[Solved] URL Filter on Porteus-Kiosk 3.2

[Archybaldos]

HI,
About Porteus-Kiosk-3.2.0-i486
Two questions: how to work URL filter (whitelist/blacklist) with Firefox, and where settings (URLs) are stored?

Thanks!

[fanthom]

hi Archybaldos,

how to work URL filter (whitelist/blacklist) with Firefox
please use wizard for setting these

where settings (URLs) are stored?
cant tell you as you may be a hacker trying to break the kiosk installed in some financial/government institution

btw: please post kiosk related questions in kiosk section of the forum only
btw2: there is revolution coming to the way the kiosks are managed so please stay tuned for kiosk related news

thanks

[Archybaldos]

I'm not hacker. I love to learn linux and love to learn something new.

Our operating system is free for private users, companies and public institutions. It can be installed on an unlimited number of PCs and used for as long as you want. Full GPL compliance means that modifications on the source code level can be performed without any limitations or restrictions. Every kiosk ISO downloaded from this site include a copy of the GPL license which is placed in the /docs folder.

If you are hiding solutions, you can't say that it's GPL

3) IP filter function (iptables based) has been replaced with new blacklist/whitelist option which has several advantages over it's predecessor:
a) it works
b) it does not depend on the firewall, there is not need to remember whitelisting the gateway, etc ...
c) bases on a URL keyword so is very flexible
d) 'access denied' picture which contain Porteus logo can be replaced with your own image showing general rules, which sites are whitelisted, etc ... (ISO must be customized manually for this)

How?

[fanthom]

I'm not hacker.
i think you missed my point, please read below

If you are hiding solutions, you can't say that it's GPL
pretty much every linux has restricted components included. classic examples are radeon/wifi firmware or Adobe Flash. do you claim that all Linuxes (except for 'Linux Libre' and such) are not GPL compliant? i agree that description on kiosk website may be misleading so will update it today to mention restricted components. this is already done in Porteus Kiosk license which you can find in the /docs folder after extracting the ISO.

wizard frontend is GPLed and you can download it from here:
porteus-kiosk.org/public

wizard backend (utility which encrypts/decrypts the config) is not GPLed. reason is one: security. kiosk is meant to be put into a public places and nobody should be able to take a copy of installed ISO and decrypt the config otherwise he will get an access to sensitive data like for example wifi/ssh password. you may imagine what would happen then ...

How?
please extract 003-settings.xzm and replace /usr/share/pixmaps/blocked-content-48.png with your own picture.
(name of this file may be bit different but you should find it easily)

thanks

[Archybaldos]

Thanks, I'm understand.
I have already found a picture, but it suits me. I understand the danger of leaving passwords in the clear, of course it should be encrypted. I asked about the white-blacklist. It is necessary to encrypt ? I would like to be able to edit the list of allowed URLs, rebuild module and edit image on flash manually directly

Thanks very match

[Archybaldos]

Sorry, I'm find it. Very graceful solution for Firefox, simply and effectively
Thank you

[fanthom]

Please post this solution for everyone (I have no access to any kiosk at the moment so cant do it myself).
Also - its not perfect as some sites are not covered like for example www.uta.fi.

If you manage to improve the rules then please share.

[Archybaldos]

Hmm ...
Ok It's my userContent.css

Code: Select all

@-moz-document regexp("^about:.*|^chrome:.*|^file:.*") {
html, page, window { display: none !important; }
}

body, body >* { display: none !important; }

html { background: url(file:///usr/share/pixmaps/lxterminal.png) no-repeat center top }

@-moz-document regexp( ".*google.com.*|.*youtube.com.*|.*uta.fi.*" )

{ body, body >* { display: inherit !important; }
body > script { display: none !important; }
html { background: inherit !important; }
}

body {
    -webkit-touch-callout: none;
    -webkit-user-select: none;
    -khtml-user-select: none;
    -moz-user-select: none;
    -ms-user-select: none;
    user-select: none;
}

input[type=file] { display: none !important; }

About www.uta.fi
May be a server redirect in handling, for example uta.fi -> uta.com? So does google: google.com -> google.it.
Then you need to specify the rules uta.com
I thing so

[fanthom]

this is actually good idea
exceptions will have to be handled by the kiosk network admin.