently, I was not the only one facing the problem. Here's a report about others who have encountered some kind of problems when upgrading.



    Here are a few links on how to upgrade to Wordpress version 3.0:
    1. Updating WordPress. This is from Wordpress.org itself, the official guide to upgrade.

    2. WordPress 3.0 Upgrade: What to Expect

    3. 3 Tips to Ensure a Seamless WordPress Upgrade


    Good luck!

    Ailurus - A Useful Ubuntu Tweak Alternative For Beginners

    Just found this article that showcase a simple program to help newbies configure their Ubuntu system. I personally haven't tried it yet, but it seems to be able to help the basic needs of configuring your Ubuntu without using multiple GUIs or even using command lines to change the configuration files.

    The original post is located here.

    ---

    Ailurus is cross-Linux-distribution GPL software, which aims at making Linux easier to use for beginners. Rather than a Ubuntu Tweak alternative, Ailurus is the kind of app you can use along Ubuntu Tweak. Ailurus is available for Ubuntu, Fedora and Mint while Ubuntu Tweak is a dedicated Ubuntu only application.

    [singlepic id=263 float=center]

    Ailurus Features

    • 'Study Linux' feature included in Ailurus is pretty good at teaching the Linux basics to beginners. You can even set it to display Linux tips each time you login to your system.

    • Install many useful applications easily.

    • Enable a number of third party repositories quite easily.

    • Display of basic hardware information which is so useful at times.

    • Clean APT/YUM cache.

    • Backup and recover APT/YUM status.

    • Change GNOME settings. Ailurus invokes GConf API, to change GNOME settings.

    • Easily enable Gnome Control Center using Ailurus.





    How to install Latest Ailurus 10.06.93 in Ubuntu Lucid, Karmic?
    • Open Terminal (Applications - Accessories - Terminal) and copy-paste the following lines one by one into Terminal.


    •      sudo add-apt-repository ppa:ailurus
           sudo apt-get update

    • Done. Now install latest Ailurus in Ubuntu Lucid 10.04.


    •      sudo apt-get install ailurus

    • Done. Launch Ailurus. Goto Applications - System Tools - Ailurus.


    Ailurus for Fedora and other distros can be downloaded from here.

    ---

    Thursday, January 14, 2010

    Securing Data in The Cloud

    I just found an interesting article about securing your data in the cloud. Now that cloud computing has gained quite a number of followers, it will be good to understand the additional necessary steps to ensure your confidential data are secured in a cloud computing environment.

    The original article can be found here.

    ---

    Storing data in the cloud is arguably the most important aspect of public cloud resources, but it is rarely treated as such. Two practical steps to take when securing cloud data are:


    • Protect your data in a real world environment.
    • Meet compliance requirements.




    What are the issues?
    There are two primary issues that we have to deal with when talking about data security in a public cloud:


    • Protection of the data: Dealing with the confidentiality, integrity, and availability (CIA) criteria. Answering the important questions, such as, "What is the risk to the data? Are the controls in place adequate to mitigate the risk?"
    • Location of the data: Dealing with the physical location of the "bits" and answering questions like, "Do I know where the data resides? Does this violate any of my compliance requirements?"


    Location is often doubly important because we do not think about it; it may easily slip by unnoticed and have significant impact if a data loss ever occurs.

    An example is the conflict between the U.S. Patriot Act and Canadian laws on the privacy of certain personal information. The U.S. government says if there is a compelling reason, they are able to see data in their jurisdiction. Canadian laws say that the data of certain Canadian citizens is protected and cannot be disclosed. If you handle Canadian data (i.e., data that is protected), then you had better be sure it is not physically located on systems in the U.S. Note that this is something providers will need to ensure via contracts.



    Where to start: Data classification
    If you don't take time to understand your data, then you are setting yourself up for failure in a public cloud environment. Therefore, securing data must begin with data classification.

    Here are some steps to follow:


    1. Identify the data that will be processed or stored in the cloud.
    2. Classify the information in regards to sensitivity towards loss of the CIA criteria. This would include identifying regulatory requirements for the data.
    3. Define the rules by which particular information classes of instances must be stored, transmitted, archived, transported and destroyed. Many handling requirements result from contractual or regulatory requirements.


    A thought on physical location
    As stated earlier, if there are restrictions on the physical location of data, you'll need to find a provider that can handle them. Amazon Web Services uses regions, and many of the other cloud providers offer similar structures. However, you need to ensure the service-level agreements meet your locality requirements.



    Protecting data in the cloud
    In the cloud, your data can be in any of the following locations:


    • Local storage of the virtual machine (i.e., processing engine). Data is tied to the virtual machine location and state.
    • Persistent data store (i.e., Amazon EBS or S3, Azure SQL, etc.). Data is independent of virtual machine location and state.
    • In transit on the wire.


    You will also need to use one of the following methods to meet your data protection requirements:


    • File system and share access control lists: This would be using the access control mechanisms in the offering to ensure appropriate restrictions on the data. This would be used in all cases, but it would not protect from malicious IT staff at the provider.
    • Encryption with a mixture of public and private key solutions: This would most likely be used to protect against malicious IT staff at the provider.
    • Transport level encryption: This would be used as a matter of course whenever sensitive information was being passed or transmitted.


    In closing
    I strongly insist that everyone classifies their data. Once that is done, there are a couple of cloud issues you need to think about:


    • Is my data stored where is should be?
    • If there are any physical location limits, are those met?
    • Am I protecting against malicious IT staff?


    The rest should be basic security practices, much like those used in your non-cloud environment. There is nothing obscure about securing data in the cloud. Just remember that "good security is good security" and you should be good to go.

    ---

    Tuesday, November 17, 2009

    Google Chrome on Ubuntu (well, sort of)

    Most of us already know that one of the fastest browser out there is Google Chrome. Sadly enough, Google Chrome is only available on Windows platform, while the Mac and Linux users are left to run Safari or Firefox. The good thing is that Google has listened to those requests and are currently developing the native version of Chrome to Mac and Linux.

    But for those who can't wait, there is a way to get Chromium (the open-source platform on which Google Chrome is based). Here are the steps (originally taken from here):

    First you need to edit the /etc/apt/sources.list file:

         sudo gedit /etc/apt/sources.list

    Add add the following lines if you are using Ubuntu 9.10 (Karmic Koala):

         deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main
         deb-src http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main

    Save and exit the file.



    Now add the GPG key using the following command:

         sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 0xfbef0d696de1c72ba5a835fe5a9bf3bb4e5e17b5

    Update the source list using the following command:

         sudo apt-get update

    Then you can install chromium using the following command:

         sudo apt-get install chromium-browser

    After a successful installation, you can open chromium from Applications—>Internet—>Chromium Web Browser:
    [singlepic id=261 w=320 h=240 float=center]

    Here's a sample picture of what Chromium looks like on Ubuntu:
    [singlepic id=262 w=320 h=240 float=center]

    Alternatively, there's a script created by Jeff Rader to automate the installation of Chromium. His script can be downloaded here. Do not forget to change the permission to executable before running the script.

    Enjoy!

    ---

    Tuesday, October 20, 2009

    Run your own Ubuntu Enterprise Cloud, part 3

    A continuation and final article on how to set up cloud computing on Ubuntu. This information is originally posted here.

    ---

    In part 1 and part 2 of this series, we saw how to set up a minimal cloud infrastructure and bundle a basic image (and test it). In this final article, we’ll play with our cloud from an end-user perspective.

    Setting up the web UI

    First of all, before accepting end users, as the administrator of the cloud you will have to setup a few things on the web UI. Using your favorite browser, you should:

    * Open https://cloudcontroller:8443/
    * Log in using the default user/password: admin/admin
    * Change the default password, setup the cloud admin email address
    * Logout

    Setting up the cloud client

    We’ll use Ubuntu 9.10 beta for this purpose, as it includes all the needed packages, and it’s so great ! You will have to install the following packages:

          $ sudo apt-get install euca2ools unzip



    Registering on UEC, getting credentials

    As the end-user, fire up your favorite browser and:

          * Open https://cloudcontroller:8443/
          * Click “Apply” and enter your end user details

    If you set up the email correctly on your cloud controller, it should send an email to the cloud admin address asking him to approve that request. Follow the instructions on that email to approve the account as the admin.

    You should then get an email at the end user email address asking you to confirm the account request. Follow the instructions on that email, then you can log in on the web UI:

          * Open https://cloudcontroller:8443/
          * Login using your end user username and password
          * Click “Download Credentials” in the “Credentials” tab
          * Note the EMI reference you can use on the “Images” tab

    Starting up an instance

    You should unzip the credentials zipfile you just downloaded, then source the eucarc file and test the connection:

          $ unzip euca2-enduser-x509.zip
          $ . eucarc
          $ euca-describe-availability-zones verbose

    Setup a SSH key and allow connection to the SSH port:

          $ euca-add-keypair enduserkey > enduserkey.priv
          $ chmod 0600 enduserkey.priv
          $ euca-authorize default -P tcp -p 22 -s 0.0.0.0/0

    Then starting up an instance is just a matter of passing the right EMI and type:

          $ euca-run-instances -k enduserkey emi-XXXXXXXX -t c1.medium

    Enjoy !

    ---