Some distinctive features of our SE Android reference implementation in comparison to prior efforts of which we are aware include:

• Per-file security labeling support for yaffs2,
• Filesystem images (yaffs2 and ext4) labeled at build time,
• Kernel permission checks controlling Binder IPC,
• Labeling of service sockets and socket files created by init,
• Labeling of device nodes created by ueventd,
• Flexible, configurable labeling of apps and app data directories,
• Userspace permission checks controlling use of the Zygote socket commands,
• Minimal port of SELinux userspace,
• SELinux support for the Android toolbox,
• Small TE policy written from scratch for Android,
• Confined domains for system services and apps,
• Use of MLS categories to isolate apps.

fopen("/etc/psa-webmail/atmail/.atmail.shadow")

For some reason, the fopen() call fails, but there are several ways of fixing this. The easiest is to get the database password from .atmail.shadow and hard-code it in Config.php.

Disclaimer: don’t do this if you don’t know exactly what you are doing, why you are doing it and which possible consequences might result.

Now, change your /var/www/atmail/libs/Atmail/Config.php like this:

//if (!($fd = fopen("/etc/psa-webmail/atmail/.atmail.shadow", "r"))) {
//  echo "<script>alert('Unable to get webmail password!')</script>";
//  exit();
//}
//fscanf($fd, "%s", $buff);
//fclose($fd);
$buff = 'MySQL_password';

Note that you changed an Atmail application file, and it is very likely to be reverted by the next Plesk/Atmail update. This patch will be very helpful in that situation.

The SUSE Gallery hosts an impressive number of appliances that were made with SUSE Studio. Let me highlight just a few examples:

• Android Developer’s Desktop Remix – an Android development environment, based on openSUSE
• BrowserBox – 22 versions of 13 different web browsers (Android Browser, Internet Explorer, Firefox, Chrome, Safari, Lynx, Opera, …)
• iFolder Server – run your own iFolder file synchronization server
• Chrome OS – well, mostly Google Chrome

Unfortunately there is no sync option for Akregator and Google Reader yet.

First of all, the desktop Ubuntu and Kubuntu install images don’t support full disk encryption. So get the Alternate ISO from here (Kubuntu users this way, please). Then create a bootable USB drive using UNetbootin.

Ready? Then boot your netbook from the USB drive, and proceed with the installation using this guide. You will be able to select your country, keyboard and configure your network. Then the installation will fail, because the installer won’t find a CD-ROM drive. Yuck.

Okay, if there is no CD-ROM drive we just have to mount the installer ISO. For this we copy the alternate installer ISO to a second USB stick, plug it into the netbook and give the system a few seconds to recognize it. Then we use alt+F2 to switch to a command line and hit so we can enter commands. First, we should make sure that both USB drives are there:

ls -la /dev/sd*

should return something like this:

/dev/sda
/dev/sda1
/dev/sda2
/dev/sdb
/dev/sdc

/dev/sda is your hard disk, /dev/sdb is the USB drive you booted from, and /dev/sdc is the second USB drive containing the installer ISO file (unless you have a second hard drive). Use mount if you are not sure if and/or where your USB drives are mounted to.Now you can mount the second USB drive to /mnt and the ISO image to /cdrom:

mount -t vfat /dev/sdc /mnt
mount /mnt/ubuntu-10.04-alternate-i386.iso /cdrom/
exit

Next, hit alt+f1 to return to the install menu and select “Detect CD-ROM”. The installation will proceed as described in the blog post above.

Have fun with Ubuntu 10.04!