I Am Not Clueless Myths and Misconceptions About the Design Of

Total Page:16

File Type:pdf, Size:1020Kb

I Am Not Clueless Myths and Misconceptions About the Design Of I am not clueless or Myths and misconceptions about the design of GoboLinux Hisham H. Muhammad April 11, 2017 “Those who do not understand Unix are doomed to reinvent it, poorly.” – Henry Spencer, 1987 This week we had another release of GoboLinux, and again a number of people, even if indirectly, called me “clueless” for coming up with such a structure for a Linux distribution, for a number of reasons. None of those reasons was new; I heard all of them many times. This article is an attempt to sum them up, and explain why I chose the design decisions I made, hopefully clearing any pending misconceptions. I don’t have illusion this will prevent them keep happening, but at least I’ll have a text to point people to. This article ranges from common misconceptions from those who have never used GoboLinux, to well-intentioned but poorly-thought-out ideas that keep coming from time to time to the GoboLinux mailing list, often causing long debates. I’ll be separating the points in sections and they are meant to be self-contained, so feel free to skip directly to the ones that interest you, if you don’t feel like reading the whole thing. “There is a reason why things are the way they are” This is something I hear constantly, often followed by an explanation about the difference between /, /usr and /usr/local, and/or /bin and /sbin. I do understand the difference1. If I did away with this three-level distinction, is because I believe there are other ways to approach the problems this distinction tries to solve. In a GoboLinux system, the argument for having separate /usr and /usr/local trees in order to separate programs shipped by the distribution and compiled by the user clearly does not hold. Each program is naturally separated, and this was the prime intention of creating GoboLinux in the first place. The historical reason why Unix systems have some of its tree directly at the root partition (/bin, /lib, /sbin) as opposed to having it under /usr, is because this way you can boot in 1For those who always wondered (and those who want to check if I really understand the difference), the three main trees divide, respectively, files that need to be available in the root partition for single-user rescue mode, program files managed by the distribution, and programs added separately by the site admin (this dis- tinction varies on different Unices, but this is mainly how it works on Linux distributions, read on for more). Regular programs go in /bin, and programs intended for the superuser in /sbin. 1 a bare-bones single-user rescue mode using those files only, in order to fix problems in the /usr tree. This is arcane. When I need to rescue my system, I can use a fully-featured live CD that runs a complete Linux distribution with a graphical desktop, that allows me to browse the web and search for the solution to my problem, and use all of the features of a regular system to fix it. I understand the rationale for having a bare-bones rescue mode decades ago, but we have a better solution in our hands now. The distinction between bin and sbin makes no sense, in the present context. Historical evolution led to crazy arbitrary distinctions, like ping and traceroute lying in different directories (I fail to see how can they be of distinct “program classes”, by any measure). Unix systems have a permissions system. If one wants only the superuser to be able to run a command, then chmod 700 it. I suspect the separation could have been conceived to reduce the number of programs in the $PATH of regular users. In today’s Linux systems, having 400 or 500 programs in your $PATH, does not make any difference. There is one last argument, however, that is still valid for Linux systems to day: parti- tioning and remote mounting. Those two are really different shades of the same color, with remote mounting being, to my eyes, the most valid concern of those two. I’ve seen argu- ments about this among the lines of “hard drives today are cheap, and you’ll most likely have all software installed locally anyway, for performance”. I agree with this, but I also understand the ones who’d like to maintain things centralized for administrative purposes. But imposing additional complexity on the overall system because of one particular sce- nario is usually not a good thing, and even then, the traditional Unix solution is not general enough: what if you have three or four application servers? You’ll mount one at /usr, one at /opt, and then what? There goes the traditional Unix tree. In fact, in most of the larger Unix networks I had contact with, particular needs of the site configuration led to non-standard directories added to the Unix tree. Fortunately, like with the live CD, we have nowadays a technological advancement that serves as a real solution to the problem: union mounts, also known as overlay filesystems. The idea is that you can mount several partitions in the same directory. This way, the semantics of /Programs as “the collection of all programs available in the system” is retained, indepen- dently of the physical location of the actual data. File systems are all about abstraction (we don’t refer to files based on their track, sector and cylinder address), this progresses a step further. Overlay filesystems are very flexible: the sysadmin, for example, can overlay site- specific settings for an application on top of the defaults exported over NFS. Unfortunately, it is not in widespread use, for reasons beyond by understanding. The Plan 9 operating system has it as one of its basic filesystem operations: the bind command (in Plan 9, for example, you don’t need a $PATH variable, because all directories containing executables are “bound” in a single directory). There is an implementation of an overlay filesystem for Linux: ovlfs. The alleged user-friendliness of longer names Many, many people, when they stumble upon GoboLinux, look at the long, descriptive di- rectory names and say “Look! They changed the Linux directory names by making them longer and descriptive to make the system friendly!”