Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
New to Gentoo and GNU/Linux OS
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Installing Gentoo
View previous topic :: View next topic  
Author Message
Mansoff
n00b
n00b


Joined: 17 Dec 2011
Posts: 12

PostPosted: Mon Dec 19, 2011 2:20 pm    Post subject: New to Gentoo and GNU/Linux OS Reply with quote

This post is from Links browser, got a lot of problems in installation and other thinks before this post, but now Gentoo is up and i need some usual thing in it.Atm Gentoo has only command line.
--Anti-virus(free)
--Good File Manager.
--Browser Firefox.
--Something for internet radio.
So this in "must have".
need help to get it. I know about "emerge", but want to see proffesional gentoo user opinnion.
Back to top
View user's profile Send private message
kite14
Tux's lil' helper
Tux's lil' helper


Joined: 07 Nov 2006
Posts: 113
Location: Pordenone/Italy

PostPosted: Mon Dec 19, 2011 2:37 pm    Post subject: Reply with quote

Congrats for your new gentoo installation.
You now have a basic installation without a graphic desktop:
you need to install the "X window server" (the bottom layer
which give you graphic capabilities) and a desktop manager
(such as Gnome, KDE, LXDE, XFCE, ...) which provides a
graphic environment, file manager and other utilities.

You can find further docs at the Gentoo Desktop Documentation Resource page.
Back to top
View user's profile Send private message
<3
l33t
l33t


Joined: 21 Oct 2004
Posts: 629

PostPosted: Mon Dec 19, 2011 2:41 pm    Post subject: Re: New to Gentoo and GNU/Linux OS Reply with quote

Mansoff wrote:
This post is from Links browser, got a lot of problems in installation and other thinks before this post, but now Gentoo is up and i need some usual thing in it.Atm Gentoo has only command line.


OK first thing is first, if you are a newbie you I want to make sure you know about the Gentoo Documentation Reasources.

Being that you are a newbie I am going to assume you don't want to be at command line all the time, you probably want X and a desktop manager (DM). Depending on what you are looking for there is a desktop manager to suit your needs. The most popular ones are KDE, Gnome, XFCE and Fluxbox. My suggestion is to start with either KDE or Gnome. You can read about installing them by first reading the X Server install HOWTO which you will need to install before picking a DM then picking a DM here http://www.gentoo.org/doc/en/index.xml?catid=desktop.

Mansoff wrote:

--Anti-virus(free)

ClamAV

Mansoff wrote:

--Good File Manager.

Depends on your your desktop manager but if you want something that isn't tied to a particular DM try the Gentoo File manager (it is available from portage)

Mansoff wrote:

--Browser Firefox.

.... Firefox? I don't understand.

Mansoff wrote:

--Something for internet radio.

pandora

Mansoff wrote:

So this in "must have".
need help to get it. I know about "emerge", but want to see proffesional gentoo user opinnion.
Back to top
View user's profile Send private message
fangwen
Tux's lil' helper
Tux's lil' helper


Joined: 23 Oct 2011
Posts: 128
Location: Shanghai, China

PostPosted: Mon Dec 19, 2011 3:20 pm    Post subject: Reply with quote

Mansoff,

Linux users get trouble with viruses in very rare cases, so you don't need to worry about that.
_________________
All operating systems suck. This one just sucks less.
Back to top
View user's profile Send private message
destroyedlolo
Apprentice
Apprentice


Joined: 17 Jun 2011
Posts: 236
Location: Close to Annecy

PostPosted: Mon Dec 19, 2011 3:34 pm    Post subject: Re: New to Gentoo and GNU/Linux OS Reply with quote

Congratulation make it running.

Mansoff wrote:

--Anti-virus(free)

For what : disable unneeded ports (telnet, ftp ...), choose good password for remaining ones and that's all.

Mansoff wrote:

--Good File Manager.

To be short, it will depend on your desktop manager : for newbies, Gnome if very accessible (at least v2, I didn't tried v3) : thanks to its good Nautilus.
Now Gnome is a bit fat, so I switched all my machine to LXDE/PCManFM and I'm happy with them.

I would add to your list LibreOffice, GIMP and VLC (which is good as well for web radio).
Back to top
View user's profile Send private message
JESSEJJ89
Tux's lil' helper
Tux's lil' helper


Joined: 22 Dec 2011
Posts: 90

PostPosted: Thu Dec 22, 2011 10:15 pm    Post subject: Reply with quote

If your new to Gentoo I would review this guide before installing software.
http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=2&chap=2

I'm pretty new myself and I find this guide very helpful when installing software. You could check what USE flags others use on certain software such as VLC, etc.
Back to top
View user's profile Send private message
ultraincognito
Guru
Guru


Joined: 03 Jun 2011
Posts: 308
Location: Ukraine

PostPosted: Fri Dec 23, 2011 8:16 am    Post subject: Re: New to Gentoo and GNU/Linux OS Reply with quote

Mansoff wrote:
--Anti-virus(free)

If you worry then you can use SeLinux but I don't think that it's very necessary.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 27783
Location: 56N 3W

PostPosted: Fri Dec 23, 2011 2:26 pm    Post subject: Reply with quote

Mansoff,

Most linux systems running anti-virus software do so to protect windows systems that connect to the internet through them.
Provided you take normal Linux security precautions you won't need anti-virus on Gentoo.
Only ever use the root account for system admin.
Only run services that you need, so you present less opportunity to the outside world.
Linux is not proof against social engineering and websites that download malicious javascript to your browser.
Its good to run two browsers, one with and one without Java. Only permit scripts to run from sites you trust.

