[gentoo-user] How would I disable Flash (oand other things) for a single account?

[gentoo-user] How would I disable Flash (oand other things) for a single account?

[Mark Knecht]

Is it possible to shut off all multimedia stuff for a single account?
It's doesn't have to be securely off, just off, so if it cannot be
done by meddling with group membership then doing something in a root
owned bash file that executes when the user logs in even that's fine
with me. (Uh - even I don't know much about what Linux/Gnome does when
a user logs in so I'll get to learn a bit also!)

I've removed the user account from the audio, video and games groups.
When playing YouTube stuff sound is gone but the Flash video is still
there. Can I stop that from working. maybe by changing paths if
there's not an easier way to do it?

Thanks,
Mark

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[Massimo Gengarelli]

Probably it's not the best solution (and it's easily revertable), but
you may try disabling Javascript in Firefox (or whatever browser your
user will use).

Another solution (but I don't think it will work) is to chmod
/opt/netscape/plugins/libflashplayer.so to -rwxr-x--- (0750) and then
change it's ownerships to root:video (or another group you may want to
create). 

On Fri, Sep 11, 2009 at 05:24:23PM -0700, Mark Knecht wrote:
> Is it possible to shut off all multimedia stuff for a single account?
> It's doesn't have to be securely off, just off, so if it cannot be
> done by meddling with group membership then doing something in a root
> owned bash file that executes when the user logs in even that's fine
> with me. (Uh - even I don't know much about what Linux/Gnome does when
> a user logs in so I'll get to learn a bit also!)
> 

-- 
      _	  * Massimo Gengarelli <massimo.gengarelli@gmail.com>
 ~0  (_|  * Computer Science student @ http://www.unibo.it 
|(_~|^~~| * http://massitm.sohead.org <-- my personal, outdated website
TT/_ T"T  * Kiss your keyboard goodbye!

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[Paul Hartman]

On Fri, Sep 11, 2009 at 7:24 PM, Mark Knecht <markknecht@gmail.com> wrote:
> Is it possible to shut off all multimedia stuff for a single account?
> It's doesn't have to be securely off, just off, so if it cannot be
> done by meddling with group membership then doing something in a root
> owned bash file that executes when the user logs in even that's fine
> with me. (Uh - even I don't know much about what Linux/Gnome does when
> a user logs in so I'll get to learn a bit also!)
>
> I've removed the user account from the audio, video and games groups.
> When playing YouTube stuff sound is gone but the Flash video is still
> there. Can I stop that from working. maybe by changing paths if
> there's not an easier way to do it?

Is the user a willing participant? If so, I think you can use
NoScript/FlashBlock to block that kind of stuff with success.

If you don't want someone to play video, you'll not only need to block
the browser plugins, but any software on the company capable of
playing video (such as mplayer, xine, etc).

Massimo's suggestion of altering the file modes to remove read access
from that user sounds good. Maybe it would be easier with ACLs so you
can specifically deny that one user access. But I've never used ACLs
so I can't say for sure it would be easier. :)

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[Volker Armin Hemmann]

On Samstag 12 September 2009, Mark Knecht wrote:
> Is it possible to shut off all multimedia stuff for a single account?
> It's doesn't have to be securely off, just off, so if it cannot be
> done by meddling with group membership then doing something in a root
> owned bash file that executes when the user logs in even that's fine
> with me. (Uh - even I don't know much about what Linux/Gnome does when
> a user logs in so I'll get to learn a bit also!)
> 
> I've removed the user account from the audio, video and games groups.
> When playing YouTube stuff sound is gone but the Flash video is still
> there. Can I stop that from working. maybe by changing paths if
> there's not an easier way to do it?
> 
> Thanks,
> Mark
> 

put all users except the one into one group.

change ownership of flash and multimedia stuff to that group.
change permissions, make flash and multimedia stuff only owner and group 
readable/executable.

Everybody can use flash and multimediastuff except that user

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[Mark Knecht]

On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann
<volkerarmin@googlemail.com> wrote:
> On Samstag 12 September 2009, Mark Knecht wrote:
>> Is it possible to shut off all multimedia stuff for a single account?
>> It's doesn't have to be securely off, just off, so if it cannot be
>> done by meddling with group membership then doing something in a root
>> owned bash file that executes when the user logs in even that's fine
>> with me. (Uh - even I don't know much about what Linux/Gnome does when
>> a user logs in so I'll get to learn a bit also!)
>>
>> I've removed the user account from the audio, video and games groups.
>> When playing YouTube stuff sound is gone but the Flash video is still
>> there. Can I stop that from working. maybe by changing paths if
>> there's not an easier way to do it?
>>
>> Thanks,
>> Mark
>>
>
> put all users except the one into one group.
>
> change ownership of flash and multimedia stuff to that group.
> change permissions, make flash and multimedia stuff only owner and group
> readable/executable.
>
> Everybody can use flash and multimediastuff except that user
>
>

Makes sense. thanks.

What happens after an emerge that updates the files? I have to go back
in and change owner:group on the files again?

I'm sure you're right and this is probably the right way to do it.