. There is some people who say this as if this were a good thing, and some people who say this as if this were a bad thing. Both are wrong. There is a number of reasons why the names in GoboLinux are the way they are, and 2 none of them is “to attract new users who are scared by /etc and the like”. The number one reason is: to not conflict with the Unix namespace. And when I say Unix namespace I actually mean the Linux namespace, which is not a very well settled thing. This is not like a set of reserved keywords from a programming language that says not to use if, while, repeat, etc. as variable names and the rest is okay. You never know what directories, files and programs will show up tomorrow, so the best I could do was to pick names that were very unlikely to be ever used. Others did that before me, and that worked, so I followed their example: NeXT and Mac OS X had to make their own directories coexist with Unix directories, so they capitalized the names, and while they were at it, they used full words instead of abbreviations. The abbreviations were a sign of the times from the origins of Unix. Dennis Ritchie once said that if he could go back in time and change only one thing in Unix, he’d rename the creat system call to create. The one thing that reassures me that my decision was right is that, when we started with GoboLinux, back in the days of Linux 2.4.something, someone asked me “why didn’t you pick /sys instead of /System? That would be easier to type”. You can guess what would have happened, now that the kernel guys reserved /sys for their own use. In fact, the concerns on typing-friendliness always comes up in discussions about the GoboLinux tree. To that, I can only respond that, in a properly configured shell like the one that comes by default with GoboLinux, typing /Programs takes the exact same number of keystrokes as typing /usr: slash, lowercase p, Tab. One could also ask: but why change the directories, for starters? Why not simply use the regular directory tree and make it behave like GoboLinux? Yes, I suspect it could be possible, but from an operating system design standpoint, I don’t like the idea. I am not comfortable with the concept of a system where well-known directories have different semantics to those that most people expect. AtheOS, for example, has this problem. You see a /usr directory, but that is no /usr. In AtheOS, it behaves more like /opt, but unexplicably keeping the name that historically stood for “user” and then was turned into a backronym for Unix System Resources. Even if Kurt Skauen called it /opt, it would still be strange; those are not “optional packages”. The GoboLinux directories, too, have different semantics from the Unix directories. /Pro- grams is the collection of all programs available in the system, where each subdirectory contains all files from a given program (the distinction of a program package is up to the developers of each project; the various tools from CoreUtils form a single program). Each subdirectory in /System/Links contains a view (in the database sense of the term) of each file class from the programs collection: libraries, executables, headers, and so on2.
Recommended publications
  • Github: a Case Study of Linux/BSD Perceptions from Microsoft's
    1 FLOSS != GitHub: A Case Study of Linux/BSD Perceptions from Microsoft’s Acquisition of GitHub Raula Gaikovina Kula∗, Hideki Hata∗, Kenichi Matsumoto∗ ∗Nara Institute of Science and Technology, Japan {raula-k, hata, matumoto}@is.naist.jp Abstract—In 2018, the software industry giants Microsoft made has had its share of disagreements with Microsoft [6], [7], a move into the Open Source world by completing the acquisition [8], [9], the only reported negative opinion of free software of mega Open Source platform, GitHub. This acquisition was not community has different attitudes towards GitHub is the idea without controversy, as it is well-known that the free software communities includes not only the ability to use software freely, of ‘forking’ so far, as it it is considered as a danger to FLOSS but also the libre nature in Open Source Software. In this study, development [10]. our aim is to explore these perceptions in FLOSS developers. We In this paper, we report on how external events such as conducted a survey that covered traditional FLOSS source Linux, acquisition of the open source platform by a closed source and BSD communities and received 246 developer responses. organization triggers a FLOSS developers such the Linux/ The results of the survey confirm that the free community did trigger some communities to move away from GitHub and raised BSD Free Software communities. discussions into free and open software on the GitHub platform. The study reminds us that although GitHub is influential and II. TARGET SUBJECTS AND SURVEY DESIGN trendy, it does not representative all FLOSS communities.