If your system is connected directly to the internet, so use a firewall. iptables is provided inthe kernel for this but you will also need some firewall rules.

The other things you want depend on which Graphical User Interface you choose. The hevyweights are Gnome and KDE if you are running on lightweight hardware, you might like simething with lower CPU and RAM requirements.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
archrax
n00b
n00b


Joined: 05 Dec 2011
Posts: 22

PostPosted: Fri Dec 23, 2011 8:20 pm    Post subject: Reply with quote

Hi,

Hope I'm not thread-hijacking here.

Regarding Neddy's last post.

iptables is provided in the kernel you say - but that is the kernel that you've compiled yourself. But iptables is not provided on the minimal installation CD (please correct me if I'm wrong). Surely it should be? A Gentoo build can take quite a while (assuming you are not working on it full time and are spreading it out over a few days), during which you have no firewall and are exposed.

Or am I missing something?
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 27783
Location: 56N 3W

PostPosted: Fri Dec 23, 2011 9:00 pm    Post subject: Reply with quote

archrax,

iptables is not provided on the liveCD kernel.

During your install, what services are you running that listen for incoming connections from the internet?
About the only one I can think of is sshd but you secure that by not permitting root logins and setting a strong password ... don't you?
The paranoid can turn off password logins altogether and drop their public key on the box.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
archrax
n00b
n00b


Joined: 05 Dec 2011
Posts: 22

PostPosted: Fri Dec 23, 2011 9:53 pm    Post subject: Reply with quote

Neddy, thanks for the response.

Quote:
During your install, what services are you running that listen for incoming connections from the internet? About the only one I can think of is sshd but you secure that by not permitting root logins and setting a strong password ... don't you?

My next question is going to betray my ignorance regarding this network stuff. Assuming I'm not running a server, do http and ftp only listen to connections initiated by the user? On desktops, is sshd the only service listening out for incoming stuff? In which case, why bother with a firewall at all if you are just running a desktop workstation?

On a more practical note: How do you prevent root logins?

Also how do you do the following?

Quote:
The paranoid can turn off password logins altogether

Quote:
and drop their public key on the box.


Don't even know what the last one means. Key?

Thanks once again.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 27783
Location: 56N 3W

PostPosted: Fri Dec 23, 2011 10:55 pm    Post subject: Reply with quote

archrax,

A firewall server two purposes. It keeps nasty stuff out and it prevents nasty suff phoning home, if it ever gets in. Most people disable the latter functionality as its harder to set up.

If you run a webserver, you will have services listening on posts 80 and 443. FTP listens on port 21. sshd listens on port 22. Look in n/etc/services to see what ports are used by what services. If there are no services listening for connections you have no need of a firewall.
On my system just now
Code:
$ netstat -a   
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State     
tcp        0      0 *:ssh                   *:*                     LISTEN     
tcp        0      0 localhost.localdoma:ipp *:*                     LISTEN     
tcp        0      0 *:59704                 *:*                     LISTEN     
tcp        0      0 NeddySeagoon:59704      mediaserver:774         ESTABLISHED
tcp        0      0 NeddySeagoon:44359      HUBBARD.CLUB.CC.CM:ircd ESTABLISHED
tcp       38      0 NeddySeagoon:35598      bittern.gentoo.os:https CLOSE_WAIT
tcp        0 444536 NeddySeagoon:885        mediaserver:nfs         ESTABLISHED
tcp        0      0 NeddySeagoon:47039      farad.oftc.net:ircd     ESTABLISHED
tcp6       0      0 [::]:56068              [::]:*                  LISTEN     
tcp6       0      0 [::]:ssh                [::]:*                  LISTEN     
tcp6       0      0 localhost:ipp           [::]:*                  LISTEN 
You can see that sshd is listening on IPv4 and IPv6. I need to look into what is on 59704, I think ists mediatomb offering UPnP.

To stop sshd accepting root logins you edit /etc/ssh/sshd_config. Specifically change #PermitRootLogin yes to PermitRootLogins no and restart sshd.
Key based logins will just work if you add your public ket to ~/.ssh/authorized_keys on the target system and have your private key on the local system.
Use ssh-keygen to make a key pair.

When you have checked that you can log in with your key and you can still use sudo to gain root if you need it, you can turn off password based logins in /etc/ssh/sshd_config
Note: that sshd will still appear to offer password based logins but they wil always fail.

You will be asked for your key passphrase to unlock your private key.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
archrax
n00b
n00b


Joined: 05 Dec 2011
Posts: 22

PostPosted: Sat Dec 24, 2011 12:00 am    Post subject: Reply with quote

Neddy,

Thanks for your detailed and helpful reply. I really appreciate it.

I'm not running a server yet, but may do someday. I do have a firewall and I did spend days learning iptables just so that it can do the latter - stop nasty stuff phoning home - and you're right - it wasn't easy!

Thanks for teaching me about how to find out which services are running. Also I didn't know you could login to sshd using a key.

Thanks once again buddy! Now, back to work on my paranoid and secure Gentoo installation (I'll have a bash at hardened Gentoo one day...). :)
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Installing Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum