[ NGD Please Read ] Regnum Online Debian Package - Page 7

onemyndseye · 07-05-2009, 01:10 AM

yes, but presents a security risk that is outside Debian/Ubuntu standards.... Although unlikely.. if the system was compromized the binarys could be replaced by something destructive.

We wouldnt be running as root but could still easily wipe out ~/ for instance

ArcticWolf · 07-05-2009, 04:07 AM

Quote:

Originally Posted by onemyndseye

yes, but presents a security risk that is outside Debian/Ubuntu standards.... Although unlikely.. if the system was compromized the binarys could be replaced by something destructive.

We wouldnt be running as root but could still easily wipe out ~/ for instance

Ouch, I didn't see that coming. I'm not a security expert at all, in fact, that's one of my weaknesses. I rather waste space or wait until a new package gets uploaded than run something with such a security breach.

surak · 07-05-2009, 05:01 AM

Hmmm

The experimental server mantains a separate resource database in a file called test0.sdb and it doesn't touch data*.sdb from the official client. A similar technique could be used with a system-wide resource database and a per-user resource database which could hold the updated resources until the package is updated. I've considering this for some time, but I still didn't try it. But seeing how this improves, I'll may try in the near future

Just a thought :P

ArcticWolf · 07-05-2009, 05:39 AM

So, you mean a master-resources database and an extra per-user database with all the changes? That's a nice workaround over the updater problem. You could use the versioning numbers to check the resources as you're doing now, then check the writing permissions over master-resources and see if you can write to it. If you can't, look for $HOME/.regnum/server/temp.sdb. And if doesn't exist then create a $HOME/.regnum/server/temp.sdb :P

We can make a regnum-updatedb script that would prompt to copy temp.sdb from the user's home folder. Such a change shouldn't pose a security threat. And we can copy it again to the user's folder each time we run the game, since it wouldn't be executable and checked by the game database engine.

onemyndseye · 07-06-2009, 10:29 AM

Quote:

Originally Posted by ArcticWolf

Ouch, I didn't see that coming. I'm not a security expert at all, in fact, that's one of my weaknesses. I rather waste space or wait until a new package gets uploaded than run something with such a security breach.

Yes... having a executable stored anywhere thats world writable is a big "no-no"

This is WinXP's main problem actually

Quote:

Originally Posted by surak

Hmmm

The experimental server mantains a separate resource database in a file called test0.sdb and it doesn't touch data*.sdb from the official client. A similar technique could be used with a system-wide resource database and a per-user resource database which could hold the updated resources until the package is updated. I've considering this for some time, but I still didn't try it. But seeing how this improves, I'll may try in the near future

Just a thought :P

Hi Surak

That certainly sounds like it could work.. please keep me informed on this.

In the meantime.. If I had the correct links to use to download the contents of the ./live folder I could save the users the extra 20meg download on initial run...

The only 2 binarys my packages includes is rolauncher which I am downloading from here:

32bit: http://download01.regnumonline.com.a...nux/rolauncher
64bit: http://download01.regnumonline.com.a...x64/rolauncher

if there are similar paths I could download the rest of the files for 64bit I think it would improve the package alot... Perhaps there is a filelist stored on this server that the launcher parses to know what to download? If not are they hard coded?.. I can obtain these URL's for myself using wireshark but I will not do so without your direct permission.

Re: update-regnumdb
-----------------------------------------

The more I think about this if I put something together I'll include it in a separate package perhaps called ' regnum-utils ' that can carry the gksudo etc depends... no reason for the main package to depend here and every user will not want or need this function... It should be set to a Reccomend of regnum-online

onemyndseye · 07-06-2009, 11:08 AM

On a side note....

I had the chance to test my package against the offical installer on 6 different Ubuntu Jaunty machines with fresh installs this weekend...

The results?

My Package functioned better in 5/6 of the trials... 5 of the installs using the offical installer had problems such as corrupted textures (Black trees, black cloths, black water). In 100% of the Debian package installs there where no issues at all

Mrreality13 · 07-07-2009, 01:35 PM

ok i give up --has to be my linux pc will have to try again with a better one --best of luck with this awesome project

Acknor · 07-07-2009, 01:59 PM

So, I have a friend who's just installed Ubuntu on his PC and has been playing Regnum on XP up until now. He's never used a Linux distro in the past. Would you suggest this method for him to install or is it still not quite ready to go?

onemyndseye · 07-07-2009, 02:34 PM

If you are comfortable with adding the repo to your sources Id say its quite stable...

ive had no issues on about 12 different test machines now and several VM's just to test the install process and so far everything seems 100%.. there is a small issue in the /usr/bin/regnum-online where a "chmod" should be a "chown" but this fixed in the next update and shouldnt present any issue on 99.999% installs.

On a plus side, youd be helping support and test this install method

Should any issue's arise please refer to this thread and I'll help you work them out.