    [Show full text]
  • Introduction to Fmxlinux Delphi's Firemonkey For
    Introduction to FmxLinux Delphi’s FireMonkey for Linux Solution Jim McKeeth Embarcadero Technologies [email protected] Chief Developer Advocate & Engineer For quality purposes, all lines except the presenter are muted IT’S OK TO ASK QUESTIONS! Use the Q&A Panel on the Right This webinar is being recorded for future playback. Recordings will be available on Embarcadero’s YouTube channel Your Presenter: Jim McKeeth Embarcadero Technologies [email protected] | @JimMcKeeth Chief Developer Advocate & Engineer Agenda • Overview • Installation • Supported platforms • PAServer • SDK & Packages • Usage • UI Elements • Samples • Database Access FireDAC • Migrating from Windows VCL • midaconverter.com • 3rd Party Support • Broadway Web Why FMX on Linux? • Education - Save money on Windows licenses • Kiosk or Point of Sale - Single purpose computers with locked down user interfaces • Security - Linux offers more security options • IoT & Industrial Automation - Add user interfaces for integrated systems • Federal Government - Many govt systems require Linux support • Choice - Now you can, so might as well! Delphi for Linux History • 1999 Kylix: aka Delphi for Linux, introduced • It was a port of the IDE to Linux • Linux x86 32-bit compiler • Used the Trolltech QT widget library • 2002 Kylix 3 was the last update to Kylix • 2017 Delphi 10.2 “Tokyo” introduced Delphi for x86 64-bit Linux • IDE runs on Windows, cross compiles to Linux via the PAServer • Designed for server side development - no desktop widget GUI library • 2017 Eugene
    [Show full text]
  • Lightweight Virtualization with Gobolinux' Runner
    Lightweight virtualization with GoboLinux’ Runner Lucas C. Villa Real [email protected] About GoboLinux ● Alternative distribution born in 2002 ● Explores novel ideas in the Linux distribution ecosystem ● Introduces a rather diferent directory hierarchy How diferent? lucasvr@fedora ~] ls / bin dev home lib64 media opt root sbin sys usr boot etc lib lost+found mnt proc run srv tmp var lucasvr@fedora ~] ls /usr bin games include lib lib64 libexec local sbin share src tmp lucasvr@fedora ~] ls /usr/local bin etc games include lib lib64 libexec sbin share src lucasvr@gobolinux ~] ls / Data Mount Programs System Users GoboLinux File System Hierarchy /Programs Self-contained programs: no need for a package manager ~] ls /Programs AbsTk DifUtils GnuTLS Kerberos LibXML2 ACL Dit GoboHide Kmod LibXSLT Acpid DosFSTools GParted Lame Linux AGNClient E2FSProgs Gperf LCMS Linux-Firmware ALSA-Lib EFIBootMgr GPM Less Linux-PAM ALSA-Utils ELFUtils Grep LibDRM Lsof APR EncFS Grof LibEvdev Lua APR-Util ExFAT GRUB LibExif LuaRocks … /Programs Multiple versions of a given program can coexist ~] ls /Programs/GTK+ 2.24.22 2.24.30 3.10.6 3.21.4 Current Settings ~] ls /Programs/GTK+/2.24.22 bin doc include lib Resources share ~] ls /Programs/GTK+/2.24.22/bin gtk-builder-convert gtk-demo gtk-query-immodules2.0 gtk-update-icon-cache ~] ls /Programs/GTK+/2.24.30/bin gtk-builder-convert gtk-demo gtk-query-immodules2.0 gtk-update-icon-cache /Programs Easy to tell which fles belongs to which packages lucasvr@fedora ~] ls -l /bin/bash -rwxr-xr-x. 1 root root 1072008
    [Show full text]
  • Debian \ Amber \ Arco-Debian \ Arc-Live \ Aslinux \ Beatrix
