diff options
Diffstat (limited to 'mcc/7/en/content/mcc-security.html')
| -rw-r--r-- | mcc/7/en/content/mcc-security.html | 262 |
1 files changed, 262 insertions, 0 deletions
diff --git a/mcc/7/en/content/mcc-security.html b/mcc/7/en/content/mcc-security.html new file mode 100644 index 00000000..fbedbee9 --- /dev/null +++ b/mcc/7/en/content/mcc-security.html @@ -0,0 +1,262 @@ +<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<!DOCTYPE html + PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> +<html xmlns="http://www.w3.org/1999/xhtml"><head> + <meta http-equiv="X-UA-Compatible" content="IE=7"/> + <title>Security</title><meta name="generator" content="DocBook XSL-NS Stylesheets V1.75.2"/><link rel="home" href="index.html" title="Mageia Control Center"/><link rel="up" href="index.html" title="Mageia Control Center"/><link rel="prev" href="mcc-localdisks.html" title="Local disks"/><link rel="next" href="mcc-boot.html" title="Boot"/><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><script type="text/javascript"> + //The id for tree cookie + var treeCookieId = "treeview-6284"; + var language = "en"; + var w = new Object(); + //Localization + txt_filesfound = 'Results'; + txt_enter_at_least_1_char = "You must enter at least one character."; + txt_browser_not_supported = "JavaScript is disabled on your browser. Please enable JavaScript to enjoy all the features of this site."; + txt_please_wait = "Please wait. Search in progress..."; + txt_results_for = "Results for: "; + txt_no_results_for = ""; + </script><style type="text/css"> + input { + margin-bottom: 5px; + margin-top: 2px; + } + + .folder { + display: block; + height: 22px; + padding-left: 20px; + background: transparent url(../../common/jquery/treeview/images/folder.gif) 0 0px no-repeat; + } + + </style><link rel="shortcut icon" href="ec869411-2640-45d6-acea-b9c5647b2396.png" type="image/x-icon"/><link rel="stylesheet" type="text/css" href="../../common/css/positioning.css"/><link rel="stylesheet" type="text/css" href="../../common/jquery/theme-redmond/jquery-ui-1.8.2.custom.css"/><link rel="stylesheet" type="text/css" href="../../common/jquery/treeview/jquery.treeview.css"/><link rel="stylesheet" type="text/css" href="webhelp-default.css"/><link rel="stylesheet" type="text/css" href="webhelp-custom.css"/><script type="text/javascript" src="../../common/jquery/jquery-1.4.2.min.js"><!----></script><script type="text/javascript" src="../../common/jquery/jquery-ui-1.8.2.custom.min.js"><!----></script><script type="text/javascript" src="../../common/jquery/jquery.cookie.js"><!----></script><script type="text/javascript" src="../../common/jquery/treeview/jquery.treeview.min.js"><!----></script><script type="text/javascript" src="search/htmlFileList.js"><!----></script><script type="text/javascript" src="search/htmlFileInfoList.js"><!----></script><script type="text/javascript" src="nwSearchFnt.js"><!----></script><script type="text/javascript" src="search/stemmers/en_stemmer.js"><!--//make this scalable to other languages as well.--></script><script type="text/javascript" src="search/index-1.js"><!----></script><script type="text/javascript" src="search/index-2.js"><!----></script><script type="text/javascript" src="search/index-3.js"><!----></script></head><body><div xmlns="" id="header"><div id="navheader"><!----><table><tr><td style="height: 28px; width: 16px;"><a id="showHideButton" onclick="showHideToc();" class="pointLeft" title="Hide TOC tree">. + </a></td><td><img src="../../common/images/highlight-blue.gif" alt="H" height="25px" onclick="toggleHighlight()" id="showHideHighlight" style="cursor:pointer" title="Toggle search result highlighting"/></td><td><a accesskey="p" href="mcc-localdisks.html">Prev</a> + | + <a accesskey="n" href="mcc-boot.html">Next</a></td></tr></table></div><div id="headerlogo"><img src="e0985ee2-d40f-4151-9175-fa5f64bec082.png" alt="Company Logo"/></div><h1 id="pagetitle">Security<br/> </h1></div><div id="content"><!----><div xml:lang="" class="section" title="Security"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="mcc-security"><!----></a>Security</h2></div></div></div><div class="mediaobject" align="center"><img src="images/mcc-security.png" align="middle"/></div><p>In this screen you can choose between several security tools. Click on a link below to learn more.</p><div class="orderedlist" title="Security"><p class="title"><b>Security</b></p><ol class="orderedlist" type="1"><li class="listitem"><p><a class="xref" href="mcc-security.html#msecgui" title="MSEC: System Security and Audit">the section called “MSEC: System Security and Audit”</a><span class="emphasis"><em> = Configure system + security, permissions and audit</em></span></p></li><li class="listitem"><p><a class="xref" href="mcc-security.html#drakfirewall" title="Set up your personal firewall">the section called “Set up your personal firewall”</a></p></li><li class="listitem"><p><a class="xref" href="mcc-security.html#draksec" title="Configure authentication for Mageia tools">the section called “Configure authentication for Mageia + tools”</a></p></li><li class="listitem"><p><a class="xref" href="mcc-security.html#drakinvictus" title="Advanced setup for network interfaces and firewall">the section called “Advanced setup for network interfaces and firewall”</a></p></li><li class="listitem"><p><a class="xref" href="mcc-security.html#drakguard" title="Parental Controls">the section called “Parental Controls”</a></p></li></ol></div><div class="section" title="MSEC: System Security and Audit"><div class="titlepage"><div><div><h3 class="title"><a id="msecgui"><!----></a>MSEC: System Security and Audit</h3></div><div><h2 class="subtitle">msecgui</h2></div></div></div><div class="mediaobject" align="center"><img src="images/msecgui.png" align="middle"/></div><div class="section" title="Presentation"><div class="titlepage"><div><div><h4 class="title"><a id="d4e3144"><!----></a>Presentation</h4></div></div></div><p>msecgui<sup>[<a id="d4e3147" href="#ftn.d4e3147" class="footnote">43</a>]</sup> is a graphic user interface for msec that allows to configure + your system security according to two approaches:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>It sets the system behaviour, msec imposes modifications to the + system to make it more secure.</p></li><li class="listitem"><p>It carries on periodic checks automatically on the system in + order to warn you if something seems dangerous.