After Ubuntu published the latest Kernel Patches for Meltdown and Spectre the Kernel 4.4.0-104/109-generic let Intel Graphics freeze or hang on Compiz with Unity. Howto fix: Install the latest Kernel 4.4.0-112-generic do: sudo apt-get install linux-image-4.4.0-112-generic sudo apt-get install linux-image-extra-4.4.0-112-generic reboot then: sudo apt-get autoremove –purge -y This removes older kernels and save Space! Do test the PC for hanging again!!!
Category: unity
Debian: without sytemd
If you run Debian Servers, you read last weeks about security problems of systemd service manager. On several tests i have seen much systems having problems on service starts on boot like on debian, raspian .. This is a result of not clean redesigned scripts of the services by the Maintainers like the Proxy Server “privoxy” Package… For Tests i decided to try the new Debian Fork Replacement DEVUAN for Desktop and a standard Debian Server Setup without systemd! Howto purge Systemd on a Debian System read this external Wiki: http://without-systemd.org/wiki/index.php/How_to_remove_systemd_from_a_Debian_jessie/sid_installation or try Devuan for Server and Desktop: https://devuan.org/ Remark: […]
Security: Disable USB Drive mount for Users
If you share your Systems and you want to disable USB Drive connects there is a small solution. By default the gvfs Service handle all automounts and drive scans. On old Linux Systems you could purge the complete gvfsd “Backend” but Ubuntu-Desktop forces some pakets to the default Desktop Package! If you purge it the working Desktop can be destroyed! It’s easier to disable the “USB Drivers” called Modules from load on Start! Cause Rules are “Software” and can FAIL unknown!! Howto? Edit the /etc/modprobe.d/blacklist.conf and add: blacklist usb_storage blacklist uas Update initramfs (Kernel Image) update-initramfs -u -k all reboot […]
Security: Isolated Browser eMail Programs
If you want to be more secure, on Linux you can isolate used programs on different Users! All you need is installed by default! Howto: Add a new User for eMail and Browser to the System with: $sudo adduser mailuser $sudo adduser webuser now install if not installed by default “gksu” User Switch $sudo apt-get install gksu copy now the default App Links to webuser’s Home Desktop, for mailuser enter mailuser’s name $cp /usr/share/applications/firefox-esr.desktop /home/webuser/Desktop/firefox-esr.desktop edit the firefox-esr.desktop by right click on nautilus or a editor and change command line: old: /usr/lib/firefox-esr/firefox-esr %u to: gksu -u webuser -w "/usr/lib/firefox-esr/firefox-esr %u" […]
Chrome Browser: Disable Password Passphrase Autologin Seahorse
Today i got a call and was asked how to STOP Seahorse from asking with a Passphrase Popup after opening Chrome or Chromium Browser: Seems that google implementated a new Tool for Security to Prevent Access to STORED Browser Passwords, BUT this won’t work on Desktops with USER AUTOLOGIN like Lightdm! Howto: open a Terminal an enter ln -s /usr/share/applications/google-chrome.desktop /home/username/Desktop/google-chrome.desktop Now open the new Icon on the desktop with the mouse right click Change Command Line for Chrome : google-chrome-stable –password-store=basic %U or for (chromium): Now open the Browser with the new Icon Link On Ubuntu you can hold the Icon […]
Linux: Bash Script Time Saver Session Timer
If you use daily the Internet you know how fast the Time passes. The Internet Research can grab a lot of time without that you feel it. Thats wasted time! For saving Time on Linux you display a Timer Message on the User Screen after some Time, which let you remark that XX Minutes are gone. The Linux Tool who can offer this is called “gxmessage” Howto: Install gxmessage if not installed with $sudo apt-get install gxmessage open the root Crontab with $crontab -e Enter this code (Username = User!): */10 * * * * sudo -u username DISPLAY=:0.0 […]