    Debian \ Amber \ Arco-Debian \ Arc-Live \ ASLinux \ BeatriX \ BlackRhino \ BlankON \ Bluewall \ BOSS \ Canaima \ Clonezilla Live \ Conducit \ Corel \ Xandros \ DeadCD \ Olive \ DeMuDi \ \ 64Studio (64 Studio) \ DoudouLinux \ DRBL \ Elive \ Epidemic \ Estrella Roja \ Euronode \ GALPon MiniNo \ Gibraltar \ GNUGuitarINUX \ gnuLiNex \ \ Lihuen \ grml \ Guadalinex \ Impi \ Inquisitor \ Linux Mint Debian \ LliureX \ K-DEMar \ kademar \ Knoppix \ \ B2D \ \ Bioknoppix \ \ Damn Small Linux \ \ \ Hikarunix \ \ \ DSL-N \ \ \ Damn Vulnerable Linux \ \ Danix \ \ Feather \ \ INSERT \ \ Joatha \ \ Kaella \ \ Kanotix \ \ \ Auditor Security Linux \ \ \ Backtrack \ \ \ Parsix \ \ Kurumin \ \ \ Dizinha \ \ \ \ NeoDizinha \ \ \ \ Patinho Faminto \ \ \ Kalango \ \ \ Poseidon \ \ MAX \ \ Medialinux \ \ Mediainlinux \ \ ArtistX \ \ Morphix \ \ \ Aquamorph \ \ \ Dreamlinux \ \ \ Hiwix \ \ \ Hiweed \ \ \ \ Deepin \ \ \ ZoneCD \ \ Musix \ \ ParallelKnoppix \ \ Quantian \ \ Shabdix \ \ Symphony OS \ \ Whoppix \ \ WHAX \ LEAF \ Libranet \ Librassoc \ Lindows \ Linspire \ \ Freespire \ Liquid Lemur \ Matriux \ MEPIS \ SimplyMEPIS \ \ antiX \ \ \ Swift \ Metamorphose \ miniwoody \ Bonzai \ MoLinux \ \ Tirwal \ NepaLinux \ Nova \ Omoikane (Arma) \ OpenMediaVault \ OS2005 \ Maemo \ Meego Harmattan \ PelicanHPC \ Progeny \ Progress \ Proxmox \ PureOS \ Red Ribbon \ Resulinux \ Rxart \ SalineOS \ Semplice \ sidux \ aptosid \ \ siduction \ Skolelinux \ Snowlinux \ srvRX live \ Storm \ Tails \ ThinClientOS \ Trisquel \ Tuquito \ Ubuntu \ \ A/V \ \ AV \ \ Airinux \ \ Arabian
    [Show full text]
  • Conflict Resolution Via Containerless Filesystem Virtualization
    Dependency Heaven: Conflict Resolution via Containerless Filesystem Virtualization Anonymous Author(s) Abstract previous installation, effectively preventing concurrent ver- Resolving dependency versioning conflicts in applications sions of that library from coexisting. The same is true for is a long-standing problem in software development and packages whose executable names does not change across deployment. Containers have become a popular way to ad- releases; unless the user renames the existing executable dress this problem, allowing programs to be distributed in a files prior to the installation of a new version it is notpos- portable fashion and to run them under strict security con- sible to keep both installations around. The problem with straints. Due to the popularity of this approach, its use has that approach is that it breaks package managers, as the re- started to extend beyond its original aim, with users often named files will not be featured in the package manager’s creating containers bundling entire Linux distributions to database and, consequently, will not be tracked anymore. run mundane executables, incurring hidden performance Further, unless executables depending on the renamed files and maintenance costs. This paper presents an alternative are modified to reflect their new path, users need todefine approach to the problem of versioning resolution applied to which executable to activate at a given time, usually through locally-installed applications, through a virtualization tool tricky management of symbolic
    [Show full text]
  • Nix(OS) - Revolutionizing Packaging and Configuration Management!
