Flash setup

[tinypoodle]

Problem for TC is that executable script file path is hardcoded to HTLM-stream, and not found on TC becouse of /usr/local installtion point instead of /usr usually.

Solution is systematic "debian like filestructure" symlinks, which will solve that xsane problem too (or change TC installation point to normal scattered mode.

Scattered mode wouldn't change the slightest thing about conforming with Filesystem Hierarchy Standard

[Yleisajattelija]

So, what to do?

[Yleisajattelija]

Ubuntu yle-areena runs 'usr/lib/firefox/omni,ja'

TC file is located on 'apps/firefox/pkgbase/omni.ja' and 'apps/firefox/pkgbase/webapprt/omni.ja'

omni.ja seems to be jar package and includes lot of code to run.

Edit: jar is java package, not javascript package.

[tinypoodle]

Ubuntu yle-areena runs 'usr/lib/firefox/omni,ja'

TC file is located on 'apps/firefox/pkgbase/omni.ja' and 'apps/firefox/pkgbase/webapprt/omni.ja'

omni.ja seems to be jar package and includes lot of code to run.

Edit: jar is java package, not javascript package.

No relation to any of the above.

https://developer.mozilla.org/en-US/docs/Mozilla/About_omni.ja_(formerly_omni.jar)
https://bugzilla.mozilla.org/show_bug.cgi?id=605524

[Yleisajattelija]

"Yle areena" video is not working, "Elava arkisto" video works confless. Both are flash, not HTLM5 (mouse right button get adobe flash settings panel)

Here ps -command result:

Yle "Areena"

PID   USER     COMMAND
 4115 tc       -sh
 4638 root     /usr/local/bin/Xorg -nolisten tcp
 4670 tc       flwm_topside
 4709 root     /sbin/udhcpc -b -i eth0 -x hostname box -p /var/run/udhcpc.eth0.pid
 4710 root     [kworker/2:2]
 4788 root     [loop77]
 4812 root     /sbin/udevd --daemon
 4813 root     /sbin/udevd --daemon
 4871 tc       wbar
 4921 tc       {firefox} /bin/sh /apps/firefox/bin/firefox
 4922 tc       /apps/firefox/pkgbase/firefox
 4951 tc       /apps/firefox/pkgbase/plugin-container /tmp/tcloop/flash11/usr/local/share/flash11/libflashplayer.so -greomni /apps/firefox/pkgbase/omni.ja 4922 true plugin
 4981 tc       aterm
 4982 tc       sh
 5010 tc       editor
 5017 tc       ps

Yle "Elava arkisto"

PID   USER     COMMAND
 
 4115 tc       -sh
 4638 root     /usr/local/bin/Xorg -nolisten tcp
 4670 tc       flwm_topside
 4709 root     /sbin/udhcpc -b -i eth0 -x hostname box -p /var/run/udhcpc.eth0.pid
 4710 root     [kworker/2:2]
 4788 root     [loop77]
 4812 root     /sbin/udevd --daemon
 4813 root     /sbin/udevd --daemon
 4871 tc       wbar
 4921 tc       {firefox} /bin/sh /apps/firefox/bin/firefox
 4922 tc       /apps/firefox/pkgbase/firefox
 4951 tc       /apps/firefox/pkgbase/plugin-container /tmp/tcloop/flash11/usr/local/share/flash11/libflashplayer.so -greomni /apps/firefox/pkgbase/omni.ja 4922 true plugin
 4981 tc       aterm
 4982 tc       sh
 5010 tc       editor
 5018 tc       editor
 5045 tc       ps

Edit:
ls -l omni.ja

-rw-r--r--    1 root     root       7943879 Oct 24 15:40 omni.ja

[Yleisajattelija]

I think this may(or not) be the copy right  protection mechanics for "Yle areena"

-------------------------------------------
Removing Adobe Flash Access data files

Some content providers on the Internet protect content using Adobe Flash Access. To view this protected content, you must obtain content licenses from the content provider. These licenses are automatically downloaded to your computer when you rent or purchase protected content, for example. Flash and AIR applications save these licenses on your computer.

If you no longer want to play protected content, you can remove their associated license files from your computer by following the instructions below. The Flash Access license files for Flash Player are stored in the Flash Player preferences folder. For AIR-based applications, these files are stored in the specific application’s folder in the AIR Encrypted Local Store (ELS) folder.



Flash Player

    Close all browsers and any applications using Flash.
    Navigate to the Flash Player preferences folder under:

        Linux: ~/.adobe/Flash_Player
        Mac OS X: system drive/Users/user name/Library/Caches/Adobe/Flash Player
        Windows XP: system drive:\Document and Settings\user name\Application Data\Adobe\Flash Player 
        Windows Vista and Windows 7: system drive:\Users\user name\AppData\Roaming\Adobe\Flash Player
    Delete the folders APSPrivateData2 and NativeCache.

     

AIR

    Close all AIR applications.
    Navigate to the AIR ELS folder:

        Linux: ~/.appdata/Adobe/AIR/ELS
        Mac OS X: system drive/Users/user name/Library/Application Support/Adobe/AIR/ELS
        Windows XP: system drive:\Document and Settings\user_name\Application Data\Adobe\AIR\ELS
        Windows Vista and Windows 7: system drive:\Users\user_name\AppData\Roaming\Adobe\AIR\ELS
    Locate the specific AIR application and delete the subfolders APSPrivateData and APSPrivateData2.