</p></li></ul></div><p>msec uses the concept of "security levels" which are intended to + configure a set of system permissions, which can be audited for changes or + enforcement. Several of them are proposed by Mageia, but you can define + your own customised security levels.</p></div><div class="section" title="Overview tab"><div class="titlepage"><div><div><h4 class="title"><a id="d4e3156"><!----></a>Overview tab</h4></div></div></div><p>See the screenshot above</p><p>The first tab takes up the list of the different security tools with + a button on the right side to configure them:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Firewall, also found in the MCC / Security / Set up your + personal firewall</p></li><li class="listitem"><p>Updates, also found in MCC / Software Management / Update your + system</p></li><li class="listitem"><p>msec itself with some information:</p><div class="itemizedlist"><ul class="itemizedlist" type="circle"><li class="listitem"><p>enabled or not</p></li><li class="listitem"><p>the configured Base security level</p></li><li class="listitem"><p>the date of the last Periodic checks and a button to see a + detailed report and another button to execute the checks just + now.</p></li></ul></div></li></ul></div></div><div class="section" title="Security settings tab"><div class="titlepage"><div><div><h4 class="title"><a id="d4e3174"><!----></a>Security settings tab</h4></div></div></div><p>A click on the second tab or on the Security + <span class="guibutton">Configure</span> button leads to the same screen shown + below.</p><div class="mediaobject"><img src="images/msecgui2.png"/></div><div class="section" title="Basic security tab"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3181"><!----></a>Basic security tab</h5></div></div></div><p class="underline"> + <span class="underline">Security levels:</span> + </p><p>After having checked the box <span class="guilabel">Enable MSEC + tool</span>, this tab allows you by a double click to choose the + security level that appears then in bold. If the box is not checked, the + level « none » is applied. The following levels are available:</p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Level <span class="bold"><strong>none</strong></span>. This level is + intended if you do not want to use msec to control system security, + and prefer tuning it on your own. It disables all security checks + and puts no restrictions or constraints on system configuration and + settings. Please use this level only if you are knowing what you are + doing, as it would leave your system vulnerable to attack.</p></li><li class="listitem"><p>Level <span class="bold"><strong>standard</strong></span>. This is the + default configuration when installed and is intended for casual users. + It constrains several system settings and executes daily security + checks which detect changes in system files, system accounts, and + vulnerable directory permissions. (This level is similar to levels 2 + and 3 from past msec versions).</p></li><li class="listitem"><p>Level <span class="bold"><strong>secure</strong></span>. This level is + intended when you want to ensure your system is secure, yet usable. + It further restricts system permissions and executes more periodic + checks. Moreover, access to the system is more restricted. (This + level is similar to levels 4 (High) and 5 (Paranoid) from old msec + versions).</p></li><li class="listitem"><p>Besides those levels, different task-oriented security are + also provided, such as the <span class="bold"><strong>fileserver + </strong></span>, <span class="bold"><strong>webserver</strong></span> and + <span class="bold"><strong>netbook</strong></span> levels. Such levels + attempt to pre-configure system security according to the most common + use cases.</p></li><li class="listitem"><p>The last two levels called <span class="bold"><strong>audit_daily + </strong></span> and <span class="bold"><strong>audit_weekly</strong></span> are + not really security levels but rather tools for periodic checks + only.</p></li></ol></div><p>These levels are saved in + <code class="filename">/etc/security/msec/level.<levelname></code>. You can + define your own customised security levels, saving them into specific + files called <code class="filename">level.<levelname></code>, placed into + the folder <code class="filename">/etc/security/msec/.</code> This function is + intended for power users which require a customised or more secure + system configuration.</p><div class="caution" title="Caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>Keep in mind that user-modified parameters take precedence over + default level settings.</p></div><p> + <span class="underline">Security alerts:</span> + </p><p>If you check the box <span class="guibutton">Send security alerts by email + to:</span>, the security alerts generated by msec are going to be + sent by local e-mail to the security administrator named in the nearby + field. You can fill either a local user or a complete e-mail address + (the local e-mail and the e-mail manager must be set accordingly). At + last, you can receive the security alerts directly on your desktop. + Check the relevant box to enable it.</p><div class="important" title="Important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>It is strongly advisable to enable the security alerts option + in order to immediately inform the security administrator of possible + security problems. If not, the administrator will have to regularly + check the logs files available in + <code class="filename">/var/log/security.</code></p></div><p><span class="underline">Security options:</span></p><p>Creating a customised level is not the only way to customise the + computer security, it is also possible to use the tabs presented here + after to change any option you want. Current configuration for msec is + stored in <code class="filename">/etc/security/msec/security.conf</code>. This + file contains the current security level name and the list of all the + modifications done to the options.</p></div><div class="section" title="System security tab"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3223"><!----></a>System security tab</h5></div></div></div><p>This tab displays all the security options on the left side + column, a description in the centre column, and their current values on + the right side column.