    Nix(OS) - Revolutionizing packaging and configuration management! The Purely Functional Linux Distribution 1 Before we begin (FYI) Ask questions at any time Please ask lots of questions :) The slides contain some redundancy There are a few optional slides at the end Please give me feedback Louder Faster/slower More/less details Etc. 2 About me Michael Weiss aka. primeos Computer science student at the University of Tübingen I love free soware, etc. First nixpkgs commit: 2016-10-05 I maintain ~41 packages and ~3 modules (2018-06-08) I also love privacy (i.e. no more details :P) Email: [email protected] (#privacy) 3 Main components Nix (package manager) Nixpkgs (Nix packages collection) NixOS (operating system) NixOps (DevOps / cloud deployment tool) 4 Nix* ISO/OSI model NixOps NixOS Nixpkgs Nix 5 Other tools Hydra (Nix based continuous build system) Disnix (distributed services deployment) PatchELF (change dynamic linker and RPATH) {cabal,go,node,pip,python,pypi,composer,hex,bower,vim,...}2 6 History Started as a research project (with funding) First paper in 2004 (many will follow) Nix package manager developed by Eelco Dolstra as part of his PhD research (~2003) First NixOS prototype developed by Armijn Hemel as his master's thesis project Hydra developed as part of the LaQuSo Buildfarm project 7 Timeline 2003: init (research begins) 2007: NixOS becomes usable + x86_64 support 2008: Website moved to nixos.org 2009: Nix logo + Nix(OS) build on Hydra 2011: Migration from Subversion to Git(Hub) 2013: Switch from Upstart to systemd +
    [Show full text]
  • Ultimate++ Forum Max P.S
    Subject: About Linux distros and incompatibilty... Posted by guido on Thu, 24 Jul 2008 19:42:35 GMT View Forum Message <> Reply to Message luzr wrote on Thu, 24 July 2008 18:58 Well, maybe developers can do the same thing - target the same 80% user base as us. In fact, Ubunutu seems to be the exact kind of relief here you are calling for. Works for 80% for two month, and then breaks with the next upgrade of some library. The whole concept of ISV doesn't exist in the world of the leading distros. If you are not in the repository you don't exist and they will break your software at a whim. Even if you get your binary nVidia driver from the official repository, the package system will mercilessly upgrade to an incompatible kernel by the next opportunity. You'll find yourself on the console prompt next morning, wondering what the hell is up. The dependency system should protect from that. But in this case apparently it isn't done on purpose. After all, we can't allow that eeevil binary blob holding up progress... Also, I doubt those 80%. Ubuntu might be a fad as well. Who knows. Many a mighty have fallen over the years. Look where Mandrake is now. Have even heard of it? The Ubuntu of yesteryear. Even if, paying customers probably be found rather at Novell and RedHat. Subject: Re: Final release Posted by mdelfede on Thu, 24 Jul 2008 20:46:34 GMT View Forum Message <> Reply to Message Well, I tried 3 times in the past to switch from windows to Linux.
    [Show full text]
  • Free Software
    FEATURE FREE SOFTWARE OF THE BEST THINGS ABOUT FREE SOFTWARE 2014 This year will be the best ever for Linux and Free Software. Why? Mike Saunders has 51 reasons… 38 www.linuxvoice.com FREE SOFTWARE FEATURE or so long, it looked like Linux While the almighty annihilation of little Linux machines in their pockets. was on the cusp of causing a Windows never happened, a much And the Raspberry Pi has been a Frevolution, of pulling the masses more subtle set of changes took storming success, introducing children away from Windows and introducing place. Linux is everywhere now – worldwide to open computing. them to a new world of computing. but not many people know it. GNU/ 2014 has a huge amount in store for Linux distributions were becoming Linux powers many of the biggest Linux users, and not just in terms of easier to use by the month, desktop websites in the world, serving up web software – people, communities and applications were being refined and applications to hundreds of millions of events will also shape the course of the polished, and PC vendors were starting users. Android dominates the mobile year. So read on for 51 awesome things to ship Linux with their machines. scene, with countless people carrying to look forward to… FEDORA 21 FIREFOX Fedora 21 bucks the VERIFIED BUILDS trend of previous Even if you’re running an releases by having a open source browser, longer development you can’t be 100% cycle than usual certain that the binary which will hopefully executable doesn’t 1provide more time for have an NSA backdoor new technologies like inserted, possibly via Wayland to settle down.
