From Fedora Project Wiki
No edit summary
 
(23 intermediate revisions by one other user not shown)
Line 1: Line 1:
{{header|design}}
= Background =
= Background =


Line 20: Line 21:
* Get rid of short description. It's just an ellipsed form of the long description anyway.
* Get rid of short description. It's just an ellipsed form of the long description anyway.
* Hide the debug information by default. Only show it if explicitly asked for. By default it appears quite intimidating.
* Hide the debug information by default. Only show it if explicitly asked for. By default it appears quite intimidating.
==== Revised Browser UI ====
Here's what the browser could look like following the above suggestions:
[[Image:setroubleshoot-ui_browser_mock1.png]]
[[:Image:setroubleshoot-ui_browser_mock1.svg|Download Source SVG]]


= Mockup Ideas =
= Mockup Ideas =


== Desktop Alerting Tool ==
== Desktop Alerting Tool for Non-Critical Alerts ==


=== Alert Details Window ===
=== Alert Details Window ===
Line 30: Line 40:


==== Unexpanded ====
==== Unexpanded ====
===== Suggestions =====
* next/back button for browsing through multiple AVCs
* count of how many times it happened
* delete avc completely / quiet avc
* date/time it occurred


[[Image:setroubleshoot-ui_alert-unexpanded_mock1.png]]
[[Image:setroubleshoot-ui_alert-unexpanded_mock1.png]]
[[Image:setroubleshoot-ui_alert-unexpanded_mock1.svg | Download Source SVG]]
 
[[:Image:setroubleshoot-ui_alert-unexpanded_mock1.svg|Download Source SVG]]


==== Expanded ====
==== Expanded ====


[[Image:setroubleshoot-ui_alert-expanded_mock1.png]]
[[Image:setroubleshoot-ui_alert-expanded_mock1.png]]
[[Image:setroubleshoot-ui_alert-expanded_mock1.svg | Download Source SVG]]
 
[[:Image:setroubleshoot-ui_alert-expanded_mock1.svg|Download Source SVG]]
 
==== Unexpanded, Multiple New Alerts to be Reviewed ====
 
[[Image:setroubleshoot-ui_multi-alert-unexpanded_mock1.png]]
 
[[:Image:setroubleshoot-ui_multi-alert-unexpanded_mock1.svg|Download Source SVG]]
 
'''NOTE:''' if the user clicks "close", it will close the dialog and all alerts immediately. it won't function the same as the 'next' button. and those alerts will not pop up again. If the user needs to review them at a later date, they can look in the selinux alert browser.


=== Bug Report Window ===
=== Bug Report Window ===


[[Image:setroubleshoot-ui_bugreport_mock1.png]]
[[Image:setroubleshoot-ui_bugreport_mock1.png]]
[[Image:setroubleshoot-ui_bugreport_mock1.svg | Download Source SVG]]
 
[[Image:setroubleshoot-ui_bugreport_mock1.svg|Download Source SVG]]
 
 
== Desktop Notification for Missed Alerts ==
 
[[Image:setroubleshoot-ui_missed-alerts-notification_mock1.png]]
 
[[:Image:setroubleshoot-ui_missed-alerts-notification_mock1.svg|Download Source SVG]]
 
== Desktop Notification for Critical Alerts ==
 
[[Image:setroubleshoot-ui_critical-alerts-notification_mock1.png]]
 
[[:Image:setroubleshoot-ui_critical-alerts-notification_mock1.svg|Download Source SVG]]
 
= Other Ideas =
 
* Use audit2why to have a 'install new policy' or 'apply new policy' button for applicable alerts
* Only show the 'submit bug' button if audit2why detects the alert as being a bug (otherwise always allow bug filing from the file menu of the browser)
* Be careful about scaring users who can't do anything about critical/scary security alerts
* Multi-host alerts - will people be using setroubleshoot to monitor alerts on multiple servers? How to make feature more obvious? We need better understanding of this use case I think.
* Sending email - send email to root@localhost for now (although it would be great if firstboot would let you configure a default system email address, clumens mentioned he may be working towards something like this) as an option for non-desktop users
* Critical SELinux alert - any way to display it on the terminal when logging in locally or remotely for non-desktop users?
 
