We will run tor as a regular non-root user on slackware 13.37.
First download and install libevent:
tar -xvzf libevent-2xxx
cd libevent-2xxx
./configure
make
make install
Download tor source code and install:
tar -xvzf tor-0xxx
cd tor-0xxx
./configur --with-libevent-dir=/usr/local/lib
make
make install
Create configuration files:
cd /usr/local/etc/tor
cp torrc.sample torrc
mkdir /var/log/tor
touch /var/log/tor/notices.log
touch /var/log/tor/debug.log
mkdir /var/run/tor
touch /var/run/tor/tor.pid
mkdir /var/lib/tor
chown -R user:users /var/log/tor
chown -R user:users /var/run/tor
chown -R user:users /var/lib/torSocksPort 9050
DirPort 9030
SocksListenAddress 127.0.0.1
Log notice file /var/log/tor/notices.log
# Log debug file /var/log/tor/debug.log
DataDirectory /var/lib/tor
Nickname mynickname
ContactInfo your name <mail AT mail dot com>
ORPort 9001 # 443
RelayBandwidthBurst 100 KB # 800Kbps
RelayBandwidthRate 200 KB # 1600Kbps
Test run:
/usr/local/bin/tor -f /usr/local/etc/tor/torrc
Edit and set up control script located in source directory:
vim tor-0xxx/contrib/torctl
TORBIN="/usr/local/bin/$EXEC"
TORCONF="/usr/local/etc/tor/torrc"
PIDFILE="/var/run/tor/tor.pid"
LOGFILE="/var/log/tor/tor.log"
TORDATA="/var/lib/tor"
TORUSER=user
cp torctl /usr/local/bin/scripts/
chmod +x /usr/local/bin/scripts/torctl
Edit tor.sh:
DAEMON=/usr/local/bin/tor
TORCTL=/usr/local/bin/scripts/torctl
#TORUSER=_tor
#export TORUSER
cp tor.sh /etc/rc.d/init.d/tor.sh
chmod +x /etc/rc.d/init.d/tor.sh
Options: start | stop | restart | reload | status
Your are done!
/etc/rc.d/init.d/tor.sh start
*Running tor as root is not recommended.
--
*
http://www.linux-tutorial.net/a847
Open /etc/sshd/sshd.conf and enable if disabled:
Subsystem sftp internal-sftp
Add following lines at the end:
Match group sftponly # or Match user someuser
ChrootDirectory /home/%u
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
encrypt:
openssl des3 -salt -in file.txt -out file.des3 -pass pass:mypass
decrypt:
openssl des3 -d -salt -in file.des3 -out file.txt -pass pass:mypass
Install xscreensaver:
sudo apt-get install xscreensav* -y
Install flashplugin:
sudo apt-get isntall ubuntu-restricted-extras -y
* I prefer vim for text editing (you can use/download your favourite text editor):
sudo apt-get install vim -y
Go to www.opera.com, choose debian package for Ubuntu,
Install it:
sudo dpkg -i opera*.deb
Create kiosk user, set random password, set automatic login.
Log in kiosk user, run
xscreensaver-demo
Answer with yes/ok
I prefer disable screen saver
Open opera web browser, choose preferences
startup start with home page, enter home page
Uncheck Enable Password manager
History adresses 0, uncheck remember content on visited pages
Right click on search bar Customize > Remove from toolbar (important for security reasons)
Enable main bar
Right click and remove Open, Save, Print buttons same way.
You may leave Find and Home button, but I removed them all to leave more space for web-page on screen.
In about:config disable "Show crash log upload dialogue" and "Show problem dialogue"
Opera > Exit
Log in as admin user.
sudo vim /usr/share/xsessions/kiosk.desktop
[Desktop Entry]
Encoding=UTF-8
Name=kiosk
Comment=Opera Kiosk Mode
Exec=/usr/share/xsessions/opera.sh
Type=Application
sudo vim /usr/share/xsessions/opera.sh
#!/bin/bash
xscreensaver -nosplash &
#while true; do opera; sleep 5s; done
while true; do opera --k --kioskbuttons --kioskresetstation --nochangebuttons --nochangefullscreen --nocontextmenu --nodownload --nokeys --nomail --nomaillinks --nomenu --nominmaxbuttons --noprint --nosave --nosplash --geometry 1280x1024+0+0; sleep 5s; done
* Edit your opera window size (--geometry 1280x1024+0+0)
sudo chmod 755 /usr/share/xsessions/opera.sh
sudo vim /etc/lightdm/lightdm.conf
user-session=kiosk
Add this line, to disable guest account:
allow-guest=false
* For remote access you can install ssh server
sudo apt-get install openssh-server
* For security reasons you can install ubuntu firewall
sudo apt-get install gufw
Alt+F2 gufw, enable firewall, disable incoming trafic, open 22. tcp port for ssh.
sudo passwd root
su
crontab -e
0 1 * * * /sbin/reboot
sudo reboot
* When something goes wrong or you just want to login in regular unity session, you need to edit /etc/lightdm/lightdm.conf, change back
user-session=ubuntu
save and reboot
You can do this from
1) SSH or
2) Reboot machine, hold shift while grub loading, choose recovery mode, root console, enter password.
* You may wish change opera settings folder to read-only, but I found it not necessary to do.
--
http://www.instructables.com/id/Setting-Up-Ubuntu-as-a-Kiosk-Web-Appliance/
http://www.opera.com/support/mastering/kiosk/
This is annoying when you can't click mouse in vim to paste some text.
Add following lines to .vimrc to fix that:
if has('mouse')
set mouse-=a
endif
Basic firewall configuration
Drop INPUT, FORWARD
# iptables -P INPUT DROP
# iptables -P FORWARD DROP
Accept establised
# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
Accept loopback
# iptables -A INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -i lo -j ACCEPT
Accept SSH
# iptables -A INPUT -p tcp --dport 22 -i eth0 -j ACCEPT
Accept ICMP
# iptables -A INPUT -p icmp -j ACCEPT
View
# iptables -L
With line numbers
# iptables -L --line-numbers
Save
# iptables-save > /root/fw.conf
To enable on next boot, add line to /etc/rc.d/rc.local
iptables-restore < /root/fw.conf
