rainbow for Debian
------------------

By default, rainbow is not "ready to run" once installed. In order to get
rainbow to function, you need to add "rainbow" after the "passwd:" and
"group:" stanzas in /etc/nsswitch.conf. A quick-and-dirty way to do so is via
the following commands:
 sudo /bin/sed -i -e s/^passwd:/passwd:\ rainbow/ /etc/nsswitch.conf
 sudo /bin/sed -i -e s/^group:/group:\ rainbow/ /etc/nsswitch.conf

You shoud remove "rainbow" from /etc/nsswitch.conf if you uninstall the
rainbow package.

After modifying /etc/nsswitch.conf, restart nscd:
 sudo /etc/init.d/nscd restart

If you want to use the "rainbow-easy" helper script, you need a "audio" 
group on your system:
 sudo groupadd -f audio

sugar and rainbow
------------------

Sugar versions 0.86 and higher support rainbow "out of the box", and only need
some configuration changes to enable full functionality. For earlier versions
of sugar, see http://wiki.laptop.org/go/Rainbow/Installation_Instructions.

In order for Sugar to work with Rainbow, you will need to tell D-Bus to enable
all users on your system to access your D-Bus session. This represents a
security risk on multi-user systems and is therefore not enabled by default.

To enable Activity D-Bus access, add the following to your 
/etc/dbus-1/session.conf inside the '<policy context="default">' section:
 <allow user="*"/>

This will allow other UNIX users besides yours to access your session bus. This
might allow people on the same machine to control your applications and access
your data, so only make this change if you're fine with that (e.g. no one else
or only trusted ones using your computer).

If you want Sugar activities to be able to access GConf when run using
Rainbow, you will need to run something like:
 sudo cat >> /etc/orbitrc <<EOF    # resp. ~/.orbitrc
 ORBIIOPIPv4=1
 ORBLocalOnly=1
 ORBIIOPUSock=0
 EOF

As above, this allows other users on your machine to access your GConf
registry, which may put you at risk if you are on a multi-user system.

Finally, you need to tell sugar to use rainbow:
 touch /etc/olpc-security

 -- Luke Faraone <luke@faraone.cc>  Wed, 26 Aug 2009 06:43:54 -0400