Thanks,
Mark

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[Volker Armin Hemmann]

On Samstag 12 September 2009, Mark Knecht wrote:
> On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann
> 
> <volkerarmin@googlemail.com> wrote:
> > On Samstag 12 September 2009, Mark Knecht wrote:
> >> Is it possible to shut off all multimedia stuff for a single account?
> >> It's doesn't have to be securely off, just off, so if it cannot be
> >> done by meddling with group membership then doing something in a root
> >> owned bash file that executes when the user logs in even that's fine
> >> with me. (Uh - even I don't know much about what Linux/Gnome does when
> >> a user logs in so I'll get to learn a bit also!)
> >>
> >> I've removed the user account from the audio, video and games groups.
> >> When playing YouTube stuff sound is gone but the Flash video is still
> >> there. Can I stop that from working. maybe by changing paths if
> >> there's not an easier way to do it?
> >>
> >> Thanks,
> >> Mark
> >
> > put all users except the one into one group.
> >
> > change ownership of flash and multimedia stuff to that group.
> > change permissions, make flash and multimedia stuff only owner and group
> > readable/executable.
> >
> > Everybody can use flash and multimediastuff except that user
> 
> Makes sense. thanks.
> 
> What happens after an emerge that updates the files? I have to go back
> in and change owner:group on the files again?
> 
> I'm sure you're right and this is probably the right way to do it.
> 
> Thanks,
> Mark
> 

you could either add it to a cron job or run a little script that you run 
after every emerge. 

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[Mark Knecht]

On Sat, Sep 12, 2009 at 12:32 PM, Volker Armin Hemmann
<volkerarmin@googlemail.com> wrote:
> On Samstag 12 September 2009, Mark Knecht wrote:
>> On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann
>>
>> <volkerarmin@googlemail.com> wrote:
>> > On Samstag 12 September 2009, Mark Knecht wrote:
>> >> Is it possible to shut off all multimedia stuff for a single account?
>> >> It's doesn't have to be securely off, just off, so if it cannot be
>> >> done by meddling with group membership then doing something in a root
>> >> owned bash file that executes when the user logs in even that's fine
>> >> with me. (Uh - even I don't know much about what Linux/Gnome does when
>> >> a user logs in so I'll get to learn a bit also!)
>> >>
>> >> I've removed the user account from the audio, video and games groups.
>> >> When playing YouTube stuff sound is gone but the Flash video is still
>> >> there. Can I stop that from working. maybe by changing paths if
>> >> there's not an easier way to do it?
>> >>
>> >> Thanks,
>> >> Mark
>> >
>> > put all users except the one into one group.
>> >
>> > change ownership of flash and multimedia stuff to that group.
>> > change permissions, make flash and multimedia stuff only owner and group
>> > readable/executable.
>> >
>> > Everybody can use flash and multimediastuff except that user
>>
>> Makes sense. thanks.
>>
>> What happens after an emerge that updates the files? I have to go back
>> in and change owner:group on the files again?
>>
>> I'm sure you're right and this is probably the right way to do it.
>>
>> Thanks,
>> Mark
>>
>
> you could either add it to a cron job or run a little script that you run
> after every emerge.
>
>
Certainly. Thanks.

Re: [gentoo-user] How would I disable Flash (oand other things) for a single account?

[David Juhl]

ACLS maybe?  I've read about it but never had a need to do so.

On Sat, 2009-09-12 at 21:32 +0200, Volker Armin Hemmann wrote:
> On Samstag 12 September 2009, Mark Knecht wrote:
> > On Sat, Sep 12, 2009 at 11:41 AM, Volker Armin Hemmann
> > 
> > <volkerarmin@googlemail.com> wrote:
> > > On Samstag 12 September 2009, Mark Knecht wrote:
> > >> Is it possible to shut off all multimedia stuff for a single account?
> > >> It's doesn't have to be securely off, just off, so if it cannot be
> > >> done by meddling with group membership then doing something in a root
> > >> owned bash file that executes when the user logs in even that's fine
> > >> with me. (Uh - even I don't know much about what Linux/Gnome does when
> > >> a user logs in so I'll get to learn a bit also!)
> > >>
> > >> I've removed the user account from the audio, video and games groups.
> > >> When playing YouTube stuff sound is gone but the Flash video is still
> > >> there. Can I stop that from working. maybe by changing paths if
> > >> there's not an easier way to do it?
> > >>
> > >> Thanks,
> > >> Mark
> > >
> > > put all users except the one into one group.
> > >
> > > change ownership of flash and multimedia stuff to that group.
> > > change permissions, make flash and multimedia stuff only owner and group
> > > readable/executable.
> > >
> > > Everybody can use flash and multimediastuff except that user
> > 
> > Makes sense. thanks.
> > 
> > What happens after an emerge that updates the files? I have to go back
> > in and change owner:group on the files again?
> > 
> > I'm sure you're right and this is probably the right way to do it.
> > 
> > Thanks,
> > Mark
> > 
> 
> you could either add it to a cron job or run a little script that you run 
> after every emerge. 
>