</p><div class="mediaobject"><img src="images/msecgui3.png"/></div><p>To modify an option, double click on it and a new window appears + (see screenshot below). It displays the option name, a short + description, the actual and default values, and a drop down list where + the new value can be selected. Click on the <span class="guibutton">OK</span> + button to validate the choice.</p><div class="mediaobject"><img src="images/msecgui11.png"/></div><div class="caution" title="Caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>Do not forget when leaving msecgui to save definitively your + configuration using the menu <span class="guimenu">File -> Save the + configuration</span>. If you have changed the settings, msecgui + allows you to preview the changes before saving them.</p></div><div class="mediaobject"><img src="images/msecgui10.png"/></div></div><div class="section" title="Network security"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3240"><!----></a>Network security</h5></div></div></div><p>This tab displays all the network options and works like the + previous tab</p><div class="mediaobject"><img src="images/msecgui4.png"/></div></div><div class="section" title="Periodic checks tab"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3246"><!----></a>Periodic checks tab</h5></div></div></div><p>Periodic checks aim to inform the security administrator by means + of security alerts of all situations msec thinks potentially + dangerous.</p><p>This tab displays all the periodic checks done by msec and their + frequency if the box <span class="guibutton">Enable periodic security + checks</span> is checked. Changes are done like in the previous + tabs.</p><div class="mediaobject"><img src="images/msecgui5.png"/></div></div><div class="section" title="Exceptions tab"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3254"><!----></a>Exceptions tab</h5></div></div></div><p>Sometimes alert messages are due to well known and wanted + situations. In these cases they are useless and wasted time for the + administrator. This tab allows you to create as many exceptions as you + want to avoid unwanted alert messages. It is obviously empty at the + first msec start. The screenshot below shows four exceptions.</p><div class="mediaobject"><img src="images/msecgui6.png"/></div><p>To create an exception, click on the <span class="guibutton">Add a + rule</span> button</p><div class="mediaobject"><img src="images/msecgui7.png"/></div><p>Select the wanted periodic check in the drop down list called + <span class="guilabel">Check</span> and then, enter the + <span class="guilabel">Exception</span> in the text area. Adding an exception is + obviously not definitive, you can either delete it using the + <span class="guibutton">Delete</span> button of the + <span class="guilabel">Exceptions</span> tab or modify it with a double + clicK.</p></div><div class="section" title="Permissions"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3270"><!----></a>Permissions</h5></div></div></div><p>This tab is intended for file and directory permissions checking and + enforcement.</p><p>Like for the security, msec owns different permissions levels + (standard, secure, ..), they are enabled accordingly with the chosen + security level. You can create your own customised permissions levels, + saving them into specific files called <code class="filename">perm.<levelname> + </code> placed into the folder <code class="filename">/etc/security/msec/</code> + . This function is intended for power users which require a customised + configuration. It is also possible to use the tab presented here after to + change any permission you want. Current configuration is stored in + <code class="filename">/etc/security/msec/perms.conf.</code> This file contains the + list of all the modifications done to the permissions.</p><div class="mediaobject"><img src="images/msecgui8.png"/></div><p>Default permissions are visible as a list of rules + (a rule per line). You can see on the left side, the file or folder + concerned by the rule, then the owner, then the group and then the + permissions given by the rule. If, for a given rule:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>the box <span class="guilabel">Enforce</span> is not checked, msec only + checks if the defined permissions for this rule are respected and + sends an alert message if not, but does not change anything.</p></li><li class="listitem"><p>the box <span class="guilabel">Enforce</span> is checked, then msec + will rule the permissions respect at the first periodic check and + overwrite the permissions.</p></li></ul></div><div class="important" title="Important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>For this to work, the option CHECK_PERMS in + the <span class="bold"><strong>Periodic check tab</strong></span> must be configured + accordingly.</p></div><p>To create a new rule, click on the + <span class="guibutton"> Add a rule</span> button and fill the fields as shown in + the example below. The joker * is allowed in the <span class="guilabel">File</span> + field. “current” means no modification.</p><div class="mediaobject"><img src="images/msecgui9.png"/></div><p>Click on the <span class="guibutton">OK</span> button to + validate the choice and do not forget when leaving to save definitively + your configuration using the menu <span class="guimenu">File -> Save the + configuration</span>. If you have changed the settings, msecgui allows + you to preview the changes before saving them. </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>It is also possible to create or modify the rules by editing + the configuration file <code class="filename">/etc/security/msec/perms.conf</code>. + </p></div><div class="caution" title="Caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>Changes in the <span class="bold"><strong>Permission + tab</strong></span> (or directly in the configuration file) are taken into + account at the first periodic check (see the option CHECK_PERMS in the + <span class="bold"><strong>Periodic checks tab</strong></span>). If you want them to + be taken immediately into account, use the msecperms command in a console + with root rights. You can use before, the msecperms -p command to know the + permissions that will be changed by msecperms.