[Lias] Re: [acscomputers] Google rewrites?

[Paul Gear]

John Summerfield wrote:
> ...
>> I'm not trying to block google, i'm trying to rewrite the requests (by
>> appending '&safe=strict') so that they don't need blocking.
>
> If I got the regexes right, it blocks Google unless the user has
> safe-search enabled.
>
> they can use Google, but they gotta do it safely.

But if you've got your preference set (as i do), the safe=strict part
doesn't appear in the URL.  That's why i just want to add it to the end
of every google search.

> ...
>>> The example I saw only works properly if you limit to one copy.
>>
>>
>> One copy running in memory?  That wouldn't work for us.  We have about
>> 400 end nodes, and if we have less than about 30 redirectors, it runs
>> out regularly.
>
> That's why I changed it: all the tees in the example were writing to a
> single file, each opening it itself. My version uses a different file
> for each tee.

Right - i'm with you now.

>>> ...
>>> I ran this on WBEL 4 which has selinux enforcing nice behaviour. I could
>>> not create the files in /tmp which, I suppose, is good.
>>
>>
>> Not very application-friendly, though...
>
> Define "application-friendly."

Not requiring applications to be rewritten in order to work correctly.

> If someone breaks your php application (not entirely unknown),

Yeah - i got bitten by the PHP XMLRPC bug recently.  Cost me a bit of
time reinstalling the box.  :-(

> that someone doesn't get access to much more.
> Sounds fairly friendly to me. One just has to learn to deal with it.

I guess so.  If most apps use defined APIs for getting temporary file
locations, they should work.

> ...
> Linux is now getting the level of security that's been available in
> serious operating systems for decades, and I for one think it about time.

Define "serious operating systems".  :-)

--
Paul Gear, Manager IT Operations, Redlands College
38 Anson Road, Wellington Point 4160, Australia
(Please send attachments in portable formats such as PDF, HTML, or
OpenOffice.)
--
If you've got skills or information that could be helpful to others,
please consider contributing to the schools IT support wiki at
http://schools.wikispaces.org
--
The information contained in this message is copyright by Redlands
College.  Any use for direct sales or marketing purposes is expressly
forbidden.  This message does not represent the views of Redlands
College.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
Url : http://lists.linux.org.au/pipermail/lias/attachments/20050824/58cdc900/attachment.pgp