[00:26] is there a way to audit user accounts on a system? [00:31] under a multi user system, isn't the user's directories supposed to be in-accessible from other users? [00:38] Ahmuck: no [00:38] they're usually not writable by other users [00:40] readable by others? [00:53] the base of the folder is, yeah [00:54] opening individual images/documents? [00:54] opening of ? [01:55] Evening all [03:44] ok, back to user directories. should user directories be "locked" to prevent traversing them? [04:02] Ahmuck: Depends. [04:03] How are you planning on sharing files? [04:03] Are you going to create separate "shared areas" for your people to share documents? [04:03] well, isn't "Public" a shared folder for public? [04:03] Public, where? [04:03] my concern is students traversing home directories and "snooping" in other student's files [04:03] In a users home dir? [04:04] yes, it's here on our system by default [04:04] each user's home directory has a "Public" folder [04:04] yeah. In my view, it's kinda dumb. [04:04] here's how we do it. [04:04] Each user has their own primary group [04:05] so I'm sbalneav:sbalneav [04:05] my home dir is mode 770 [04:05] and I set the umask on the system to be 007 [04:05] I create a /home/share [04:06] owned by nobody:share, which is a group I create, gid > 10000 [04:06] In the members of the group, I list all the userid's who need access to the share. [04:06] the mode on the share directory is 2770 [04:07] i.e. the setgid bit is set. [04:07] that way, any user who creates a file in that dir, the file is created group owned "share" [04:07] understood, that i agree with [04:07] That's how I've been sharing files at Legal Aid for 15 years. [04:08] it's always worked like a charm [04:08] i'll probally make it "public" rather than share [04:09] so, can your users drop into each other's directory and see their files? open jpgs, etc.? [04:09] can they view what's in each other's directory? [04:10] no [04:10] ie, my love letter to Daniel, etc. [04:10] hrm, i must have something wrong on my system then [04:10] No you dont [04:10] created a new user today, and that user can traverse any directory [04:10] and view, open files, etc. [04:10] Sure [04:10] by default, the umask's set to 002 [04:10] so ur saying that the procedure above is what you use to restrict that? [04:11] and /etc/skel's got too wide a permission. [04:11] Well, I don't use the graphical user creator [04:11] neither do i [04:11] i use "adduser someuser" [04:12] since I use LDAP for my account creation, I have custom scripts for adding users. [04:12] ah [04:12] well, i'll touch base with you tomorrow, i'm exhausted today [04:13] fell asleep on the floor at work today, napping [04:13] lsbalneav@phobos:/etc/pam.d$ ls -la /etc/skel [04:13] total 32 [04:13] drwxr-xr-x 2 root root 4096 2009-10-28 18:55 . [04:13] you'll want to start by toning down the permissions on /etc/skel, iirc [04:13] since it uses those to creat the home dir. [12:31] highvoltage: ping [12:35] keffie_jayx: pong [12:47] keffie_jayx: how are things? [14:48] Morning all [15:41] morning sbalneav [15:41] sbalneav: I saw lts.conf.xlm for the first time yesterday... wow [15:45] which? In the docs you mean? [15:45] yeah [15:45] I've put a bit of work into that. [15:45] highvoltage: So, you in Canada yet? [15:46] sbalneav: not yet, it will probably be another month or so before I'm there [15:46] is it cold in S Africa? [15:47] highvoltage: excellent! We should be deep in winter by that time :) [15:47] Ping me when you're here, I'll gve you a buzz [15:49] sbalneav: I'll do so! I'm actually quite scared about the cold :) [15:49] jbicha: it's summer in south africa atm, so it's quite warm [15:49] oh, I forgot [15:49] Well, it doesn't get down to -40C in Montreal like it does here. [15:49] jbicha: :) [15:50] Maybeeee -15 to -20 [15:50] yeah coldest it gets in Cape Town is about 5C. coldest I ever experienced was about 1C when I was in Johannesburg last year [15:51] it's still around 30C/90F this week here [15:51] jbicha: where is 'here'? [15:51] Bahrain [15:51] * highvoltage loves Bahrain [15:51] my parents live in northern Alberta though [15:52] do you still plan on visiting Bahrain in a few months [15:52] jbicha: if there's time and if I can afford it [15:53] jbicha: I'd love to be able to take my father to a grand prix race, he's a big fan but has never been to one [15:53] I expect to be living in the DC area next August so the climate should be more "normal" there [18:16] highvolt1ge: ping [18:19] effie_jayx: pong === highvolt1ge is now known as highvoltage [18:21] highvoltage: did you ever find that guide on teaching kids about free software? [18:23] effie_jayx: no I didn't, at some point I'll have to do a thorough search on some old backups and get in contact with some people to see if they have it, I'm slightly worried that it might be gone forever [18:26] highvoltage: I should show you what my daughter is learning at school [18:26] the book is filled with WIN XP screenshots [18:27] nothing against WIN XP SSs [18:27] but even if she tried any other product from microsoft