RE: Securing Linux based public access terminals

From: Rocky Heckman (rocky.he_at_g-wizinnovations.com)
Date: 07/21/04

  • Next message: Gandalf The White: "Re: Comcast Cable Setup Security Issue"
    To: <brett@cs.jhu.edu>
    Date: Wed, 21 Jul 2004 22:51:19 +1000
    
    

    Oops my bad. I had read too many posts and got my OSes confused. Sorry.

    RH

    -----Original Message-----
    From: Brett Anderson [mailto:brett@cs.jhu.edu]
    Sent: Wednesday, 21 July 2004 10:43 PM
    To: Rocky Heckman
    Cc: 'mr.happy'; security-basics@securityfocus.com
    Subject: RE: Securing Linux based public access terminals

    I don't think that that would apply in this redhat(or other linux) based
    configuration.

    On Tue, 2004-07-20 at 19:00, Rocky Heckman wrote:
    > So how will this work with the new Longhorn/Whidbey products that are
    coming
    > out that require a window to display chrome? It also requires the window
    to
    > be displayed in the viewable area which rules out sizing it bigger than
    the
    > viewport.
    >
    > R
    >
    > -----Original Message-----
    > From: Brett Anderson [mailto:brett@cs.jhu.edu]
    > Sent: Tuesday, 20 July 2004 6:39 AM
    > To: mr.happy
    > Cc: security-basics@securityfocus.com
    > Subject: Re: Securing Linux based public access terminals
    >
    > The window manager, ratpoison, is essentially the same except that it
    > makes things a bit more usable. There are no window decorations and main
    > windows are full-screen. Sub-windows such as a find dialog or a download
    > box, would be nicely centered in the middle of the screen. It is very
    > minimal but with simple and intuitive presentation. As I mentioned
    > before, you would have to remove the command that allows you to run new
    > programs.
    >
    > On Sat, 2004-07-17 at 07:16, mr.happy wrote:
    > > The thing is, you don't have to run a window manager.
    > > when the machine boots and the user logs in you could just put 'firefox'
    > > or something into the xinitrc file and then only firefox will run. There
    > > will be _no_ window support what so ever, and newly opened windows will
    > > all 'stick' to the upper left corner of the screen, give it a try...
    > >
    > > greets,
    > > Dirk
    > >
    > > On Thu, 2004-07-15 at 13:48, Andrew Shore wrote:
    > > > What I would like to is run a Linux workstation (RedHat probably 9
    even
    > > > though it's out of support) but when the user logs into the windows
    > > > session all they get is the browser. No menus no right click on the
    desk
    > > > top just a basic single application "dumb terminal". I've seen this
    done
    > > > before but it was too well secured for me to see how it was done! Also
    > > > I'd like to the workstation to log straight in as a local user with
    out
    > > > user intervention.
    > > >
    > > > Any ideas how I can achieve this or perhaps secure it in another way,
    I
    > > > remember with windows 3.x you could change the windows manager
    settings
    > > > in win.ini and it did exactly what I want. I just really don't want to
    > > > use Windows 3.1 ;)
    >
    >
    >
    ---------------------------------------------------------------------------
    > Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off

    > any course! All of our class sizes are guaranteed to be 10 students or
    less
    > to facilitate one-on-one interaction with one of our expert instructors.
    > Attend a course taught by an expert instructor with years of in-the-field
    > pen testing experience in our state of the art hacking lab. Master the
    > skills
    > of an Ethical Hacker to better assess the security of your organization.
    > Visit us at:
    > http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    >
    ----------------------------------------------------------------------------
    >
    >
    >

    ---------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
    any course! All of our class sizes are guaranteed to be 10 students or less
    to facilitate one-on-one interaction with one of our expert instructors.
    Attend a course taught by an expert instructor with years of in-the-field
    pen testing experience in our state of the art hacking lab. Master the skills
    of an Ethical Hacker to better assess the security of your organization.
    Visit us at:
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    ----------------------------------------------------------------------------


  • Next message: Gandalf The White: "Re: Comcast Cable Setup Security Issue"

    Relevant Pages

    • RE: PacketShaper
      ... we're deploying these along with firewalls in our managed security ... >>Ethical Hacking at the InfoSec Institute. ... >>Attend a course taught by an expert instructor with years of ... >>pen testing experience in our state of the art hacking lab. ...
      (Pen-Test)
    • Re: Password trading problem
      ... > I'm in charge of doing a security review of it. ... > e-mail and any attachments is strictly prohibited. ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: securing password list
      ... What security methods do you use to secure a list such as this? ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: Online Universities with Information Security Programs
      ... Online Universitties with Information Security Programs ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: Comparison of Yahoo v. MSN Messenger from security standpoint
      ... Onderwerp: RE: Comparison of Yahoo v. MSN Messenger from security standpoint ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)