-----------------------------------

[Yleisajattelija]

I don't find documentation for that "Yle areena" copyright control. Probably it is "Adobe access" thing but not "Adobe access Air". Problem is obviously those key file handling. Those autenthication procedures are very complex

P. S by the way, this is totally legal activity, because those "Yle areena" videos are free stuff, typically 1-2 moths time to watch.

[Yleisajattelija]

This embeded licence mechanism is new Adobe Access feature and probably included "Yle areena" licende policy 2012. Licece is embedded on video/HTLM stream.

---------------------------------------------------------------
ADOBE FLASH ACCESS 21
Pre-generating and embedding licenses
Last updated 8/26/2011
Embedding licenses
Once content has been encrypted and a license has been pre-generated, the license may be embedded into the encrypted content.
To embed a license, obtain an instance of com.adobe.flashaccess.sdk.media.drm.contentupdate.MediaKeyMetaDataUpdater. If you know the type of the encrypted content, use the constructor for FLVKeyMetaDataUpdater or F4VKeyMetaDataUpdater; otherwise, use MediaProcessorFactory.getMediaProcessor() to return an instance based on the file type detected. Construct a KeyMetaDataCallback and invoke modifyKeyMetaData(). Your callback implementation will be invoked when the DRM metadata is located in the encrypted content. Based on the metadata found, you can choose a license to embed and set the license using EmbedLicenseKeyMetaData.setEmbeddedLicenses().
For sample code demonstrating embedded licenses, see com.adobe.flashaccess.samples.licenseembedder.EmbedLicense in the Reference Implementation Command Line Tools “Samples” directory.
Note: Flash Access 2.0 clients will ignore any licenses embedded in the content and will attempt to obtain a license from the license server specified in the metadata. However, if the metadata indicates that no license server is available, a Flash Access 2.0 client will need to upgrade to view the content.
See “Out-of-band Licenses” on page 7.
---------------------------------------------------------

[Yleisajattelija]

a) Ubuntu is not using setuid -bit for '.adobe' directory. I can't say if that does matter, probably not.
b) Probably pre-generated licence is used for Yle
c) Adobe Access licence server setup (key/licence handling directories etc.) is not directed on Adobe Access docs, it is service provider dependable.

I did sent query to Yle help desk query for this issue.

Let's see, if answer will never come.

Edit:

tc

~/.adobe and subdirectories  is ownd by tc and group is staff, file permissions setuid for group is set 'S'

~/.adobe/Flash_Player/AssetCache/XXXXXX/ licence directory is empty


Ubuntu

.adobe and subdirectories is owned by XX and group is XX (same as user), file permission drwx------ without 'S'

~/.adobe/Flash_Player/AssetCache/XXXXXX/ licence directory includes licence code


So, obviously this is licence related problem. Adobe docs says that licence is machine depended (=MAC) and FlashPlayer software client  depended

[Yleisajattelija]

This is typical unix mess.

Ubuntu file permission bit for those licence files at ~/.adobe/Flash_Player/AssetCache/XXXXXX/ directory is:

-rw-rw-r--  (owner and group is user).

Problem is that setgid -bit is set on tc directory, but nobody knows what that bit does on busybox (or whatever unix version.)

Question. what that sgid bit should do on TC?

Guess: Nobody knows, probably.

Edit: Actually. that setgid could be security problem when used with these key files. Careful licence server might refuse to write setgid directories like this.

[althalus]

On ubuntu, a user's default group is the same as their username. On TC, the tc user's default group is staff. This is not a problem, this is working as intended.

Set-gid on a directory means that any file created in that directory inherits the directory's group. This is unlikely to be a security concern, and the process creating the licences is:
a) Entirely unlikely to even know that the directory has setgid
b) Almost definitely running as the tc user anyway, and given that the file is owned by the tc user, is therefore not going to run into any issues resulting from group settings.

[Yleisajattelija]

I have no programming experience with setgid or setuid bit properties. Just read couple of articles for these bit and unexpected side-effects.  At least on some articles is recommended not to use these bit, unless absolute necessary. But if there is security issues AND exact behaviour differs at different distroes, problems are expected.

There seems to be some cases, where these bits have to use, hdisk swap -memory is at least mentioned with GnuPG.

But, if setgid is problem with this case it easy to test tonight.

Edit: tested, no change. .~/adobe and ~/.macromedia directories are created when flashplayer first started.

[ananix]

The sticky group id means that the group sticks to new files created in that directory which have the bit set.

The sticky user id mean that the user id of the file sticks to the executed program regardless of what user executed it.

Its the same for ALL linux distros, these two sticky bit's are all that have ever been used in linux. You can use the third sticky bit for your own purpose and some old unix's did, mostly in relation to sticky memory.

How is it "typical unix mess" i completely fail to see that and what is typical unix mess anyway??

If its set on a file its a SUID if set on a directory its a SGID why? because it makes sense and any other way would not. Try and think about it instead of concluding its the OS being a mess. Its all pretty "clean" logic (opposite a mess).

[Yleisajattelija]

New flashplayer version is introduces and getflash11 won't work anymore.
I read FlashPlayer installation guides and made trial installation with Adobe .tar package.

No success.

I think problem is changes for Firefox installation procedure. Firefox "Help" -> "Troubleshooting information" -> "Open directory" doesn't find personalized data.
If I did understood Firefox instructions correctly,  it should not be installed apps/ directory but /home/"concurrent-user" instead.

Reason for this change is copyright control -procedure, license is by user, not by workstation.

So, must start with Firefox installation for correction. That's quite big job, is that on the plan near future?

[tinypoodle]

FWIW, running opera out of an arbitrary dir and adding an arbitrary dir containing libflashplayer.so as plugin dir path in preferences GUI works fine.