Omnis Webclient on Linux
Aus MHC-Wiki
Inhaltsverzeichnis |
Web client setup – security considerations
- Like the other Omnis applications the web client requires write permissions.
- Unlike the other Omnis applications the web client gets part of other software, the web browser Firefox.
This is a potential security risk. You have 2 Options:
- Install it in the default location with less security.
- Do a dedicated Firefox setup and install it there.
Get the webclient software
You can get the webclinet directly for the FTP server or you may use the package contained in the Studio setup. To get it by FTP do:
wget ftp://ftp.omnis.net/Studio431/WebClient/Linux/omweb.taz
Installation in the default location
First you have to find the Place where Firefox is installed by your distribution. For Ubuntu it is:
/usr/lib/firefox-3.0.3/
Go to this folder and extract omweb.tgz
tar xfz /tmp/omweb.tar.gz
And now for the problematic part which causes the security problems: You have to make the complete path world writable.
chmod 777 /usr chmod 777 /usr/lib chmod 777 /usr/lib/firefox-3.0.3 chmod 777 /usr/lib/firefox-3.0.3/omnis
In Addition you have to make Firefox aware of the Omnis libraries. You have several options to do this:
- Write a wrapper script and set LD_LIBRARY_PATH
- Find the Firefox start script and set LD_LIBRARY_PATH (not recommended!)
- Make the system aware of Omnis libraries by creating an entry in /etc/ld.so.conf or /etc/ld.so.conf.d
How to do it the way of option #3 is shown here:
echo “/usr/lib/firefox-3.0.3/omnis” > /etc/ld.so.conf.d/omnis ldconfig
Installation with dedicated Firefox setup
Get Firefox as bzip2 tar archive and extraxt it to /opt:
cd /opt tar xfj /tmp/firefox-3.0.3.tar.bz2
Extract Omnis web client to the resulting Firefox folder:
cd firefox tar xfz /tmp/omweb.tar.gz
Set write permissions:
chmod 777 /opt chmod 777 /opt/firefox chmod 777 /opt/firefox/omnis
Add LD_LIBRARY_PATH to the start script by adding the line:
export LD_LIBRARY_PATH=/opt/firefox/opt/omnis:$LD_LIBRARY_PATH
In our setup edit the file:
/opt/firefox/run-firefox
A menu entry should be created too like for development system and runtime. To avoid later complications when used in a multi user environment when you get component updates add a world writable “updates” folder:
mkdir /opt/firefox/updates chmod 777 /opt/firefox/updates
There are some hard to resolve possible problems with Omnis setup on Linux in a multi user environment which are caused by the way Omnis applications are designed:
- Omnis requires global write permissions on several parts of it's installation.
- Omnis creates files in the installation folders at runtime.
- Filesystem and browser plugin standards get ignored.
Distribution specific issues
Required Kubuntu 8.04, 32bit shared libraries:
libstdc++5 libgnomeui-0 libgconf2-4
