The Perfect Desktop - Fedora 14 i686 (GNOME) - Page 3

Want to support HowtoForge? Become a subscriber!
 
Submitted by falko (Contact Author) (Forums) on Tue, 2010-11-09 17:15. ::

3 Update The System

Now it's time to check for updates. Go to System > Administration > Software Update:

The Software Update wizard comes up and checks for the latest updates. Click on Install Updates to install them:

Afterwards the updates are being downloaded and installed:

You might need to confirm the update again:

Click on OK afterwards - your computer is now up to date (in some cases, e.g. if a new kernel got installed, you might have to restart your computer for the changes to take effect - if this is necessary, the Software Update wizard will tell you to do so):

 

4 Disable SELinux

SELinux is a security extension of Fedora that should provide extended security. In my opinion you don't need it to configure a secure system, and it usually causes more problems than advantages (think of it after you have done a week of trouble-shooting because some service wasn't working as expected, and then you find out that everything was ok, only SELinux was causing the problem). Therefore I choose disable it, although you might prefer to go with it. I haven't tested this setup with SELinux enabled - it might well be that it works without problems, but if it does not, you can try to turn SELinux off and see if the problem is gone.

To disable SELinux, open a terminal (Applications > System Tools > Terminal)...

... and become root:

su

Open /etc/sysconfig/selinux...

gedit /etc/sysconfig/selinux

... and set SELINUX to disabled:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
#       targeted - Only targeted network daemons are protected.
#       strict - Full SELinux protection.
SELINUXTYPE=targeted

To make the change effective, we must reboot the system:

reboot

 

5 Inventory Of What We Have So Far

Now let's browse all menus under Applications to see which of our needed applications are already installed:

You should find the following situation ([x] marks an application that is already installed, where [ ] is an application that is missing). NTFS read/write support is enabled by default on Fedora 14.

Graphics:
[ ] Gimp
[ ] F-Spot
[ ] Picasa

Internet:
[x] Firefox
[ ] Opera
[ ] Flash Player
[ ] FileZilla
[ ] Thunderbird
[x] Evolution
[ ] aMule
[ ] Azureus/Vuze
[x] Transmission BitTorrent Client
[x] Empathy IM Client
[ ] Skype
[ ] Google Earth
[ ] Xchat IRC

Office:
[ ] OpenOffice Writer
[ ] OpenOffice Calc
[ ] Adobe Reader
[ ] GnuCash
[ ] Scribus

Sound & Video:
[ ] Amarok
[ ] Audacity
[ ] Banshee
[ ] MPlayer
[x] Rhythmbox Music Player
[ ] gtkPod
[ ] XMMS
[ ] dvd::rip
[ ] Kino
[x] Sound Juicer CD Extractor
[ ] VLC Media Player
[ ] Real Player
[x] Totem
[ ] Xine
[x] Brasero
[ ] K3B
[ ] Multimedia-Codecs

Programming:
[ ] Kompozer
[ ] Bluefish
[ ] Quanta Plus

Other:
[ ] VirtualBox
[ ] TrueType Fonts
[ ] Java
[x] Read/Write Support for NTFS Partitions

So some applications are already on the system...

 

6 Adding Software Repositories

The official Fedora repositories don't provide all the software we need. Fortunately there are also third-party repositories for Fedora 14 that have what we need, and we can make our system use these repositories.

To do this, open a terminal window (under Applications > System Tools > Terminal)...

... and type in

su

to become root.

Then run

rpm -Uvh http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm

This adds the RPM Fusion repository (a merger or Dribble, Freshrpms, and rpm.livna.org) to our package manager.

Next we add the Adobe repository which provides the Flash player and the Adobe Reader:

rpm -Uvh http://linuxdownload.adobe.com/adobe-release/adobe-release-i386-1.0-1.noarch.rpm

Then we add the Skype repository - as there is no rpm, we have to do it manually:

gedit /etc/yum.repos.d/skype.repo

[skype]
name=Skype Repository
baseurl=http://download.skype.com/linux/repos/fedora/updates/i586/
gpgkey=http://www.skype.com/products/skype/linux/rpm-public-key.asc
enabled=1
gpgcheck=0

Finally we add the Google repository (which contains Picasa):

gedit /etc/yum.repos.d/google.repo

[Google]
name=Google - i386
baseurl=http://dl.google.com/linux/rpm/stable/i386
enabled=1
gpgcheck=0

[GoogleTesting]
name=Google Testing - i386
baseurl=http://dl.google.com/linux/rpm/testing/i386
enabled=1
gpgcheck=0

Please do not use the comment function to ask for help! If you need help, please use our forum.
Comments will be published after administrator approval.
Submitted by Anonymous (not registered) on Tue, 2011-05-10 17:02.

if you go to their web page they have a command  that does work

 

if you look at the directory listing, the file in question has a big "?" superimposed on it

Submitted by Pieter (not registered) on Wed, 2010-11-10 20:10.
Disabling SELinux?! Really?! If something does not work due to SELinux  then you file a bug. That's how things get fixed. Disabling it is unwise and you really should not recommend that users disable a key piece of technology that adds a tremendous amount of security. Please consider removing that part in this howto. The rest is great. Well, with the exception of Banshee as that is a mono app and because mono is patent encumbered you really should not advise users to install a piece of software that might get them sued for patent infringement. Thank you for your howto.
Submitted by Riff (registered user) on Wed, 2011-08-31 20:12.

I'm with the camp who agrees with disabling SELinux Pieter. It's one thing to say it's vital security software but when stuff that should work doesn't, and SELinux is the culprit, then you have broken software. It's not like it's intuitive and you can get it to allow certain apps. As it stands it's effectively junk to anyone who's not an SELInux expert.

 

A further point with Fedora 14 onwards, Gedit won't work with the "su" command. You need to use "su - " or "su -l" 

Submitted by trampster (not registered) on Tue, 2010-12-07 12:41.

Mono is in no way patent encumbered, it is free software implementation of an EMCA open standard and Microsoft has promised in a legally binding manor not to sue implementations of that standard.

Submitted by Keith (not registered) on Sat, 2010-11-27 17:38.
The author appropriately caveats his comments with "..in my opinion...".  Pieter, I have to agree that SELinux, while a very good idea in principle, is broken with respect to the average user - it needs to be much more transparent and come much "smarter" out of the box in order to gain acceptance.  For example, it even complains about Firefox - one of the most heavily used apps. 
Submitted by Jonathan (not registered) on Sun, 2010-11-14 09:35.

@Pieter: I disagree. I tried so, so hard to use SELinux for a couple of Fedora iterations, but I've given up. So have most of my colleagues.  To me, SELinux is like the TSA airport patdowns: I'd rather take my chances without it.  It's not a question of bugs. For a typical Linux user environment the whole approach causes huge overhead in tracking down how to work around its complaints. So I agree with this howto's author (and btw, thank you for the great howto).