As a general rule, this package should always function better than NGD's current installer through no fault of NGD or InstallJammer (The software used to package the installer).. It is simply a broad approach to packaging/installing RO on many differnet Linux platforms whereas this package will always contain tweaks and fixups tailored for Debian/Ubuntu (And other distros when I have the time)

Acknor · 07-07-2009, 02:43 PM

Okay, I'll help him through this method and let you know how it goes. I've just got my fingers crossed that he hasn't got an unsupported video card since I'm a bit of a Linux noob myself...

07-05-2009, 01:10 AM	#61
onemyndseye Master Join Date: Jul 2008 Location: South Central USA Posts: 260	yes, but presents a security risk that is outside Debian/Ubuntu standards.... Although unlikely.. if the system was compromized the binarys could be replaced by something destructive. We wouldnt be running as root but could still easily wipe out ~/ for instance __________________ RA/Syrtis Hunter LVL50: Elusis RA/Syrtis Barba LVL50: Artemisia RA/Syrtis Conju Lvl45: Nellas Miriel Last edited by onemyndseye; 07-05-2009 at 01:31 AM.

07-05-2009, 05:01 AM	#63
surak Legend Join Date: Mar 2006 Location: Oslo Posts: 2,176	Hmmm The experimental server mantains a separate resource database in a file called test0.sdb and it doesn't touch data.sdb from the official client. A similar technique could be used with a system-wide resource database and a per-user resource database which could hold the updated resources until the package is updated. I've considering this for some time, but I still didn't try it. But seeing how this improves, I'll may try in the near future Just a thought :P __________________ Surak* Remember... this is just a game! - Xephandor existe y Miriya es su profeta!

07-05-2009, 05:39 AM	#64
ArcticWolf Duke Join Date: Nov 2006 Location: 0x00CAFE Posts: 3,366	So, you mean a master-resources database and an extra per-user database with all the changes? That's a nice workaround over the updater problem. You could use the versioning numbers to check the resources as you're doing now, then check the writing permissions over master-resources and see if you can write to it. If you can't, look for $HOME/.regnum/server/temp.sdb. And if doesn't exist then create a $HOME/.regnum/server/temp.sdb :P We can make a regnum-updatedb script that would prompt to copy temp.sdb from the user's home folder. Such a change shouldn't pose a security threat. And we can copy it again to the user's folder each time we run the game, since it wouldn't be executable and checked by the game database engine. __________________ I don't have a solution, but I admire the problem.

07-06-2009, 11:08 AM	#66
onemyndseye Master Join Date: Jul 2008 Location: South Central USA Posts: 260	On a side note.... I had the chance to test my package against the offical installer on 6 different Ubuntu Jaunty machines with fresh installs this weekend... The results? My Package functioned better in 5/6 of the trials... 5 of the installs using the offical installer had problems such as corrupted textures (Black trees, black cloths, black water). In 100% of the Debian package installs there where no issues at all __________________ RA/Syrtis Hunter LVL50: Elusis RA/Syrtis Barba LVL50: Artemisia RA/Syrtis Conju Lvl45: Nellas Miriel

07-07-2009, 01:35 PM	#67
Mrreality13 Apprentice Join Date: Nov 2008 Location: in a NOMAM meeting atm Posts: 82	ok i give up --has to be my linux pc will have to try again with a better one --best of luck with this awesome project __________________ never approach a computer thinking"this will just take a minute"-- 59 barb- main//conj 50 parked//40 knight parked

07-07-2009, 01:59 PM	#68
Acknor Apprentice Join Date: Dec 2008 Posts: 75	So, I have a friend who's just installed Ubuntu on his PC and has been playing Regnum on XP up until now. He's never used a Linux distro in the past. Would you suggest this method for him to install or is it still not quite ready to go?

07-07-2009, 02:34 PM	#69
onemyndseye Master Join Date: Jul 2008 Location: South Central USA Posts: 260	If you are comfortable with adding the repo to your sources Id say its quite stable... ive had no issues on about 12 different test machines now and several VM's just to test the install process and so far everything seems 100%.. there is a small issue in the /usr/bin/regnum-online where a "chmod" should be a "chown" but this fixed in the next update and shouldnt present any issue on 99.999% installs. On a plus side, youd be helping support and test this install method Should any issue's arise please refer to this thread and I'll help you work them out. As a general rule, this package should always function better than NGD's current installer through no fault of NGD or InstallJammer (The software used to package the installer).. It is simply a broad approach to packaging/installing RO on many differnet Linux platforms whereas this package will always contain tweaks and fixups tailored for Debian/Ubuntu (And other distros when I have the time) __________________ RA/Syrtis Hunter LVL50: Elusis RA/Syrtis Barba LVL50: Artemisia RA/Syrtis Conju Lvl45: Nellas Miriel Last edited by onemyndseye; 07-07-2009 at 02:50 PM.

07-07-2009, 02:43 PM	#70
Acknor Apprentice Join Date: Dec 2008 Posts: 75	Okay, I'll help him through this method and let you know how it goes. I've just got my fingers crossed that he hasn't got an unsupported video card since I'm a bit of a Linux noob myself...