    [Show full text]
  • Gobolinux 0.12 Vectorlinux 5.1 Spesifikasi Distro Spesifikasi Distro Pembuat Hisham Muhammad Dan André Detsch Pembuat Robert S
    ULASAN Berita | Ulasan | Adu Software | Utama | Bisnis | Apa Sih Sebenarnya... | Tutorial Ulasan Distro DESKTOP DESKTOP GoboLinux 0.12 VectorLinux 5.1 Spesifikasi Distro Spesifikasi Distro Pembuat Hisham Muhammad dan André Detsch Pembuat Robert S. Lange Situs gobolinux.org Situs vectorlinux.com Lisensi GPL Lisensi GPL Kernel 2.6.11.9 Kernel 2.6.11.7 Desktop KDE 3.4 Desktop IceWM, Xfce4 Office OpenOffice.org 1.1.2 Office AbiWord 2.2.5 Internet Firefox 1.0.4, Thunderbird 1.0.2 Internet Firefox 1.0.4, Gaim 1.3.0 Server - Server Samba 3.0.7 Multimedia MPlayer 1.0pre6, Xmms 1.2.10 Multimedia MPlayer 1.0pre6a, Xmms 1.2.10 Game - Game - Tool Gimp 2.2.4, k3b 0.11.23, Vim 6.2 Tool Gimp 2.2.1 unia Linux sangat mem- dorong para pengguna Linux atu hal yang sudah bukan tidak perlu melakukan mount- Dbebaskan siapa saja untuk agar lebih memilih menginsta- Srahasia lagi di Linux adalah ing secara manual, karena sudah mengembangkan Linux sesuai lasi aplikasi-aplikasi Linux lang- dapat diinstalasi pada mesin- dimount secara otomatis oleh dengan keinginan pengembang- sung dari sumber paket yang mesin lemot alias yang memiliki VectorLinux. nya. Tentu saja hal tersebut de- asli, yaitu tar.gz atau tar.bz2. spesifikasi rendah. Selain itu, yang sangat pen- ngan memperhatikan lisensi. Dengan bantuan situs resmi Nah, VectorLinux 5.1 meru- ting VectorLinux 5.1 ini menyer- Dengan kebebasan tersebut, yang informatif sangat mem- pakan salah satu distro yang takan tool manajemen paket banyak hal baru di Linux. Dan bantu penggunanya, terutama menawarkan kabar gembira bagi dengan pemeriksaan dependensi salah satu contohnya adalah dis- dalam hal menginstalasi aplikasi- para pemilik komputer berspe- dengan menggunakan sistem tro unik yang satu ini.
    [Show full text]
  • SL-RAD Studio 10.4-Самый Быстрый Способ Создания
    // RAD Studio 10.4.2 // Самый быстрый способ создания кросс- // платформенных приложений с адаптивными // пользовательскими интерфейсами, // которые впечатляют на всех платформах: // Windows, macOS, iOS, Android и Linux. Copyright Embarcadero 2021, an company // RAD Studio 10.4.2 // Другие продукты Idera Idera Dev Tools Division: Delphi C++Builder RAD Studio Interbase RAD Server Copyright Embarcadero 2021, an company // RAD Studio 10.4.2 // RAD Studio – это: ● Универсальная IDE для создания ○ мультиплатформенных ■ быстродействующих ■ нативных приложений ● в Delphi и на современном C++ ● с помощью мощных визуальных инструментов проектирования и ● встроенных средств компиляции и сборки Copyright Embarcadero 2021, an company // RAD Studio 10.4.2 Быстрая разработка в визуальном режиме RAD Studio содержит мощные VCL компоненты Windows 10 и обеспечивает разработку FMX приложений для различных устройств на Windows, Mac, Linux, iOS и Android Copyright Embarcadero 2021, an company // RAD Studio 10.4.2 // Что делает RAD Studio особенным продуктом? 1. Продуктивность разработчиков – Работа на результат. Выход на рынок 5x быстрее. 2. Быстрые нативные apps - Нативная компиляция делают приложения самыми быстрыми 3. Доступ к БД – С самого начала, доступ к БД – неотъемлемая часть Delphi и C++Builder. 4. Доступ к системному API – Полный доступ к API платформ и управлению памятью. 5. Мощные библиотеки C++ - сотни C++ библиотек могут быть использованы в RAD Studio 6. Визуальные редакторы – Визуальное проектирование полностью в IDE. 7. Надежность приложений – Системы, созданные на Delphi, работают до сих пор. 8. Обширное сообщество - много Technology Partners, MVP, преподавателей и разработчиков. 9. Readability и Maintainability – Разработчики находят правильный баланс с RAD Studio. 10. Обратная совместимость– инвестиции в код не пропадают. 11. Повторное использование кода - Компонентный подход стимулирует повт.
