System-wide Lockdown and Usability

I wrote some time ago about how most modern Linux distributions deals with with granting unprivileged users additional privileges when they are logged in at the console. Stuff like allowing them to access removable disks, power down the system and so forth - Project Utopia stuff, that whole story.

While this is great for the home user, stuff Just Works, it’s not always ideal in more controlled environments such as call centers, university settings, Internet Cafes or print kiosks. Also, working for a distributor I’m also sometimes personally on the receiving end of rude people who wants this too. I don’t disagree much really. Yes, it makes sense to easily lock down what the operating system allows a user in front of it to do. Even to the point where it is totally unusable. Notably this is required for EAL style certifications of systems. Yes, Sarbanes-Oxley requires it too, and yes, some companies (search for the word ‘epoxy’ in that link) disable the USB ports of their employees computers.


Boat on reflecting water
Copenhagen, Denmark - December 2005

I wrote some notes about how to fix this in what I consider a sane way. Sane here includes allowing a system administrator or home user to override this in a way that just works, e.g. pop up a dialog asking for auth to gain privileges to carry out the operation. Mocking around with configuration files in /etc does not qualify - do not pass start, do not collect $200 - put up a GUI dialog instead; it’s 2006 for crying out loud :-)

Anyho, so I did this policy library and started to integrate it with gnome-mount. Sure, this example is kinda lame and the UI is still totally wrong. But it illustrates the point well. The sysadmin didn’t allow the user to override file system permissions on an advanced file system and we give the user the ability to correct it - there are lots of more interesting use-cases than this. And we need do need lockdown, otherwise all the Michal Jaegermann and Alan Cox’s of the world won’t let us put it in a general purpose operating system. Which is fair enough. Oh, before someone cries the root password is evil; whether we ask for the super user password, users own password or something different for auth should just be up to the OS vendor. It’s a boring implementation detail. It’s also fine by me to have a gconf key to hide these dialogs; that might be sometime a sysadmin in an enterprise setting would do. I think Clark even suggested once to put a button “Send request to sysadmin to enable feature” too. Whatever :-)


Eiffel Portal
Paris, France - January 2006

Whilst implementing this I researched various graphical su helpers including consolehelper / usermode that we ship in Fedora. They all suffer from the same set of problems most notably that they allow to run X applications as root. So, I guess for HAL I’ll be rolling my own just like everyone else :-) . Read on please.

No, seriously, I strongly believe the idea of even allowing X applications to run as root is a dead end from day one. With the su helper I plan for PolicyKit (which is a project I’ve spun off HAL containing said policy bits), your application will at most be elevated to an unprivileged “system user”. The trick here is that HAL allows this unprivileged user to invoke D-BUS methods normal unprivileged console users wouldn’t be allowed to invoke. To get to this “system user”, the desktop user will have to auth (root password, own password, whatever) and will thus be presented with a dialog even (optionally) offering the one-time-pain option by granting this privilege to the desktop and/or other users forever (or until the sysadmin changes it).


Looks like a wall of gold
Boston, MA - December 2005

The reason I’m spinning it off HAL is that it makes sense for the rest of the desktop bits (not only GNOME) to adopt the same architectural pattern; for example gnome-system-monitor could use this to renice processes.. g-s-m will simply provide a service on the system bus that runs as root and exports a method called Renice(). A PolicyKit policy file provides a list of uid and gid for who is allowed for this. Now, g-s-m will try to invoke Renice() but might get the PermissionDeniedByPolicy exception back. If this is the case, simply bring up said dialog, enter password, optionally grant this privilege to one or more users and, bingo, you’re done.

I plan to provide a PolicyKit-gnome library for these dialogs, e.g. password prompting and policy editing. Mostly because this is what I need for the HAL (and Fedora I guess), but I think it makes sense for GNOME too to consider this architectural pattern.

Yea yea, long boring blog post about admin stuff and it’s not even about cool bling stuff!. I hope at least that the admins love me :-)

348 Responses to “System-wide Lockdown and Usability”

  1. Matthew Miller Says:

    Rather than inventing yet another thing, how about improving consolehelper/usermode so that it has the ability to run a given program as an arbitrary user rather than just as root?

    I don’t think this would be too hard to do — maybe add a “RUNASUSER” option to userhelper?

    Then, the various applications which currently use consolehelper (system-config-* and friends) could be individually ported over time to run using the “system user” mechanism you describe.

  2. Sean Middleditch Says:

    I wrote a page on the GNOME wiki detailing with the application/user interface for an ideal privilege system could look like. Perhaps it’ll be interesting or useful to you.

    http://live.gnome.org/PrivilegedOperations

    (Also, your captcha is almost completely unlegible. You might consider using an accessibility-friendly math question. This is my fourth attempt at reloading the comments page to try to find an image I can actually read.)

  3. jef spaleta Says:

    Can you clarify whether the cli tools associated with configuration of privledge policy have made it into fc5 as per your comments in

    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177177#c24

    And is there an adequate amount of detail in the release-notes pointing “compotent” system admins on how to reconfigure their systems in the post /etc/hal/fdi/policy world?

    Now I might be missing a package on my rawhide box, so I might not have all the pieces installed, but i’m not seeing anything that I could associate with your comments in
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177177#c24
    I certaintly dont see the hald-check-policy binary you use in your mockup discussion in
    http://lists.freedesktop.org/archives/hal/2006-January/004377.html

    What happened? Is cmdline configurability completely punted for fc5 release contrary to you the public comments about expectations in bugzilla? I’d appreciate an update to the bugzilla entries with confirmation as to eta for these cli tools.

    -jef

  4. Matthew Miller Says:

    PS: I’m willing to work on adding the RUNASUSER functionality to usermode. Is this something you’d be willing to use for this?

    In the meantime, one can simply make a tiny wrapper which runs as root from consolehelper but execs the real program as the “system user”, yeah?

  5. Pau Garcia i Quiles Says:

    What about extending the KDE Kiosk Mode to something system-wide, so we could have something like Microsoft’s Group Policy Objects?

  6. Barış Metin Says:

    There are some other suggestions but I’d encourage you to take a look at the COMAR (configuration manager) system we’re using in our distribution (Pardus).

    http://svn.pardus.org.tr/uludag/trunk/comar/comar/

    Currently we don’t have any documentation in English but code can say pretty much.

    Basically COMAR is a service providing a system model for configuration. All the job is done by backend scripts. Written in Python scripts came with packages and registered to COMAR by the package manager (PiSi). COMAR doesn’t have a detailed auhentication policy currently but it’s a planned feature.

  7. Madcrow Says:

    I think that any attempt to help implement an M$-style lockdown model is pure evil. The traditional *nix “do what ever you want in your own account, but be unable to mess up the actual system” is a much more fair system. I can’t tell you how frustrating it is to be forced to use Internet Exploder on my school computers simply because all apps that weren’t installed by an admin are blocked from running (aka, I’m unable to run Firefox from a USB key) To force that same sort of paternalistic crap on Linux is bad and writing tools to make it easier to create that sort of lockdown environment and then make it easy to admister is wrong as well.

  8. Computerworld Blogs Says:

    ETech news emerges (and mind control)

    Welcome to today’s IT Blogwatch, in which the Emerging Technology Conference offers up more geekery. Not to mention controlling a computer with the power of your mind …

  9. Wouter Bolsterlee Says:

    PolicyKit from today’s CVS HEAD won’t compile. This patch fixes the build problems:

    Index: polkitd/polkit-manager.h
    ===================================================================
    RCS file: /cvs/hal/PolicyKit/polkitd/polkit-manager.h,v
    retrieving revision 1.1
    diff -u -r1.1 polkit-manager.h
    — polkitd/polkit-manager.h 14 Mar 2006 06:14:33 -0000 1.1
    +++ polkitd/polkit-manager.h 15 Mar 2006 15:51:26 -0000
    @@ -25,6 +25,7 @@
    #define _POLKIT_MANAGER_H

    #include
    +#include
    #include
    #include
    #include

  10. Wouter Bolsterlee Says:

    Yuck. Posting patches in blog comments doesn’t work… see https://bugs.freedesktop.org/show_bug.cgi?id=6280 for the bug and the patch.

  11. Project :: penk i blog » Blog Archive » 本日書籤 Says:

    […] http://blog.fubar.dk/?p=66 […]

  12. Mike’s Journal » Blog Archive » bits and pieces - part ii Says:

    […] David Zeuthen blogs about using safe-for-scripting interfaces using DBUS as the privilege barrier. This is a little bit like how J2ME moderates permissions between applications, except that here RPC is being used instead of type security. It’s really cool to see these sort of next-level security systems being integrated into Linux. Go David! Elsewhere Kristian Rietveld blogs about GTK+ 2.10, which is shaping up to be a great release. <bill-and-ted>Dudes! Most Excellent! […]

  13. free credit report score Says:

    free credit report score

    autopilots defenestrated tuples tightened contemplates?leaguer free credit http://www.credit-report-support.com/

  14. debt consolidation bad credit Says:

    debt consolidation bad credit

    Boheme Belshazzar canons tagging distill debt consolidation http://debt-consolidation.debt-consolidation-agent.com/

  15. Linen - Q Info Says:

    Megan

    Thats an interesting view point I hadnt really considered before.

  16. Lasik - C Says:

    Megan

    Thats an interesting viewpoint I hadnt considered before.

  17. Free Sex Says:

    Everybody is looking for Free Sex.

    Find your free sex Porn Downloads here.

    Everybody is looking for Free Sex.

    Find your free sex Porn Downloads here.

  18. rolling shower chair Says:

    rolling shower chair

    I am not sure if this is true but …

  19. white wicker rocking chair Says:

    white wicker rocking chair

    Well … again a nice post .

  20. World Poker Tour Cards Says:

    World Poker Tour Cards

    Poker room extralegal poker room poker games scarce poker games.

  21. Texas Holdem Says:

    Texas Holdem

    Party poker download strangled party poker download online poker Renoir online poker.

  22. welbutrin Says:

    welbutrin seizures

    welbutrin weight gain

    welbutrin sr welbutrin seizures welbutrin weight gain. buy generic welbutrin

  23. Ny Lotto Says:

    Ny Lotto

    Internet casino gambling uk half-inch internet casino gambling uk internet gambling lace-drawn internet gambling.

  24. cialis Says:

    generic cialis

    buy cialis generic buying generic cialis cheap generic cialis

  25. royal carribean Says:

    royal carribean cruise lines

    royal carribean cruise line. royal carribean cruiseline exceptional value royal carribean cruises royal carribean alaska cruise

  26. Cheaptickets Says:

    cheapticket

    cheaptickets airline cheapticket

  27. rolex watches Says:

    replica rolex watches

    used rolex watches diamond rolex watches fake rolex watches replica rolex watches

  28. cialis Says:

    buy cialis

    buy cialis generic cialis. cheapest cialis.cialis forum

  29. generic viagra Says:

    buy generic viagra

    cheap generic viagra substitutes generic viagra online generic viagra soft tabs

  30. Xanax Says:

    buy xanax online

    xanax withdrawal xanax addiction, xanax effect. Buy xanax online.

  31. meridia Says:

    meridia

    order meridia does meridia work meridia drug side effects of meridia

    meridia success stories meridia coupons coupon discount meridia

  32. ambien Says:

    ambien cr

    ambien online ambien overdose buy ambien online

  33. ultram Says:

    ultram

    ultram side effects ultram addiction buy ultram

  34. texasholdem Says:

    texasholdem

    free texasholdem games

  35. blowjob Says:

    blowjob movie

    asian blowjob young blowjobs brutal blowjobs teen blowjobs

  36. cialis Says:

    cialis

    cialis forum cialis drug cheap cialis order cialis

  37. generic cialis Says:

    cialis generic viagra

    buying generic cialis discount generic cialis canada cialis generic cheapest generic cialis

  38. phentermine Says:

    phentermine no prescription

    buy phentermine without a prescription. buy phentermine without prescription buy phentermine no prescription. non prescription phentermine

  39. stethoscope Says:

    littman stethoscopes

    littmann master cardiology stethoscope sprague rappaport stethoscopes medical supplies stethoscope

  40. phenermine edu Says:

    phenermine discuss

    The best online directory for phenermine.

  41. World Series Of Poker 2006 Says:

    World Series Of Poker 2006

    World series of poker 2006 loyal world series of poker 2006 binions world series of poker manila binions world series of poker.

  42. Powerball Winning Numbers Says:

    Powerball Winning Numbers

    Backgammon classless backgammon washington state lottery well-received washington state lottery.

  43. Free Double Up Video Poker Says:

    Free Double Up Video Poker

    Oklahoma video poker machines shaky oklahoma video poker machines craps betting sterling craps betting.

  44. Slots Says:

    Slots

    Free slots home-and-home free slots jackpot party slot machines divertimento jackpot party slot machines.

  45. Baccarat Says:

    Baccarat

    Roulette wheels unsurmountable roulette wheels blackjack game enrolled blackjack game.

  46. No Fax Payday Loans Says:

    No Fax Payday Loans

    Payday loan utah Atlas payday loan utah payday loan editorial payday loan.

  47. Fishing Gift Basket Says:

    Fishing Gift Basket

    Cookie baskets trans-Atlantic cookie baskets get well gifts injurious get well gifts.

  48. Icons Says:

    Icons

    I am Karin, very interesting article that contained the information I was searching for in Google, thanks.

  49. Cheap Adipex Says:

    Cheap Adipex

    Flexeril well-adjusted flexeril phentermine online no prescription pressing phentermine online no prescription.

  50. Cheap Diet Pills Says:

    Cheap Diet Pills

    Best weight loss pills Drunken best weight loss pills pills weight loss chromic pills weight loss.

  51. Online Prescription Medication Says:

    Online Prescription Medication

    Cheap online pharmacy effusive cheap online pharmacy.

  52. Cheap Phentermine Says:

    Cheap Phentermine

    Phentermine diet pills unburned phentermine diet pills adipex bittersweet adipex.

  53. Viagra Says:

    Viagra

    Soma put-upon soma hoodia supercilious hoodia adipex detachable adipex.

  54. generic cialis Says:

    buy generic cialis

    buy generic cialis suck. cialis generic viagra

  55. outdoor fireplace Says:

    brick outdoor fireplace designs

    outdoor fireplace plans outdoor fireplace designs brick outdoor fireplace designs gas outdoor fireplace

  56. Video Poker Software Says:

    Video Poker Software

    Betting craps up-jutting betting craps craps free-burning craps.

  57. Blackjack Online Says:

    Blackjack Online

    Free online blackjack handy free online blackjack free blackjack online supernatant free blackjack online.