she would be so lost with the ui changes [18:27] she is only 7 [18:34] effie_jayx: ouch [18:35] effie_jayx: yeah it's been a big topic in some places, should you teach someone how to use a specific OS, or should you rather teach them general concepts that are universal that they can use everywhere? [18:35] effie_jayx: it's also a similar issue with openoffice vs ms office [18:36] effie_jayx: in some institutions they spend lots of time teaching very specific parts of specific versions of ms office, then one day when the user has to move to another version or to another office suite, they're not sure how to figure out where to find the features [18:36] it's really hard even with different versions of MS Office [18:37] I've got MS Office 2007 here at work and I have no idea how to run the thing [18:45] yeah, but it is just scary how fosilized that can get [18:45] m dughter has been using linux as long as I have [18:47] keffie_jayx: just saw your private dents... did you perhaps mean http://jonathancarter.co.za/files/static/docs/cookbook.html ? [18:47] keffie_jayx: that was more meant towards teachers than kids :) [18:49] highvoltage: right right [19:03] highvoltage: right... but it is still good quality material [20:01] wow, welcome to everyone who joined! [20:02] great to see more people in that room ;) [20:02] I hope the group doesn't mind a follow-up question about LTSP-Cluster.... I'm just having a hard time finding more info about it: Is it ready for production use? Is there a place with screenshots/more info? [20:03] I wonder if there's already any software packaged that we should include for special-needs students [20:03] it's deployed and used by over 60000 users mostly in Canada and it's getting to be used in companies as well [20:03] documentation is mostly available on http://wiki.ltsp-cluster.org [20:04] you have a guide here "OpenVZ installation guide" on how to install it with OpenVZ, the same can be applied to physical servers [20:04] the code and bug tracking is done on Launchpad at https://launchpad.net/ltsp-cluster [20:04] and we unfortunately don't have screenshot of our web UI (maybe because I'm not exactly proud of it ;)) but we probably should have some [20:05] of both the current web interface and the new one on which highvoltage is working at the moment [20:05] stgraber: Got it - that's what I was looking for. Sounds like I just need to install it and check it out. :-) [20:05] the howto refers to the PPA as it was done for Jaunty, if you do it on Karmic, then you can simply use the regular package archive [20:05] highvoltage got all the packages in the archive with karmic [20:07] who should I talk to about getting a new package added to Edubuntu? [20:09] rodneyorpheus: what software would that be ? [20:09] I don't think we have a clear process there though we should establish a list of candidates and packages to work on during UDS [20:09] Sandbox, it's a 3D game design environment for kids [20:09] rodneyorpheus: it's the same process as getting a package into Ubuntu, although you could bring it to our attention by filing a needs-packaging bug in launchpad and subscribing us to it [20:09] so sending me a list before UDS is probably the easiest [20:09] rodneyorpheus: ah :) [20:10] highvoltage: sounds like a great way of handling needs-packaging for education [20:10] so just do as highvoltage said and I'll look at that list of bugs ;) [20:10] Sandbox has been around for a while [20:10] rodneyorpheus: they send us announcements to our lists when they make new releases, it's been on my radar for packaging work for a while [20:10] last time I looked at it needed some work to get it ready for packaging [20:10] yeah, I was helping the devs and the GetDeb people make a debian package of the new version [20:10] rodneyorpheus: I've only become a motu last week, I'll add it to my list of things to package, but if anyone wants to beat me to it they are welcome :) [20:10] so that's done now [20:10] oh it's done [20:11] there is going to be a web interface to? [20:11] and working wel [20:11] rodneyorpheus: so you have a source package? [20:11] source is available, and c_korn from GetDeb already made a working ubuntu package [20:11] rodneyorpheus: I don't see the package in Debian itself so it won't get imported automatically, though if you have a source package, that'll help us include it in Ubuntu directly [20:15] please have a look here [20:15] https://bugs.launchpad.net/getdeb.net/+bug/256665 [20:15] Error: Could not parse data returned by Launchpad: The read operation timed out (https://launchpad.net/bugs/256665) [20:15] sandboxgamemaker (2.4-1~getdeb1) jaunty; urgency=low * New upstream version. (LP: #256665) -- Christoph Korn Sat, 17 Oct 2009 16:05:28 +0200 [20:16] if that's any help? [20:17] it's an excellent program, I'd really like to see it more widely known [20:17] I'm adding an Ubuntu task [20:17] done [20:18] thanks! [20:27] Question: I'm a guy and I support what your doin, I'm not really sure what to say for this session, and I think that goes for most here and is why you're not getting many