Difference between revisions of "Talk:Skype"

From ArchWiki
Jump to: navigation, search
(Tomoyo)
(Tomoyo)
(One intermediate revision by the same user not shown)
Line 25: Line 25:
 
== Tomoyo ==
 
== Tomoyo ==
  
I tried to secure Skype following the [https://wiki.archlinux.org/index.php/Skype#TOMOYO instructions in the article]. Unfortunately it doesn't work because there are still to many rejections of tomoyo.
+
I tried to secure Skype following the [https://wiki.archlinux.org/index.php/Skype#TOMOYO instructions in the article]. Unfortunately it didn't work. Now i fixed it. For me to work, I needed a few modifications:
  
Therefore I added the following content to {{ic|/etc/tomoyo/domain_policy.conf}}
+
I added the following content to {{ic|/etc/tomoyo/domain_policy.conf}}
 
{{bc|
 
{{bc|
 
file read /usr/share/locale/\*/LC_MESSAGES/\*
 
file read /usr/share/locale/\*/LC_MESSAGES/\*
 
file read /usr/lib/gconv/\*}}
 
file read /usr/lib/gconv/\*}}
The first line is necessary for the language support of skype.
+
Otherwise skype doesn't adapt to the system language.
  
It's still not sufficient. The log shows the following entries:
+
Furthermore just appending the in the article mentioned entries to {{ic|/etc/tomoyo/exception_policy.conf}} doesn't work. Tomoyo didn't respect the lines {{bc|initialize_domain /usr/bin/skype from any
{{bc|1=#2013/05/26 10:02:08# profile=3 mode=enforcing granted=no (global-pid=7276) task={ pid=7276 ppid=7061 uid=1000 gid=1000 euid=1000 egid=1000 suid=1000 sgid=1000 fsuid=1000 fsgid=1000 }
+
initialize_domain /usr/lib32/skype/skype from any}} Therefore I moved them to the already existing entries of the form {{ic|initialize_domain *}} in the configuration file. If this is also true for others, it might be a good idea to modify the article at least mentioning the latter one. Or perhaps it's a bug in tomoyo? --[[User:Marcus-aurelius|Marcus-aurelius]] ([[User talk:Marcus-aurelius|talk]]) 09:50, 8 June 2013 (UTC)
<kernel> /usr/bin/skype /usr/lib32/skype/skype
+
use_profile 3
+
 
+
#2013/05/26 10:02:08# profile=3 mode=enforcing granted=no (global-pid=7276) task={ pid=7276 ppid=7061 uid=1000 gid=1000 euid=1000 egid=1000 suid=1000 sgid=1000 fsuid=1000 fsgid=1000 }
+
<kernel> /usr/bin/skype /usr/lib32/skype/skype
+
use_group 0
+
 