</p></div><div class="caution" title="Caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>Do not forget that if you modify the permissions in a + console or in a file manager, for a file where the box <span class="guilabel">Enforce + </span> is checked in the <span class="bold"><strong>Permissions tab + </strong></span>, msecgui will write the old permissions back after a while, + accordingly to the configuration of the options CHECK_PERMS and + CHECK_PERMS_ENFORCE in the <span class="bold"><strong>Periodic Checks tab + </strong></span>.</p></div></div></div></div><div class="section" title="Set up your personal firewall"><div class="titlepage"><div><div><h3 class="title"><a id="drakfirewall"><!----></a>Set up your personal firewall</h3></div><div><h2 class="subtitle">drakfirewall</h2></div></div></div><div class="mediaobject" align="center"><img src="images/drakfirewall.png" align="middle"/></div><p>This tool<sup>[<a id="d4e3320" href="#ftn.d4e3320" class="footnote">44</a>]</sup> is found under the Security tab in the Mageia Control Center + labelled "Set up your personal firewall". It is the same tool in the first + tab of "Configure system security, permissions and audit".</p><p>A basic firewall is installed by default with Mageia. All the incoming + connections from the outside are blocked if they aren't authorised. In the + first screen above, you can select the services for which outside connection + attempts are accepted. For your security, uncheck the first box - + <span class="guilabel">Everything (no firewall)</span> - unless you want to disable + the firewall, and only check the needed services.</p><p>It is possible to manually enter the port numbers to open. Click on + <span class="guibutton">Advanced</span> and a new window is opened. In the field + <span class="guilabel">Other ports</span>, enter the needed ports following these + examples :</p><p>80/tcp : open the port 80 tcp protocol</p><p>24000:24010/udp : open all the ports from 24000 to 24010 udp + protocol</p><p>The listed ports should be separated by a space.</p><p>If the box <span class="guilabel">Log firewall messages in system logs</span> + is checked, the firewall messages will be saved in system logs</p><div class="mediaobject"><img src="images/drakfirewall2.png"/></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>If you don't host specific services (web or mail server, file + sharing, ...) it is completely possible to have nothing checked at all, it + is even recommended, it won't prevent you from connecting to the + internet.</p></div><p>The next screen deals with the Interactive Firewall options. These + feature allow you to be warned of connection attempts if at least the first + box <span class="guilabel">Use Interactive Firewall </span>is checked. Check the + second box to be warned if the ports are scanned (in order to find a failure + somewhere and enter your machine). Each box from the third one onwards + corresponds to a port you opened in the two first screens; in the screenshot + below, there are two such boxes: SSH server and 80:150/tcp. Check them to be + warned each time a connection is attempted on those ports.</p><p>These warning are given by alert popups through the network + applet.</p><div class="mediaobject"><img src="images/drakfirewall3.png"/></div><div class="mediaobject"><img src="images/drakfirewall4.png"/></div><p>In the last screen, choose which network interfaces are connected to + the Internet and must be protected. Once the OK button is clicked, the + necessary packages are downloaded.</p><div class="tip" title="Tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>If you don't know what to choose, have a look in MCC tab Network + & Internet, icon Set up a new network interface.</p></div></div><div class="section" title="Configure authentication for Mageia tools"><div class="titlepage"><div><div><h3 class="title"><a id="draksec"><!----></a>Configure authentication for Mageia + tools</h3></div><div><h2 class="subtitle">draksec</h2></div></div></div><div class="mediaobject" align="center"><img src="images/draksec0.png" align="middle"/></div><p>This tool<sup>[<a id="d4e3358" href="#ftn.d4e3358" class="footnote">45</a>]</sup>is present in the Mageia Control Center under the tab <span class="bold"><strong>Security</strong></span></p><p>It allows to give the regular users the needed rights to accomplish + tasks usually done by the administrator.</p><p>Click on the little arrow before the item you want to drop down: + </p><div class="mediaobject"><img src="images/draksec.png"/></div><p>Most of the tools available in the Mageia Control Center are displayed + in the left side of the window (see the screenshot above) and for each tool, + a drop down list on the right side gives the choice between:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Default: The launch mode depends on the chosen security level. See in the + same MCC tab, the tool "Configure system security, permissions and + audit".</p></li><li class="listitem"><p>User password: The user password is asked before the tool + launching.</p></li><li class="listitem"><p>Administrator password: The root password is asked before the tool + launching</p></li><li class="listitem"><p>No password: The tool is launched without asking any + password.</p></li></ul></div></div><div class="section" title="Advanced setup for network interfaces and firewall"><div class="titlepage"><div><div><h3 class="title"><a id="drakinvictus"><!----></a>Advanced setup for network interfaces and firewall</h3></div><div><h2 class="subtitle">drakinvictus</h2></div></div></div><div class="mediaobject" align="center"><img src="images/drakinvictus.png" align="middle"/></div><p>This page hasn't been written yet for lack of resources. If you think + you can write this help, please contact <a class="link" href="https://wiki.mageia.org/en/Documentation_team" target="_top"> the Doc team.</a> Thanking you in advance.</p><p>You can start this tool from the + command line, by typing <span class="bold"><strong>drakinvictus</strong></span> as + root.</p></div><div class="section" title="Parental Controls"><div class="titlepage"><div><div><h3 class="title"><a id="drakguard"><!----></a>Parental Controls</h3></div><div><h2 class="subtitle">drakguard</h2></div></div></div><div class="mediaobject" align="center"><img src="images/drakguard.png" align="middle"/></div><p>This tool<sup>[<a id="d4e3396" href="#ftn.d4e3396" class="footnote">46</a>]</sup> is found in the Mageia Control Center, under the Security tab, + labelled <span class="guilabel">Parental Control</span>. If you don't see this label, + you have to install the drakguard package (not installed by default).</p><div class="section" title="Presentation"><div class="titlepage"><div><div><h4 class="title"><a id="d4e3400"><!----></a>Presentation</h4></div></div></div><p>Drakguard is an easy way to set up parental controls on your + computer to restrict who can do what, and at which times of day. Drakguard + has three useful capabilities:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>It restricts web access to named users to set times of day. It + does this by controlling the shorewall firewall built into + Mageia.</p></li><li class="listitem"><p>It blocks execution of particular commands by named users so + these users can only execute what you accept them to execute.</p></li><li class="listitem"><p>It restricts access to websites, both manually defined through + blacklists/whitelists, but also dynamically based on the content of + the website. To achieve this Drakguard uses the leading opensource + parental control blocker DansGuardian.</p></li></ul></div></div><div class="section" title="Configuring Parental controls"><div class="titlepage"><div><div><h4 class="title"><a id="d4e3410"><!----></a>Configuring Parental controls</h4></div></div></div><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If your computer contains hard drive partitions that are + formatted in Ext2, Ext3, or ReiserFS format you will see a pop up + offering to configure ACL on your partitions. ACL stands for Access + Control Lists, and is a Linux kernel feature that allows access to + individual files to be restricted to named users. ACL is built into + Ext4 and Btrfs file systems, but must be enabled by an option in Ext2, + Ext3, or Reiserfs partitions. If you select 'Yes' to this prompt + drakguard will configure all your partitions to support ACL, and will + then suggest you reboot.</p></div><p><span class="guibutton">Enable parental control</span>: If checked, + the parental control is enabled and the access to <span class="guilabel">Block + programs</span> tab is opened.</p><p><span class="guibutton">Block all network traffic</span>: If checked, all + the websites are blocked, except the ones in the whitelist tab. Otherwise, + all the websites are allowed, except the ones in the blacklist tab.</p><p><span class="guibutton">User access</span>: Users on the left hand side will + have their access restricted according to the rules you define. Users on + the right hand side have unrestricted access so adult users of the + computer are not inconvenienced. Select a user in the left hand side and + click on <span class="guibutton">Add</span> to add him/her as an allowed user. + Select an user in the right hand side and click on <span class="guibutton">Remove</span> + to remove him/her from the allowed users.</p><p><span class="guibutton">Time control:</span> If checked, internet access is + allowed with restrictions between the <span class="guilabel">Start</span> time and + <span class="guilabel">End</span> time. It is totally blocked outside these time + window.</p><div class="section" title="Blacklist/Whitelist tab"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3427"><!----></a>Blacklist/Whitelist tab</h5></div></div></div><p>Enter the website URL in the first field at the top and click on + the <span class="guibutton">Add</span> button.</p></div><div class="section" title="Block Programs Tab"><div class="titlepage"><div><div><h5 class="title"><a id="d4e3431"><!----></a>Block Programs Tab</h5></div></div></div><p><span class="guibutton">Block Defined Applications</span>: Enables the use + of ACL to restrict access to specific applications. Insert the path to + the applications you wish to block.</p><p><span class="guibutton">Unblock Users list</span>: Users listed on the + right hand side will not be subject to acl blocking.</p></div></div></div><div class="footnotes"><br/><hr width="100" align="left"/><div class="footnote"><p><sup>[<a id="ftn.d4e3147" href="#d4e3147" class="para">43</a>] </sup>You can start this tool from the command + line, by typing <span class="bold"><strong>msecgui</strong></span> as root.</p></div><div class="footnote"><p><sup>[<a id="ftn.d4e3320" href="#d4e3320" class="para">44</a>] </sup>You can start this tool from the command line, by typing <span class="bold"><strong>drakfirewall</strong></span> as root.</p></div><div class="footnote"><p><sup>[<a id="ftn.d4e3358" href="#d4e3358" class="para">45</a>] </sup>You can start this tool from the command line, by typing <span class="bold"><strong>draksec</strong></span> as root.</p></div><div class="footnote"><p><sup>[<a id="ftn.d4e3396" href="#d4e3396" class="para">46</a>] </sup>You can start this tool from the command line, by typing <span class="bold"><strong>drakguard</strong></span> as root.</p></div></div></div><script xmlns="" xmlns:l="http://docbook.sourceforge.net/xmlns/l10n/1.0" src="main.js" type="text/javascript"><!----></script><hr xmlns="" xmlns:l="http://docbook.sourceforge.net/xmlns/l10n/1.0"/><div xmlns="" xmlns:l="http://docbook.sourceforge.net/xmlns/l10n/1.0" class="copyright">© Mageia</div><div xmlns="" xmlns:l="http://docbook.sourceforge.net/xmlns/l10n/1.0" class="license"><a href="index.html#CC_BY-SA">CC BY-SA 3.0</a></div><div id="upload_date">Uploaded on 02/07/2019</div><div class="navfooter"><hr/><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="mcc-localdisks.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="mcc-boot.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"> </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> </td></tr></table></div></div><div><div id="leftnavigation"><div id="tabs"><ul><li><a href="#treeDiv"><em>Contents</em></a></li><li><a href="#searchDiv"><em>Search</em></a></li></ul><div id="treeDiv"><img src="../../common/images/loading.gif" alt="loading table of contents..." id="tocLoading" style="display:block;"/><div id="ulTreeDiv" style="display:none"><ul id="tree" class="filetree"><li><span class="file section"><a href="mcc-intro.html">About the Manual for the Mageia Control Center</a></span></li><li><span class="file section"><a href="software-management.html">Software Management</a></span><ul><li><span class="file section"><a href="software-management.html#rpmdrake">Software Management (Install and Remove + Software)</a></span><ul><li><span class="file section"><a href="software-management.html#rpmdrake-introduction">Introduction to rpmdrake</a></span></li><li><span class="file section"><a href="software-management.html#d4e65">The main parts of the screen</a></span></li><li><span class="file section"><a href="software-management.html#d4e103">The status column</a></span></li><li><span class="file section"><a href="software-management.html#d4e156">The dependencies</a></span></li></ul></li><li><span class="file section"><a href="software-management.html#MageiaUpdate">Software Packages Update</a></span></li><li><span class="file section"><a href="software-management.html#mgaapplet-config">Configure updates frequency</a></span></li><li><span class="file section"><a href="software-management.html#drakrpm-edit-media">Configure Media</a></span><ul><li><span class="file section"><a href="software-management.html#d4e227">The columns</a></span></li><li><span class="file section"><a href="software-management.html#d4e259">The buttons on the + right</a></span></li><li><span class="file section"><a href="software-management.html#d4e273">The menu</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-sharing.html">Sharing</a></span><ul><li><span class="file section"><a href="mcc-sharing.html#drakwizard_proftpd">Configure FTP</a></span><ul><li><span class="file section"><a href="mcc-sharing.html#d4e347">What is FTP?</a></span></li><li><span class="file section"><a href="mcc-sharing.html#d4e353">Setting up an FTP server with drakwizard proftpd</a></span></li></ul></li><li><span class="file section"><a href="mcc-sharing.html#drakwizard_apache2">Configure webserver</a></span><ul><li><span class="file section"><a href="mcc-sharing.html#d4e408">What is a web server?</a></span></li><li><span class="file section"><a href="mcc-sharing.html#d4e411">Setting up a web server with drakwizard apache2</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-networkservices.html">Network Services</a></span><ul><li><span class="file section"><a href="mcc-networkservices.html#drakwizard_dhcp">Configure DHCP</a></span><ul><li><span class="file section"><a href="mcc-networkservices.html#d4e502">What is DHCP?</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#d4e506">Setting up a DHCP server with drakwizard dhcp</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#d4e550">What is done</a></span></li></ul></li><li><span class="file section"><a href="mcc-networkservices.html#drakwizard_bind">Configure DNS</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#drakwizard_squid">Configure proxy</a></span><ul><li><span class="file section"><a href="mcc-networkservices.html#d4e624">What is a proxy server?</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#d4e627">Setting up a proxy server with drakwizard squid</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#d4e700">What is done</a></span></li></ul></li><li><span class="file section"><a href="mcc-networkservices.html#drakwizard_ntp">Configure time</a></span><ul><li><span class="file section"><a href="mcc-networkservices.html#d4e749">Setup a NTP server with drakwizard ntp</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#d4e775">What is done</a></span></li></ul></li><li><span class="file section"><a href="mcc-networkservices.html#drakwizard_sshd">OpenSSH daemon configuration</a></span><ul><li><span class="file section"><a href="mcc-networkservices.html#d4e814">What is SSH?</a></span></li><li><span class="file section"><a href="mcc-networkservices.html#d4e819">Setting up an SSH daemon with drakwizard sshd</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-hardware.html">Hardware</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#harddrake2">Hardware configuration</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#d4e955">The window</a></span></li><li><span class="file section"><a href="mcc-hardware.html#d4e970">The menu</a></span></li></ul></li><li><span class="file section"><a href="mcc-hardware.html#draksound">Sound Configuration</a></span></li><li><span class="file section"><a href="mcc-hardware.html#drak3d">3D Desktop Effects</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#d4e1017">Introduction</a></span></li><li><span class="file section"><a href="mcc-hardware.html#d4e1023">Getting Started</a></span></li><li><span class="file section"><a href="mcc-hardware.html#d4e1037">Troubleshooting</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#d4e1039">Can't See Desktop after Logging in</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-hardware.html#XFdrake">Set up the graphical server</a></span></li><li><span class="file section"><a href="mcc-hardware.html#keyboarddrake">Set up the Keyboard Layout</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#d4e1128">Introduction</a></span></li><li><span class="file section"><a href="mcc-hardware.html#d4e1134">Keyboard Layout</a></span></li><li><span class="file section"><a href="mcc-hardware.html#d4e1137">Keyboard Type</a></span></li></ul></li><li><span class="file section"><a href="mcc-hardware.html#mousedrake">Set up the pointer device (mouse, + touchpad)</a></span></li><li><span class="file section"><a href="mcc-hardware.html#system-config-printer">Install and configure a + printer</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#introduction">Introduction</a></span></li><li><span class="file section"><a href="mcc-hardware.html#automatic">Automatically detected printer</a></span></li><li><span class="file section"><a href="mcc-hardware.html#non_automatic">No automatically detected printer</a></span></li><li><span class="file section"><a href="mcc-hardware.html#terminate">Complete the installation process</a></span></li><li><span class="file section"><a href="mcc-hardware.html#network_printer">Network printer</a></span></li><li><span class="file section"><a href="mcc-hardware.html#network_printing_protocols">Network printing protocols</a></span></li><li><span class="file section"><a href="mcc-hardware.html#properties">Device Properties</a></span></li><li><span class="file section"><a href="mcc-hardware.html#d4e1273">Troubleshoot</a></span></li><li><span class="file section"><a