replies, I've never had a problem when it comes to gender equality and it's something I promote, but I know that allot of my male friends really aren't that sensitive here, but they often don't realize it, what steps can one take to make sure the eviro [20:27] nment doesn't seem so male-dominated, because I garuntee you many guys are completely oblivious [20:27] sorry wrong channel [20:27] rofl [20:37] anki would be a good one to package [20:53] lol [20:53] Ok, do you need anything else from the store besides milk and bread? Oh, sorry wrong channel ;) [20:56] is everybody lost today? [21:04] Ahmuck: have you seen my baseball? [21:05] I'm trying to prepare a set of disks for use in a school in rural Africa. The donated machines there have only CD drives, not DVD. Is there a smaller version of edubuntu available, or an easy way to produce one? [21:08] Sarten-X: would USB sticks be available at all? [21:09] Possibly, but i'm not sure [21:09] is you cant use any kind of USB/Thumb Drive.... I would suggest putting Ubuntu on a CD, installing it and then have them install the Edubuntu packages [21:09] the DVD image can be burned to a USB stick using USB Startup Disk Creator [21:10] provided they have internet [21:10] and if not you might have to do something like AptOnCD [21:11] What made Edubuntu so big? As I recall, 8.10 was only 300 megs or so... [21:13] Sarten-X: it was just an addon Cd with the educational apps [21:13] Sarten-X: it's now a full installation disk,so like Ubuntu + all the apps and language packs + LTSP rolled together [21:15] hopefully it wont get so big we'll need to go blue-ray....... I'd like to see allot of stuff added.... but that may cause headaches [21:15] oh... so it no longer needs a separate ubuntu install first? [21:15] well [21:15] Sarten-X: exactly [21:16] it's all in one [21:16] Sarten-X: we also added a Live session too where you can play around with it from the DVD without installing [21:16] similar to the Ubuntu Desktop CD [21:16] can it still use a separate installation? Most of the machines wouldn't even run the desktop installer, and needed the alternate. [21:17] Sarten-X: the alternate is there too [21:17] the DVD has both [21:17] which is part of why it's so big [21:17] ah... this is going to take more preparation than I was expecting... [21:18] well, we made the DVD so that hopefully it would need *less* [21:19] oh [21:19] no no no... [21:19] it'll be less work for the person going over there... [21:19] just I need to figure out logistics again [21:20] I think the Live CD feature is going to be very important in getting people to try it.... is there/ will there be a WUBI version of Edubuntu? [21:21] yes, WUBI would be great! [21:22] the biggest problem is getting people to do that first install [21:22] once they've crossed that barrier you're halfway there [21:22] and WUBI is really good for that [21:22] heh [21:22] wubi is awesome [21:23] it has only one problem... [21:23] when I demonstrate it, I can only describe it as "magic" [21:25] hehe, so true [21:26] I use it to teach my students about alternative operating systems, and they honestly can't believe that it will work [21:45] good talking to you all - bye! [21:55] where can I get an add-on iso for 9.10? [21:55] you can't [21:55] LaserJock: that isn't cool [21:55] you need to either download the Edubuntu DVD or install via internet [21:56] LaserJock: If I download the Edubuntu package from ubuntu 9.10 - How large download would that be megabyte wise? [21:57] wiehan: hmm, maybe 200MB [21:58] I do not understand that, because Ubuntu is ~700mb + 200mb for edubuntu package, Edubuntu is 3.3gb? [21:58] well [21:58] there's a lot more to it [21:58] the Edubuntu DVD includes both text-based and graphical installers [21:58] LaserJock: I understant that more stuff is on the DVD so that you don't have to download it. [21:58] and there are a whole lot of language packs [21:59] Ubuntu + educational apps is ~ 1GB [21:59] but we have both graphical and text-based installers, which doubles that [21:59] 2GB [21:59] then we have about 1GB worth of language packs [21:59] 3GB [21:59] Ok, would there really be any other advantage than downloading the DVD versus downloading the edubuntu package (Except for not having to download stuff I want later) [22:00] well, if you already have Ubuntu installed, no, not really [22:00] with the DVD you can install everything together pretty quickly and you can also run the educational apps from the DVD itself (for demos) [22:01] what does the "not really" part implies? Because I really can't download that much now, but I really want the best for the kid I'm doing this for? [22:01] wiehan: I can probably cut it down [22:01] wiehan: what age? [22:01] LaserJock: I really do not mind for the stuff you just mentioned [22:01] Age 12 [22:02] hmm [22:02] you might try just installing ubuntu-edu-primary [22:02] I my machine that takes 218MB to download [22:03] unfortunately a lot of that is because of the KDE dependencies of KDE Edu [22:03] but it's a very nice suite of software [22:03] I would just use gnome? [22:04] Are