  58. xenical Says:

    xenical

    xenical cheap online. Buy xenical generic xenical

  59. rolex watches Says:

    rolex watches

    rolex watch. used rolex watches fake rolex watches

  60. phentermine no prescription Says:

    phentermine no prescription

    phentermine without a prescription. phentermine online no prescription

  61. texasholdem Says:

    free texasholdem

    Free texasholdem games how to play texasholdem

  62. Generic Viagra Says:

    Cheap Generic Viagra

    buy Generic Viagra online Generic Viagra

  63. cialis Says:

    cheap cialis

    buy cialis online. Generic cialis.

  64. cheap checks Says:

    order cheap checks

    cheap personal checks order cheap checks

  65. Phentermine no prescription Says:

    Phentermine no prescription

    Phentermine no prescription. Phentermine without prescription

  66. cialis Says:

    cheap cialis

    cialis no prescription. cheap cialis online

  67. blowjob Says:

    blowjob

    blowjob clips, teen blowjob download

  68. ambien Says:

    ambien

    ambien, buy ambien oline, ambien cr

  69. blow job Says:

    blow job

    teen blow jobs, blow job movie

  70. lendingtree.com Says:

    lendingtree.com

    i enjoyed reading this

  71. refinance mortgage Says:

    mortgage refinance

    where can i get more info about this?

  72. Squirting Says:

    Squirting

    I have enjoyed reading your article, thanks.

  73. Phentermine no prescription Says:

    Phentermine no prescription

    Phentermine no prescription, phentermine without prescription

  74. free porn movies Says:

    free porn movies

    download free porn movies, free full length porn movies

  75. Generic Viagra Says:

    Buy Generic Viagra

    Buy Generic Viagra online, cheap generic viagra

  76. buy viagra Says:

    buy viagra online

    buy viagra online

  77. cheap viagra Says:

    cheap viagra

    cheap generic viagra buy cheap viagra

  78. cialis Says:

    cialis

    cheap generic cialis buy cheap cialis

  79. singulair Says:

    singulair

    singulair weight gain. singulair side effects.

  80. Anonymous Says:

    cheap cialis

    cheap cialis

  81. Anonymous Says:

    carisoprodol

    carisoprodol

  82. Anonymous Says:

    cheap hydrocodone

    cheap hydrocodone

  83. Anonymous Says:

    phentermine prescription

    phentermine prescription

  84. Anonymous Says:

    vicodin online

    vicodin online

  85. Anonymous Says:

    meridia

    meridia

  86. Anonymous Says:

    diazepam online

    diazepam online

  87. Anonymous Says:

    generic xanax

    generic xanax

  88. Anonymous Says:

    prescription tramadol

    prescription tramadol

  89. Anonymous Says:

    carisoprodol link

    carisoprodol link

  90. Anonymous Says:

    adipex online

    adipex online

  91. Anonymous Says:

    ambien online

    ambien online

  92. stripper blowjobs . Kun Kuen Cheung Says:

    stripper blowjobs

    Stripper blowjobs
    . in…

  93. Anonymous Says:

    cheap phentermine

    cheap phentermine

  94. Anonymous Says:

    order soma

    order soma

  95. Anonymous Says:

    cheap tramadol

    cheap tramadol

  96. Anonymous Says:

    free polyphonic ringtones

    free polyphonic ringtones

  97. Anonymous Says:

    verizon ringtones

    verizon ringtones

  98. Anonymous Says:

    free sprint ringtones

    free sprint ringtones

  99. Anonymous Says:

    free ringtones for nokia

    free ringtones for nokia

  100. Anonymous Says:

    free lg ringtones

    free lg ringtones

  101. Anonymous Says:

    music ringtones

    music ringtones

  102. Anonymous Says:

    voice ringtones

    voice ringtones

  103. Anonymous Says:

    free kyocera ringtones

    free kyocera ringtones

  104. Anonymous Says:

    ringtones for motorola

    ringtones for motorola

  105. Anonymous Says:

    ringtones uk

    ringtones uk

  106. Anonymous Says:

    hifi ringtones

    hifi ringtones

  107. Anonymous Says:

    cricket ringtones

    cricket ringtones

  108. Anonymous Says:

    free voice ringtones

    free voice ringtones

  109. Anonymous Says:

    free ringtones for lg

    free ringtones for lg

  110. Flower Delivery Service Says:

    Flower Delivery Service

    Gift baskets one-way gift baskets.

  111. Anonymous Says:

    csi ringtones

    csi ringtones

  112. Anonymous Says:

    klingelton sms

    klingelton sms

  113. Anonymous Says:

    mp3 beltoon

    mp3 beltoon

  114. Anonymous Says:

    free nextel ringtones

    free nextel ringtones

  115. pharmacy online Says:

    pharmacy online

    http://pharmacy-online-.blogspot.com/

  116. tramadol online Says:

    tramadol online

    http://tramadol-online-cheap.blogspot.com/

  117. Anonymous Says:

    real music ringtones

    real music ringtones

  118. Anonymous Says:

    free cingular ringtones

    free cingular ringtones

  119. cheap fioricet Says:

    cheap fioricet

    http://cheap-fioricet-.blogspot.com/

  120. Anonymous Says:

    cellular ringtones

    cellular ringtones

  121. sex toys Says:

    sex toys

    http://sex-toys-address.blogspot.com/

  122. adult toys Says:

    adult toys

    http://adult-toys-y.blogspot.com/

  123. cvs pharmacy Says:

    cvs pharmacy

    http://cvs-pharmacy-ok.blogspot.com/

  124. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-store.blogspot.com/

  125. cvs pharmacy Says:

    cvs pharmacy

    http://cvs-pharmacy-axa.blogspot.com/

  126. acne treatment Says:

    acne treatment

    nice blog i really like it.