href="mcc-hardware.html#specificities">Specifics</a></span></li></ul></li><li><span class="file section"><a href="mcc-hardware.html#scannerdrake">Set up scanner</a></span><ul><li><span class="file section"><a href="mcc-hardware.html#scannerinstallation">Installation</a></span></li><li><span class="file section"><a href="mcc-hardware.html#scannersharing">Scannersharing</a></span></li><li><span class="file section"><a href="mcc-hardware.html#scannerspecifics">Specifics</a></span></li><li><span class="file section"><a href="mcc-hardware.html#scannerextrasteps">Extra installation steps</a></span></li></ul></li><li><span class="file section"><a href="mcc-hardware.html#drakups">Set up a UPS for power monitoring</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html">Network and Internet</a></span><ul><li><span class="file section"><a href="mcc-network.html#draknetcenter">Network Center</a></span><ul><li><span class="file section"><a href="mcc-network.html#d4e1501">Introduction</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1530">The Monitor button</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1541">The Configure button</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1599">The Advanced Settings button</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#drakconnect">Set up a new network interface (LAN, ISDN, + ADSL, ...)</a></span><ul><li><span class="file section"><a href="mcc-network.html#d4e1613">Introduction</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1620">A new Wired connection (Ethernet)</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1674">A new Satellite connection (DVB)</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1678">A new Cable modem connection</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1736">A new DSL connection</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1772">A new ISDN connection</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1822">A new Wireless connection (WiFi)</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1904">A new GPRS/Edge/3G connection</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1930">A new Bluetooth Dial-Up Networking connection</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e1934">A new Analog telephone modem connection (POTS)</a></span></li><li><span class="file section"><a href="mcc-network.html#drakconnect-end">Ending the configuration</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#drakconnect--del">Remove a connection</a></span></li><li><span class="file section"><a href="mcc-network.html#drakproxy">Proxy</a></span></li><li><span class="file section"><a href="mcc-network.html#drakgw">Share the Internet connection with other local + machines</a></span><ul><li><span class="file section"><a href="mcc-network.html#drakgw-principles">Principles</a></span></li><li><span class="file section"><a href="mcc-network.html#drakgw-wizard">Gateway wizard</a></span></li><li><span class="file section"><a href="mcc-network.html#drakgw-configure">Configure the client</a></span></li><li><span class="file section"><a href="mcc-network.html#drakgw-stop">Stop connection sharing</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#draknetprofile">Manage different network + profiles</a></span><ul><li><span class="file section"><a href="mcc-network.html#d4e2096">Introduction</a></span><ul><li><span class="file section"><a href="mcc-network.html#d4e2099">Profiles</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e2105">Draknetprofile</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#d4e2115">Running Draknetprofile</a></span><ul><li><span class="file section"><a href="mcc-network.html#d4e2117">Defining profiles, profile switching</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e2169">Using a system that has more than one profile</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#d4e2180">Appendix: Files relevant to Draknetprofile</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#drakvpn">Configure VPN Connection to secure network + access</a></span><ul><li><span class="file section"><a href="mcc-network.html#d4e2194">Introduction</a></span></li><li><span class="file section"><a href="mcc-network.html#d4e2200">Configuration</a></span></li></ul></li><li><span class="file section"><a href="mcc-network.html#drakhosts">Hosts definitions</a></span></li></ul></li><li><span class="file section"><a href="mcc-system.html">System</a></span><ul><li><span class="file section"><a href="mcc-system.html#drakauth">Authentication</a></span></li><li><span class="file section"><a href="mcc-system.html#drakxservices">Manage system services by enabling or disabling them</a></span></li><li><span class="file section"><a href="mcc-system.html#drakfont">Manage, add and remove fonts. Import + Windows(TM) fonts</a></span></li><li><span class="file section"><a href="mcc-system.html#drakclock">Manage date and time</a></span></li><li><span class="file section"><a href="mcc-system.html#localedrake">Manage localization for your + system</a></span><ul><li><span class="file section"><a href="mcc-system.html#input_method">Input method</a></span></li></ul></li><li><span class="file section"><a href="mcc-system.html#logdrake">View and search system logs</a></span><ul><li><span class="file section"><a href="mcc-system.html#d4e2409">To do a search in the logs</a></span></li><li><span class="file section"><a href="mcc-system.html#d4e2424">To configure a mail alert</a></span></li></ul></li><li><span class="file section"><a href="mcc-system.html#drakconsole">Open a console as administrator</a></span></li><li><span class="file section"><a href="mcc-system.html#userdrake">Users and Groups</a></span></li><li><span class="file section"><a href="mcc-system.html#transfugdrake">Import Windows(TM) documents and + settings</a></span></li><li><span class="file section"><a href="mcc-system.html#draksnapshot-config">Snapshots</a></span></li></ul></li><li><span class="file section"><a href="mcc-networksharing.html">Network Sharing</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#diskdrake--smb">Access Windows (SMB) shared drives and + directories</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2693">Introduction</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2701">Procedure</a></span></li></ul></li><li><span class="file section"><a href="mcc-networksharing.html#draksambashare">Share directories and drives with + Samba</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2734">Introduction</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2737">Preparation</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2742">Wizard - Standalone server</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2785">Wizard - Primary domain controller</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2795">Declare a directory to share</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2808">Menu entries</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2824">Printers share</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2831">Samba users</a></span></li></ul></li><li><span class="file section"><a href="mcc-networksharing.html#diskdrake--nfs">Access NFS shared drives and + directories</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2848">Introduction</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2854">Procedure</a></span></li></ul></li><li><span class="file section"><a href="mcc-networksharing.html#draknfs">Share drives and directories using NFS</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2889">Prerequisites</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2898">Main window</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2902">Modify entry</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2909">NFS Directory</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2913">Host access</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2925">User ID Mapping</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2935">Advanced options</a></span></li></ul></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2945">Menu entries</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2951">File|Write conf</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2954">NFS Server|Restart</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2957">NFS Server|Reload</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-networksharing.html#diskdrake--dav">Access WebDAV shared drives and + directories</a></span><ul><li><span class="file section"><a href="mcc-networksharing.html#d4e2972">Introduction</a></span></li><li><span class="file section"><a href="mcc-networksharing.html#d4e2976">Creating a new entry</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-localdisks.html">Local disks</a></span><ul><li><span class="file section"><a href="mcc-localdisks.html#drakdisk">Manage disk partitions</a></span></li><li><span class="file section"><a href="mcc-localdisks.html#diskdrake--removable">CD/DVD burner</a></span><ul><li><span class="file section"><a href="mcc-localdisks.html#d4e3068">Mount point</a></span></li><li><span class="file section"><a href="mcc-localdisks.html#d4e3072">Options</a></span><ul><li><span class="file section"><a href="mcc-localdisks.html#d4e3077">user/nouser</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-localdisks.html#diskdrake--fileshare">Share your hard disk + partitions</a></span></li></ul></li><li id="webhelp-currentid"><span class="file section"><a href="mcc-security.html">Security</a></span><ul><li><span class="file section"><a href="mcc-security.html#msecgui">MSEC: System Security and Audit</a></span><ul><li><span class="file section"><a href="mcc-security.html#d4e3144">Presentation</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3156">Overview tab</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3174">Security settings tab</a></span><ul><li><span class="file section"><a href="mcc-security.html#d4e3181">Basic security tab</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3223">System security tab</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3240">Network security</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3246">Periodic checks tab</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3254">Exceptions tab</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3270">Permissions</a></span></li></ul></li></ul></li><li><span class="file section"><a href="mcc-security.html#drakfirewall">Set up your personal firewall</a></span></li><li><span class="file section"><a href="mcc-security.html#draksec">Configure authentication for Mageia + tools</a></span></li><li><span class="file section"><a href="mcc-security.html#drakinvictus">Advanced setup for network interfaces and firewall</a></span></li><li><span class="file section"><a href="mcc-security.html#drakguard">Parental Controls</a></span><ul><li><span class="file section"><a href="mcc-security.html#d4e3400">Presentation</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3410">Configuring Parental controls</a></span><ul><li><span class="file section"><a href="mcc-security.html#d4e3427">Blacklist/Whitelist tab</a></span></li><li><span class="file section"><a href="mcc-security.html#d4e3431">Block Programs Tab</a></span></li></ul></li></ul></li></ul></li><li><span class="file section"><a href="mcc-boot.html">Boot</a></span><ul><li><span class="file section"><a href="mcc-boot.html#drakautologin">Set up autologin to automatically log + in</a></span></li><li><span class="file section"><a href="mcc-boot.html#drakboot">Set up boot system</a></span></li><li><span class="file section"><a href="mcc-boot.html#drakedm">Set up display manager</a></span></li></ul></li><li><span class="file section"><a href="otherMageiaTools.html">Other Mageia Tools</a></span><ul><li><span class="file section"><a href="otherMageiaTools.html#drakbug">Mageia Bug Report Tool</a></span></li><li><span class="file section"><a href="otherMageiaTools.html#drakbug_report">Collect Logs and System Information + for Bug Reports</a></span></li><li><span class="file section"><a href="otherMageiaTools.html#lsnetdrake">Display Available NFS And SMB Shares</a></span></li><li><span class="file section"><a href="otherMageiaTools.html#lspcidrake">Display Your PCI, USB and PCMCIA + Information</a></span></li></ul></li></ul></div></div><div id="searchDiv"><div id="search"><form onsubmit="Verifie(ditaSearch_Form);return false" name="ditaSearch_Form" class="searchForm"><fieldset class="searchFieldSet"><legend>Search</legend><center><input id="textToSearch" name="textToSearch" type="text" class="searchText"/> <input onclick="Verifie(ditaSearch_Form)" type="button" class="searchButton" value="Go" id="doSearch"/></center></fieldset></form></div><div id="searchResults"><center/></div></div></div></div></div></body></html> |