    [Show full text]
  • Introduzione Alle Distribuzioni Linux Matteo Pani
    Introduzione alle Distribuzioni Linux Matteo Pani 22 ottobre 2016 Distribuzioni Linux "DistribuChe?" Cos’è una distribuzione Linux? Il mare magno delle distro Gestione del Software Panoramica delle più famose distro Ambienti Desktop LXDE Xfce GNOME KDE Unity Matteo Pani LinuxDay - 22 ottobre 2016 pagina 2 di 42 Distribuzioni Linux "DistribuChe?" Cos’è una distribuzione Linux? Definizione Una distribuzione (distro) Linux è un sistema operativo (SO), cioè l’insieme dei programmi di base e altri vari strumenti che permettono al computer di funzionare Matteo Pani LinuxDay - 22 ottobre 2016 pagina 3 di 42 Distribuzioni Linux "DistribuChe?" Cos’è una distribuzione Linux? Il Sistema Operativo È composto da vari componenti, come: I il bootloader I il kernel I i servizi (demoni) I la shell I server grafico I ambiente desktop (DE) Matteo Pani LinuxDay - 22 ottobre 2016 pagina 4 di 42 Distribuzioni Linux "DistribuChe?" Cos’è una distribuzione Linux? Un po’ di storia I 1984 - GNU Project (Richard Stallman) I SO libero: GNU I altri software I albori degli anni ’90 - GNU mancava ancora di un kernel I 1991 - kernel Linux (Linus Torvalds) I Linux era compatibile con GNU: nasce GNU/Linux! I serviva un modo sufficientemente pratico e automatizzato per installarlo e gestirlo: nascono le distribuzioni Matteo Pani LinuxDay - 22 ottobre 2016 pagina 5 di 42 Distribuzioni Linux "DistribuChe?" Cos’è una distribuzione Linux? (Ri)Definizione Una distribuzione (distro) Linux è un sistema operativo (SO) che usa Linux come kernel. Matteo Pani LinuxDay - 22 ottobre 2016
    [Show full text]
  • A Control Point for Reducing Root Abuse of File-System Privileges
    Introduction Solution for the Desktop A Control Point for Reducing Root Abuse of File-System Privileges Glenn Wurster, Paul C. van Oorschot School of Computer Science Carleton University, Canada 6 Oct 2010 Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 1/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Problem Root privileged processes can arbitrarily modify the system Solution Don’t run as root Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 2/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Re-phrasing the requirements On the desktop, we should treat two applications as mutually untrustworthy. 1 During install, upgrade, uninstall, and run-time. 2 The paper concentrates only on the file-system. Allow file-system reads, but don’t allow modifications. Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 3/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Other Approaches to Divide Root e.g., SELinux dpkg given almost total control over the file-system Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 4/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Two States Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 5/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Two States, Many Users Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 6/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Two States, Many Applications Glenn Wurster, Paul C. van Oorschot Reducing Root Abuse 7/ 24 Introduction Solution for the Desktop Separation of Duties Installer Frameworks Our focus Configuration related files: 1 Modified during configuration, not during day-to-day use 2 We focus on system-wide configuration files Files most commonly modified through install, upgrade, and uninstall Glenn Wurster, Paul C.
    [Show full text]