Re: FreeBSD 5.3 setup help

LD wrote:
> Hi there,
> 
> thanks very much Chris for the straightforward explanation!
> 
> Does anyone know why such simple information is not provided with the 
> online documentation? Before Chris' reply it had felt like trying to get 
> blood from a stone...

We can add it, but I'll need you to elaborate on specifically which part 
you think was missing and where we should add it so others don't have 
the same frustrations. Thanks for bearing with us through them, we 
appreciate it even if that might not be outwardly apparent.

> 
> On 14/02/2005, at 7:55 PM, Chris Vetter wrote:
> 
>> LD wrote:
>>
>>> I haven't done step 4.4 but have set the Timezone and it seems at some
>>> point that a script has been added to /usr/local/etc/rc.d/ startup
>>> scripts already to starts/stops gdomap and gdnc but not gpbs (but
>>> seeing as I hadn't set up X11 as yet this was probably a good thing,
>>> yes?)...
>>
>>
>> Yes. However, each user is supposed to start his/her own instance of
>> 'gpbs' anyway... More on that later.
> 
> 
> On Mac OS X the admin user can set limitations on the environment of 
> other users and for example limit the applications that they can use 
> and/or whether they can personalise their Dock etc.
> 
> How would you go about setting up these kinds of policies for this 
> system? i.e., I assume it'll need something other than 
> .xinitrc/.xsession files in the skel template as each user can tamper 
> with what type of desktop is loaded etc.

Well, in this specific case, you could always set the users' 
.xinitrc/.xsession to be globally-readable and not writable at all by 
the user, (only by root), or you could set it to be only readable by the 
users group, and not writable at all, etc...

More generally, "locking down" of BSD/Linux Desktops is difficult.

> 
>>> I've then installed X.org's X11 implementation...
>>> # cd /usr/ports/x11/xorg && make install clean
>>> ... and have created a working '/etc/X11/xorg.config' file.
>>
>>
>> After installing Window Maker, log in as your regular user on a
>> console and run '/usr/X11R6/bin/wmaker.inst'
>> This will create all directories under ~HOME/GNUstep for Window
>> Maker. Additionally, it will create a very basic file called
>> ~HOME/.xinitrc that launches 'wmaker'. This file is automatically
>> run whenever you launch X11 from a console, by running 'startx'.
> 
> 
>> In case of using 'xdm' you have to change ~HOME/.xinitrc to
>> ~HOME/.xsession and make sure that it's executable (AFAIK).
>> Of course you can also do a sym-link instead
> 
> 
> Thanks again!
> 
> with regards,
> 
> -- 
> Lachlan Deck