linuxmint / mintnanny Goto Github PK

https://bugs.launchpad.net/linuxmint/+bug/1460835

This will not clear out the existing DNS entry if you add a hostname after someone has already browsed to the website. In order to have immediate results it needs to also purge the DNS cache.

Version 1.4.8

I've configured domain blocker (mintnanny) to stop some specific domains, in this example let's consider amazon.de

If I open amazon.de, it's not accessible. However, some domains have redirects and render https pages. So, those are not blocked. My (maybe wrong) understanding is that if I block a domain, it should block it, irrespective of whether it's accessed by https or not.

Do I need to provide different URL such as *.amazon.de to block it completely?

It would be great to have opportunity to add some existing blacklist(s) and mintnanny would update them periodically.
E.g. http://askubuntu.com/questions/44487/wheres-the-gnome-nanny-blacklist-repo
If there is no good and well maintained blacklist - perhaps mintnanny should start its own? But I really hope there are some.

http://seclists.org/oss-sec/2012/q1/694

I'm using one of the color variations of the Mint-X icon theme. The title bar of the Domain Blocker window has a red circle-slash icon meaning "icon not found," although the global Apps menu and the window-list applet in the Panel have a suitable icon for this app.

It could be suggested that the red circle-slash is appropriate for the domain blocker. However, this particular icon has a black background & a white border around it, and is the same icon used whenever an icon isn't found. Therefore, it gives the impression that this icon wasn't chosen on purpose. A red circle-slash without the background might be OK, or an "Earth globe" icon.

LMDE 2 Betsy, Cinnamon. mintnanny APT package version 1.5.2.

There would be also time limiting feature expected.
Like Timekpr has - http://www.omgubuntu.co.uk/2014/05/timekpr-restrict-computer-access-ubuntu
Certainly - we can use Timekpr but such feature would also be added. This could be done also using PAM.
In LightDM I did so:

• added into /etc/pam.d/lightdm the last row: account required pam_time.so
• into /etc/security/time.conf added ";;user1|user2;Al0600-2200" (without quotes) - this means from 6 AM till 10 PM allowed to log in users user1 and user2 - here is an example how to add multiple users with | sign.
• into /etc/crontab I added "0 22 * * * root pkill -9 -u user1" (without quotes) to kick out the mentioned user(s) at the required time. Each user need its own row into /etc/crontab

Do not know does it work under MDM (/etc/pam.d/mdm exist - so there is a hope) but at least the idea is here as one possibility how to solve this. Do not know, what technique the Timekpr uses but you could look also into its source code - https://launchpad.net/timekpr - possibly they could have better solution.
Timekpr is just an example how there could be solved the GUI design.
In addition blocking addresses, we have also problem with kids sitting in computer at the night.
One more thing - when there will be guest user (linuxmint/mdm#51) - the time restriction should work also for guest user. Or if it is not possible (which I hope is not true) then the mintnanny should say that and offer to disable guest user.
Also there would be expected the domain addresses blocking should work globally or there should be opportunity to configure so. Currently there is not clear - will blocked addresses have effect only for current user or all users (including future's guest user).