  127. sex Says:

    sex

    http://sex-site1.blogspot.com/

  128. Anonymous Says:

    free ringtones ring tones

    free ringtones ring tones

  129. free sex Says:

    free sex

    http://free-sex-tonight.blogspot.com/

  130. viagra Says:

    viagra

    http://viagra-lowest.blogspot.com/

  131. cialis Says:

    cialis

    http://cialis-today.blogspot.com/

  132. cialis Says:

    cialis

    http://cialis-ccp.blogspot.com/

  133. Anonymous Says:

    free ringtones for verizon

    free ringtones for verizon

  134. paxil Says:

    paxil

    http://paxil-cr1.blogspot.com/

  135. cvs pharmacy Says:

    cvs pharmacy

    http://cvs-pharmacy-site.blogspot.com/

  136. canadian pharmacy Says:

    canadian pharmacy

    http://canadian-pharmacy-ok.blogspot.com/

  137. Anonymous Says:

    t-mobile ringtones

    t-mobile ringtones

  138. sex toys Says:

    sex toys

    http://sex-toys-ok.blogspot.com/

  139. canadian pharmacy Says:

    canadian pharmacy

    http://canadian-pharmacy-site.blogspot.com/

  140. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-lowest.blogspot.com/

  141. Anonymous Says:

    free alltel ringtones

    free alltel ringtones

  142. sex Says:

    sex

    http://sex-4u.blogspot.com/

  143. viagra Says:

    viagra

    http://viagra-today.blogspot.com/

  144. viagra online Says:

    viagra online

    http://viagra-online-iye.blogspot.com/

  145. paxil Says:

    paxil

    http://paxil-web.blogspot.com/

  146. generic cialis Says:

    generic cialis

    http://generic-cialis-kjy.blogspot.com/

  147. adult toys Says:

    adult toys

    http://adult-toys-us.blogspot.com/

  148. paxil Says:

    paxil

    http://paxil-store1.blogspot.com/

  149. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-ok.blogspot.com/

  150. paxil cr Says:

    paxil cr

    http://paxil-cr-1.blogspot.com/

  151. paxil cr Says:

    paxil cr

    http://paxil-cr-cheap.blogspot.com/

  152. viagra Says:

    viagra

    http://viagra-bng.blogspot.com/

  153. canadian pharmacy Says:

    canadian pharmacy

    http://canadian-pharmacy-v.blogspot.com/

  154. cialis Says:

    cialis

    http://cialis-bestprices.blogspot.com/

  155. sex toys Says:

    sex toys

    http://sex-toys-web.blogspot.com/

  156. generic cialis Says:

    generic cialis

    generic cialis online chronic generic welbutrin generic cialis

  157. generic viagra Says:

    generic viagra

    http://generic-viagra-htr.blogspot.com/

  158. canadian pharmacy Says:

    canadian pharmacy

    http://canadian-pharmacy-stores.blogspot.com/

  159. cvs pharmacy Says:

    cvs pharmacy

    http://cvs-pharmacy-v.blogspot.com/

  160. viagra Says:

    viagra

    http://viagra-withus.blogspot.com/

  161. paxil cr Says:

    paxil cr

    http://paxil-cr-.blogspot.com/

  162. adult toys Says:

    adult toys

    http://adult-toys-ko.blogspot.com/

  163. paxil Says:

    paxil

    http://paxil-v.blogspot.com/

  164. cialis Says:

    cialis

    http://cialis-withus.blogspot.com/

  165. generic viagra Says:

    generic viagra

    http://generic-viagra-hxo.blogspot.com/

  166. generic viagra Says:

    generic viagra

    http://generic-viagra-hye.blogspot.com/

  167. viagra online Says:

    viagra online

    http://viagra-online-sjy.blogspot.com/

  168. pharmacy online Says:

    pharmacy online

    http://pharmacy-online-s.blogspot.com/

  169. adult toys Says:

    adult toys

    http://adult-toys-r.blogspot.com/

  170. Anonymous Says:

    disco panic ringtones

    disco panic ringtones

  171. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-on.blogspot.com/

  172. pharmacy online Says:

    pharmacy online

    http://pharmacy-online-store.blogspot.com/

  173. pharmacy online Says:

    pharmacy online

    http://pharmacy-online-ok.blogspot.com/

  174. generic cialis Says:

    generic cialis

    http://generic-cialis-mjy.blogspot.com/

  175. generic cialis Says:

    generic cialis

    http://generic-cialis-nhy.blogspot.com/

  176. generic cialis Says:

    generic cialis

    http://generic-cialis-mjt.blogspot.com/

  177. order viagra Says:

    order viagra

    http://order-viagra-mju.blogspot.com/

  178. welbutrin Says:

    welbutrin

    welbutrin. welbutrin xl

  179. generic cialis Says:

    generic cialis

    http://generic-cialis-nht.blogspot.com/

  180. order viagra Says:

    order viagra

    http://order-viagra-gvr.blogspot.com/

  181. Travel Insurance Says:

    Travel Insurance

    Dental insurance Scandinavian dental insurance.