== Other UIs to consider ==
* http://mihmo.livejournal.com/66637.html <= Growl, OpenTTD
* AppArmor training mode UI - start with confined policy then punch holes in it
 
 
= Misc =
 
Some feedback: http://tieguy.org/blog/2009/12/23/continued-notes-on-the-macbook-experiment-week-3/comment-page-1/

Latest revision as of 20:42, 26 August 2013

Artwork ArtTeamProjects WikiDesign ArtTeamN1.png

Background

See bug #475978

UI Components

Setroubleshoot-ui-components diagram1.png

Quick UI Review

Setrubleshoot-ui-review1.png

Summary of Suggestions

  • Use shorter, more human-readable dates for the date column up-top. "2 days ago", "1 week ago", etc. Specific time stamps can be displayed in the details pane.
  • Do not display the host column if the system is only configured for one host.
  • Swap the summary and date columns so summary appears right after the quiet button.
  • Rename window title "Security Alert Browser"
  • Remove lower bar with 'audit listener' '12/12' and connection toggle unless there's a really good rationale for it being there.
  • Get rid of short description. It's just an ellipsed form of the long description anyway.
  • Hide the debug information by default. Only show it if explicitly asked for. By default it appears quite intimidating.

Revised Browser UI

Here's what the browser could look like following the above suggestions:


Setroubleshoot-ui browser mock1.png

Download Source SVG

Mockup Ideas

Desktop Alerting Tool for Non-Critical Alerts

Alert Details Window

When you click for more details about an alert, you could get a dialog like this that is focused on the alert that just occurred. (To see other alerts, you could go to the browser via a right-click on the setroubleshoot panel icon or through the regular application menu path)

Unexpanded

Suggestions
  • next/back button for browsing through multiple AVCs
  • count of how many times it happened
  • delete avc completely / quiet avc
  • date/time it occurred

Setroubleshoot-ui alert-unexpanded mock1.png

Download Source SVG

Expanded

Setroubleshoot-ui alert-expanded mock1.png

Download Source SVG

Unexpanded, Multiple New Alerts to be Reviewed

Setroubleshoot-ui multi-alert-unexpanded mock1.png

Download Source SVG

NOTE: if the user clicks "close", it will close the dialog and all alerts immediately. it won't function the same as the 'next' button. and those alerts will not pop up again. If the user needs to review them at a later date, they can look in the selinux alert browser.

Bug Report Window

Setroubleshoot-ui bugreport mock1.png

File:Setroubleshoot-ui bugreport mock1.svg


Desktop Notification for Missed Alerts

Setroubleshoot-ui missed-alerts-notification mock1.png

Download Source SVG

Desktop Notification for Critical Alerts

Setroubleshoot-ui critical-alerts-notification mock1.png

Download Source SVG

Other Ideas

  • Use audit2why to have a 'install new policy' or 'apply new policy' button for applicable alerts
  • Only show the 'submit bug' button if audit2why detects the alert as being a bug (otherwise always allow bug filing from the file menu of the browser)
  • Be careful about scaring users who can't do anything about critical/scary security alerts
  • Multi-host alerts - will people be using setroubleshoot to monitor alerts on multiple servers? How to make feature more obvious? We need better understanding of this use case I think.
  • Sending email - send email to root@localhost for now (although it would be great if firstboot would let you configure a default system email address, clumens mentioned he may be working towards something like this) as an option for non-desktop users
  • Critical SELinux alert - any way to display it on the terminal when logging in locally or remotely for non-desktop users?

Other UIs to consider


Misc

Some feedback: http://tieguy.org/blog/2009/12/23/continued-notes-on-the-macbook-experiment-week-3/comment-page-1/