+
#2013/05/26 10:02:08# profile=3 mode=enforcing granted=no (global-pid=7276) task={ pid=7276 ppid=7061 uid=1000 gid=1000 euid=1000 egid=1000 suid=1000 sgid=1000 fsuid=1000 fsgid=1000 } path1={ uid=0 gid=0 ino=1590506 major=254 minor=1 perm=0755 type=file } path1.parent={ uid=0 gid=0 ino=1590505 perm=0755 } exec={ realpath="/usr/lib32/skype/skype" argc=1 envc=63 argv[]={ "/usr/lib32/skype/skype" } envp[]={ "XDG_VTNR=7" "LESS_TERMCAP_mb=\033[01;31m" "SSH_AGENT_PID=391" "XDG_SESSION_ID=1" "KDE_MULTIHEAD=false" "DM_CONTROL=/var/run/xdmctl" "LESS_TERMCAP_md=\033[01;31m" "LESS_TERMCAP_me=\033[0m" "GPG_AGENT_INFO=/tmp/gpg-oxThCt/S.gpg-agent:388:1" "SHELL=/bin/zsh" "TERM=xterm" "XDM_MANAGED=method=classic" "GTK2_RC_FILES=/etc/gtk-2.0/gtkrc:/home/kairos/.gtkrc-2.0:/home/kairos/.gtkrc-2.0-kde4:/home/kairos/.kde4/share/config/gtkrc-2.0" "KONSOLE_DBUS_SERVICE=:1.220" "KONSOLE_PROFILE_NAME=Wei\303\237e\040Kommandozeile" "LD_PRELOAD=/usr/lib32/libv4l/v4l2convert.so" "GS_LIB=/home/kairos/.fonts" "GTK_RC_FILES=/etc/gtk/gtkrc:/home/kairos/.gtkrc:/home/kairos/.kde4/share/config/gtkrc" "WINDOWID=65011795" "LESS_TERMCAP_ue=\033[0m" "SHELL_SESSION_ID=199d678e652540008e0e463b86793ebb" "GTK_MODULES=canberra-gtk-module" "KDE_FULL_SESSION=true" "vcs_info_msg_1_=" "USER=kairos" "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:" "XCURSOR_SIZE=0" "SSH_AUTH_SOCK=/tmp/ssh-6GVlj3eNKXXk/agent.390" "SESSION_MANAGER=local/olympia:@/tmp/.ICE-unix/452,unix/olympia:/tmp/.ICE-unix/452" "PAGER=less" "MOZ_PLUGIN_PATH=/usr/lib/mozilla/plugins" "LESS_TERMCAP_us=\033[01;32m" "DESKTOP_SESSION=kde-plasma" "MAIL=/var/spool/mail/kairos" "PATH=/usr/lib/qt4/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin:/usr/bin/core_perl" "HG=/usr/bin/hg" "PWD=/etc" "JAVA_HOME=/usr/lib/jvm/java-7-openjdk" "vcs_info_msg_0_=" "EDITOR=emacs" "KONSOLE_DBUS_WINDOW=/Windows/1" "KDE_SESSION_UID=1000" "LANG=es_ES.UTF-8" "KONSOLE_DBUS_SESSION=/Sessions/5" "HOME=/home/kairos" "COLORFGBG=0;15" "XDG_SEAT=seat0" "SHLVL=2" "KDE_SESSION_VERSION=4" "LANGUAGE=" "XCURSOR_THEME=Oxygen_Zion" "LOGNAME=kairos" "LESS_TERMCAP_so=\033[01;44;33m" "XDG_DATA_DIRS=/usr/share:/usr/share:/usr/local/share" "DBUS_SESSION_BUS_ADDRESS=unix:abstract=/tmp/dbus-Zlcd5eodjn,guid=b5ee5bbb890db55c0e120e4d51a139f8" "WINDOWPATH=7" "PROFILEHOME=" "XDG_RUNTIME_DIR=/run/user/1000" "DISPLAY=:0" "QT_PLUGIN_PATH=/home/kairos/.kde4/lib/kde4/plugins/:/usr/lib/kde4/plugins/" "XDG_CURRENT_DESKTOP=KDE" "COLORTERM=yes" "LESS_TERMCAP_se=\033[0m" } }
+
<kernel> /usr/bin/skype /usr/lib32/skype/skype
+
misc env XDG_VTNR}}
+
This is a bit strange. Both domains, {{ic|<kernel> /usr/bin/skype}} '''and''' {{ic|<kernel> /usr/lib32/skype/skype}} have the necessary rights in the configuration shown in the wiki. I try to solve that and hope there's a more elegant solution than just doing the corresponding entries again in the combined domain. Perhaps also another one has also an idea and is more experienced with tomoyo? --[[User:Marcus-aurelius|Marcus-aurelius]] ([[User talk:Marcus-aurelius|talk]]) 12:44, 26 May 2013 (UTC)
+

Revision as of 09:50, 8 June 2013

What about skype phones? Is there a way to make them work with Linux? For instance, I have a Philips voip0801B/37. Are there open source drivers for these sort of things? -- Kc8tpz 11:58, October 1, 2007‎

Hey look if you can make it work as a generic kind/device type.
In regards to the other Linux distributions which would be the most likely to work with Arch? If you look at skype.com you will find packages for Debian, etc.. I've managed to get Flash Player in Arch x64 from using the ndiswrapper scripts from Ubuntu, any idea?
-- Dextrose 19:11, September 11, 2008‎

Troubleshooting

Hello, I've just found out that changing the permissions of libpulse, as the wiki recommends, breaks mplayer. I don't know if this is a peculiarity of my setup -- I doubt it --, but I would encourage other wiki users to try if this is the case, and if it is the section should be ammended. -- Manolomartinez 11:52, February 22, 2012‎

Skype-OSS Sound (Pre-2.0)

"If you have a recent version of Skype, this will not work and is not needed, look at the "important notes" on start of this page." -- the "important notes" section seems missing. -- Zag 13:13, August 6, 2012‎

%wheel ALL=(skype) NOPASSWD: /usr/bin/skype

I have found that Skype runs as a special user if '%skype' is used instead of '%wheel'.

OSS status

This article mentions multiple times that OSS is 'deprecated' or that it only works on Skype <2.0. As said above (#Skype-OSS Sound (Pre-2.0)), important notes seem to be missing, explaining the status of OSS. Can somebody clarify this? Because if this is true it might be better to completely remove these sections. --Lonaowna (talk) 09:56, 22 May 2013 (UTC)

Tomoyo

I tried to secure Skype following the instructions in the article. Unfortunately it didn't work. Now i fixed it. For me to work, I needed a few modifications:

I added the following content to /etc/tomoyo/domain_policy.conf

file read /usr/share/locale/\*/LC_MESSAGES/\*
file read /usr/lib/gconv/\*

Otherwise skype doesn't adapt to the system language.

Furthermore just appending the in the article mentioned entries to /etc/tomoyo/exception_policy.conf doesn't work. Tomoyo didn't respect the lines
initialize_domain /usr/bin/skype from any
initialize_domain /usr/lib32/skype/skype from any
Therefore I moved them to the already existing entries of the form initialize_domain * in the configuration file. If this is also true for others, it might be a good idea to modify the article at least mentioning the latter one. Or perhaps it's a bug in tomoyo? --Marcus-aurelius (talk) 09:50, 8 June 2013 (UTC)