there some default KDE apps bundled with the standard gnome edubntu? [22:04] yes [22:04] the KDE Edu suite comes with Edubuntu [22:04] I understand [22:04] it's a lot to download but Gnome doesn't really have equivalent apps [22:06] if it was me I'd probably just install ubuntu-edu-secondary [22:06] Can I just deliver one interesting comment: Edubuntu is Free, and Free is GREAT. Where does free-software have the most 'value'? The answer is simply put - in "poor" countries. "Poor countries" have expensive internet - then why only the DVD image? It makes no sense to some, like me, from where I come. [22:09] wiehan: well, its a complicated issue [22:09] the dvd image is great for that very reason, if internet isn't an option you need another method....the DVD is that method.... that hope usually is the CD [22:10] or DVD can be sent to you [22:10] wiehan: we hope that people can share DVDs as much as possible [22:10] if you cant download it [22:10] it's complicated [22:10] Jesi-Idle: That is easy to say if internet has never been a problem. [22:10] the addon CD was causing use quite a bit of issues [22:11] one problem was basically stigma, people didn't think Edubuntu was a distro because it was an add-on [22:11] for instance, DistroWatch dropped us [22:11] So why not create specialzed downloads: Like Edubuntu-9.10-English [22:11] we don't have bandwidth for it [22:12] internet is not just an issue for poor countries [22:12] we have only enough "hosting" space for 1 .iso file [22:12] we decided to make the most of it we could [22:12] Doesn't the same amount for of smaller downloads equal less than the same amount times 3.3gb of downloads? [22:12] no [22:12] LaserJock: Ah, but isn't hosting space a difference issue than bandwaith? [22:13] because we currently ship ~ 100 languages worth [22:13] wiehan: you can install the packages on top of Ubuntu, provided language isn't an issue.... that's 200some MB yeah but have you seen an Ubuntu ISO less than 200Mb? [22:13] if we made a CD for each [22:13] it's something like 50GB easily [22:13] LaserJock: I understand, just curious [22:14] yeah, we put off doing a DVD for years [22:14] *specifically* because of poor countries [22:14] it was not an easy decision to make [22:14] another big issue was that there was no way to demo Edubuntu using a Cd [22:14] LaserJock: what is the storage and bandwidth limit you have to deal with? [22:15] It still is tough for so many people to download 3.3gb (it takes for ages and it's expensive) - it really is tough to understand if you live in a first world country an Internet in an legal right even... [22:15] Jesi-Idle: Canonical will only host us if we limit ourselves to 1 .iso [22:15] wiehan: I understand [22:16] wiehan: hopefully if things progress we can do something better for people [22:16] internet isn't a legal right here, were I live.... USA [22:16] Jesi-Idle: Well, it still is dirt cheap and hell fast there [22:17] we don't often have usage caps in the US, which is a real issue in a lot of countries [22:18] even if it is slow here, we can just leave it downloading for however long it takes without a problem [22:18] my parents have a 2GB cap/ month I think [22:18] so they couldn't download it [22:18] Wiehan: most of the time, like he said usage caps are the big difference...... [22:19] anyway, I gotta run home [22:19] but your "slow" is really different than ours [22:19] not always, you'd be suprised [22:19] I still really appreciate what you guys are doing [22:19] keep it up [22:19] LaserJock: have you considered using other places to store filkes as well, like a mirrorbut a "mirror" per sey? [22:19] the US can have some of the worst internet connections on the planet [22:20] Jesi-Idle: well, we'd love to have just plain mirrors [22:20] yep, when I had SB Yahoo, it went out all the time [22:20] LaserJock: Do you often download stuff at a rate of 5kB/s [22:20] the problem is with the Addon Cd nobody was taking Edubuntu seriously [22:20] wiehan: my parents do, usually 3kB/s [22:21] Well.. [22:21] they just upgraded last week to a satellite internet thingy so they're no beyond a 28.8 modem :-) [22:21] the internet, one of our biggest resources yet one of our biggest limitations [22:21] wiehan: it depends on where in the US you are [22:21] wiehan: some places are very fast, but some places have horrible horrible phone lines that can't take DSL, etc. [22:22] Japan has some screaming fast internet [22:22] man I wish I had their connections [22:22] And I wish I had yours [22:22] same, Japan has allot of the cool tech as well [22:22] Anyways, I also need to go [22:22] a friend in Tokyo gets a 100MB/s optical T1 straight to his house for < $50 USD [22:23] LaserJock: are you serious? that would be so expensive in the US [22:23] wiehan: thanks for stopping by [22:24] Jesi-Idle: crazy I know, he has full mirrors of everything *buntu (archives, isos, etc.) [22:24] I plan to set up a home server, if Fiver Oprics come out here, I'd be so happy..... [22:25] I would to if I had that kind of connection :), what about Australia and China, do you know?