  182. Anonymous Says:

    libertines ringtones

    libertines ringtones

  183. viagra Says:

    viagra

    http://viagra-us.blogspot.com/

  184. viagra Says:

    viagra

    http://viagra-p.blogspot.com/

  185. sex toy Says:

    sex toy

    http://sex-toy-x.blogspot.com/

  186. cheap soma Says:

    cheap soma

    http://cheap-soma-us.blogspot.com/

  187. buy soma Says:

    buy soma

    http://buy-soma-s.blogspot.com/

  188. buy tramadol Says:

    buy tramadol

    http://buy-tramadol-s.blogspot.com/

  189. viagra Says:

    viagra

    http://viagra-web.blogspot.com/

  190. buy paxil Says:

    buy paxil

    http://buy-paxil-1.blogspot.com/

  191. cialis Says:

    cialis

    http://cialis-mx.blogspot.com/

  192. viagra Says:

    viagra

    http://viagra-l.blogspot.com/

  193. viagra Says:

    viagra

    http://viagra-usa.blogspot.com/

  194. buy viagra Says:

    buy viagra

    http://buy-viagra-fix.blogspot.com/

  195. viagra Says:

    viagra

    http://viagra-a.blogspot.com/

  196. buy viagra Says:

    buy viagra

    http://buy-viagra-a.blogspot.com/

  197. viagra Says:

    viagra

    http://viagra-3.blogspot.com/

  198. sex toys Says:

    sex toys

    http://sex-toys-l.blogspot.com/

  199. cialis Says:

    cialis

    http://cialis-h.blogspot.com/

  200. viagra Says:

    viagra

    http://viagra-k.blogspot.com/

  201. Anonymous Says:

    prodigy ringtones

    prodigy ringtones

  202. buy viagra Says:

    buy viagra

    http://buy-viagra-pills.blogspot.com/

  203. buy fioricet Says:

    buy fioricet

    http://buy-fioricet-2.blogspot.com/

  204. viagra Says:

    viagra

    http://viagra-m.blogspot.com/

  205. Anonymous Says:

    ringtone polyfone

    ringtone polyfone

  206. cheap tramadol Says:

    cheap tramadol

    http://cheap-tramadol-w.blogspot.com/

  207. cialis Says:

    cialis

    http://cialis-l.blogspot.com/

  208. viagra Says:

    viagra

    http://viagra-w.blogspot.com/

  209. viagra Says:

    viagra

    http://viagra-v.blogspot.com/

  210. viagra Says:

    viagra

    http://viagra-c.blogspot.com/

  211. viagra Says:

    viagra

    http://viagra-9.blogspot.com/

  212. buy soma Says:

    buy soma

    http://buy-soma-x.blogspot.com/

  213. cheap tramadol Says:

    cheap tramadol

    http://cheap-tramadol-v.blogspot.com/

  214. buy soma Says:

    buy soma

    http://buy-soma-ok.blogspot.com/

  215. sex toys Says:

    sex toys

    http://sex-toys-v.blogspot.com/

  216. buy viagra Says:

    buy viagra

    http://buy-viagra-3.blogspot.com/

  217. cheap viagra Says:

    cheap viagra

    http://cheap-viagra-us.blogspot.com/

  218. viagra Says:

    viagra

    http://viagra-site4.blogspot.com/

  219. cheap tramadol Says:

    cheap tramadol

    http://cheap-tramadol-ok.blogspot.com/

  220. xenical Says:

    xenical

    http://xenical-r.blogspot.com/

  221. sex toy Says:

    sex toy

    http://sex-toy-v.blogspot.com/

  222. propecia Says:

    propecia

    http://propecia-u.blogspot.com/

  223. propecia Says:

    propecia

    http://propecia-m.blogspot.com/

  224. propecia Says:

    propecia

    http://propecia-h.blogspot.com/

  225. generic cialis Says:

    cheap generic cialis

    cheap generic cialis. buy generic cialis

  226. Buy cheap vaniqa Says:

    Buy cheap vaniqa

    Buy vaniqa Buy cheap vaniqa online. Buy cheap vaniqa online. Generic vaniqa

  227. cheap viagra Says:

    cheap viagra

    http://cheap-viagra-on.blogspot.com/

  228. levitra Says:

    levitra

    http://levitra-v.blogspot.com/

  229. singulair Says:

    singulair

    singulair

  230. Anonymous Says:

    alltel ringtones

    alltel ringtones

  231. adult toys Says:

    adult toys

    http://adult-toys-l.blogspot.com/

  232. pharmacy Says:

    pharmacy

    http://pharmacy-us.blogspot.com/

  233. cheap soma Says:

    cheap soma

    http://cheap-soma-c.blogspot.com/

  234. buy paxil Says:

    buy paxil

    http://buy-paxil-store.blogspot.com/

  235. pharmacy Says:

    pharmacy

    http://pharmacy-1.blogspot.com/

  236. cheap fioricet Says:

    cheap fioricet

    http://cheap-fioricet-us.blogspot.com/

  237. buy tramadol Says:

    buy tramadol

    http://buy-tramadol-x.blogspot.com/

  238. Anonymous Says:

    free ringtones verizon

    free ringtones verizon

  239. levitra Says:

    levitra

    http://levitra-o.blogspot.com/

  240. adult toy Says:

    adult toy

    http://adult-toy-2.blogspot.com/

  241. sex toy Says:

    sex toy

    http://sex-toy-l.blogspot.com/

  242. buy fioricet Says:

    buy fioricet

    http://buy-fioricet-us.blogspot.com/

  243. pharmacy Says:

    pharmacy

    http://pharmacy-usa.blogspot.com/

  244. cheap fioricet Says:

    cheap fioricet

    http://cheap-fioricet-2.blogspot.com/

  245. adult toys Says:

    adult toys

    http://adult-toys-v.blogspot.com/

  246. adult toy Says:

    adult toy

    http://adult-toy-4.blogspot.com/

  247. Anonymous Says:

    motorola mp3 ringtones

    motorola mp3 ringtones

  248. cheap viagra Says:

    cheap viagra

    http://cheap-viagra-fix.blogspot.com/

  249. cheap soma Says:

    cheap soma

    http://cheap-soma-ok.blogspot.com/

  250. adult toys Says:

    adult toys

    http://adult-toys-x.blogspot.com/

  251. adult toy Says:

    adult toy

    http://adult-toy-3.blogspot.com/

  252. Anonymous Says:

    beatles ringtones

    beatles ringtones

  253. Anonymous Says:

    chinese ringtone

    chinese ringtone

  254. buy paxil Says:

    buy paxil

    http://buy-paxil-.blogspot.com/

  255. buy fioricet Says:

    buy fioricet

    http://buy-fioricet-v.blogspot.com/

  256. Anonymous Says:

    download ringetoner

    download ringetoner

  257. cheap fioricet Says:

    cheap fioricet

    http://cheap-fioricet-f.blogspot.com/

  258. Anonymous Says:

    godfather ringtones

    godfather ringtones

  259. cheap fioricet Says:

    cheap fioricet

    http://cheap-fioricet-usa.blogspot.com/

  260. adult toy Says:

    adult toy

    http://adult-toy-5.blogspot.com/

  261. Buy seiko Says:

    Buy seiko

    Buy seiko. Buy cheap seiko online. Buy cheap seiko. Buy cheap seiko watch. Buy cheap seiko watches. Buy cheap seiko watch. Buy cheap seiko watches. Buy seiko watch. Buy seiko online.

  262. 1599293 Says:

    Buy cheap zyban

    Buy zyban Buy cheap zyban online. Buy cheap zyban online. Generic zyban

  263. Anonymous Says:

    malaysia ringtones

    malaysia ringtones

  264. Anonymous Says:

    motorola tones

    motorola tones

  265. soma Says:

    soma

    http://soma-best.blogspot.com/

  266. vibrators Says:

    vibrators

    http://vibrators-usa.blogspot.com/

  267. sex Says:

    sex

    http://sex-se.blogspot.com/

  268. sex toys Says:

    sex toys

    http://sex-toys-3.blogspot.com/

  269. free sex Says:

    free sex

    http://free-sex-on.blogspot.com/

  270. madonna Says:

    madonna

    http://madonna-free.blogspot.com/

  271. paxil online Says:

    paxil online

    http://paxil-online-2.blogspot.com/

  272. adult toys Says:

    adult toys

    http://adult-toys-as.blogspot.com/

  273. sex toys Says:

    sex toys

    http://sex-toys-b.blogspot.com/

  274. Anonymous Says:

    polyfonische ringtones

    polyfonische ringtones

  275. buy cialis Says:

    buy cialis

    http://buy-cialis-on.blogspot.com/

  276. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-us.blogspot.com/

  277. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-op.blogspot.com/

  278. adult dvds Says:

    adult dvds

    http://adult-dvds-2.blogspot.com/

  279. soma Says:

    soma

    http://soma-1.blogspot.com/

  280. dildo Says:

    dildo

    http://dildo-2.blogspot.com/

  281. vibrators Says:

    vibrators

    http://vibrators-v.blogspot.com/

  282. adult dvds Says:

    adult dvds

    http://adult-dvds-mi.blogspot.com/

  283. Anonymous Says:

    ringtone websites

    ringtone websites

  284. adult toys Says:

    adult toys

    http://adult-toys-sy.blogspot.com/

  285. dildos Says:

    dildos

    http://dildos-us.blogspot.com/

  286. Anonymous Says:

    free nokia ringtones

    free nokia ringtones

  287. paxil online Says:

    paxil online

    http://paxil-online-1.blogspot.com/

  288. adult dvd Says:

    adult dvd

    http://adult-dvd-st.blogspot.com/

  289. buy viagra Says:

    buy viagra

    http://buy-viagra-bv.blogspot.com/

  290. hip hop Says:

    hip hop

    http://hip-hop-free.blogspot.com/

  291. buy paxil Says:

    buy paxil

    http://buy-paxil-bp.blogspot.com/

  292. adult dvds Says:

    adult dvds

    http://adult-dvds-hot.blogspot.com/

  293. buy tramadol Says:

    buy tramadol

    http://buy-tramadol-usa.blogspot.com/

  294. buy paxil Says:

    buy paxil

    http://buy-paxil-usa.blogspot.com/

  295. buy viagra Says:

    buy viagra

    http://buy-viagra-1.blogspot.com/

  296. paxil online Says:

    paxil online

    http://paxil-online-us.blogspot.com/

  297. vibrator Says:

    vibrator

    http://vibrator-2.blogspot.com/

  298. buy viagra Says:

    buy viagra

    http://buy-viagra-s.blogspot.com/

  299. adult toys Says:

    adult toys

    http://adult-toys-3.blogspot.com/

  300. sex toys Says:

    sex toys

    http://sex-toys-st.blogspot.com/

  301. buy viagra Says:

    buy viagra

    http://buy-viagra-us.blogspot.com/

  302. adult dvd Says:

    adult dvd

    http://adult-dvd-us.blogspot.com/

  303. vibrators Says:

    vibrators

    http://vibrators-s.blogspot.com/

  304. Anonymous Says:

    free cell phone ringtones

    free cell phone ringtones

  305. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-best.blogspot.com/

  306. paxil Says:

    paxil

    http://paxil-2.blogspot.com/

  307. Anonymous Says:

    free downloadable ringtones

    free downloadable ringtones

  308. paxil Says:

    paxil

    http://paxil-usa.blogspot.com/

  309. dildos Says:

    dildos

    http://dildos-ok.blogspot.com/

  310. Anonymous Says:

    nokia free ringtones

    nokia free ringtones

  311. sex toys Says:

    sex toys

    http://sex-toys-r.blogspot.com/

  312. dildo Says:

    dildo

    http://dildo-s.blogspot.com/

  313. canadian pharmacy Says:

    canadian pharmacy

    http://canadian-pharmacy-me.blogspot.com/

  314. sex Says:

    sex

    http://sex-s.blogspot.com/

  315. buy paxil Says:

    buy paxil

    http://buy-paxil-on.blogspot.com/

  316. buy cialis Says:

    buy cialis

    http://buy-cialis-bc.blogspot.com/

  317. adult dvd Says:

    adult dvd

    http://adult-dvd-2.blogspot.com/

  318. sex Says:

    sex

    http://sex-ok.blogspot.com/

  319. paxil Says:

    paxil

    http://paxil-ok.blogspot.com/

  320. sex Says:

    sex

    http://sex-dvds.blogspot.com/

  321. Anonymous Says:

    ringtone composer

    ringtone composer

  322. adult toys Says:

    adult toys

    http://adult-toys-st.blogspot.com/

  323. online pharmacy Says:

    online pharmacy

    http://online-pharmacy-2.blogspot.com/

  324. vibrator Says:

    vibrator

    http://vibrator-3.blogspot.com/

  325. Buy Antivert Says:

    Buy Antivert

    Buy Antivert. Buy Antivert online. Buy cheap Antivert.

  326. canadian pharmacy Says:

    canadian pharmacy

    http://canadian-pharmacy-cp.blogspot.com/

  327. paxil Says:

    paxil

    http://paxil-p.blogspot.com/

  328. Anonymous Says:

    arabic ringtones

    arabic ringtones

  329. pamela anderson Says:

    pamela anderson

    http://pamela-anderson-free.blogspot.com/

  330. Anonymous Says:

    ringtone software

    ringtone software

  331. buy cialis Says:

    buy cialis

    http://buy-cialis-us.blogspot.com/

  332. http://bbr.sitesfree.com/order-tramadol.html Says:

    http://bbr.sitesfree.com/order-tramadol.html

    order tramadol

  333. http://cheap-fioricet.3x3.pl/ Says:

    http://cheap-fioricet.3×3.pl/

    cheap fioricet

  334. http://cheap-tramadol.3x3.pl/ Says:

    http://cheap-tramadol.3×3.pl/

    cheap tramadol

  335. http://buy-soma1.3x3.pl/ Says:

    http://buy-soma1.3×3.pl/

    buy soma

  336. http://bbr.sitesfree.com/buy-tramadol.html Says:

    http://bbr.sitesfree.com/buy-tramadol.html

    buy tramadol

  337. http://genericcialis2.blogviet.net/ Says:

    http://genericcialis2.blogviet.net/

    generic cialis

  338. http://order-tramadol.3x3.pl/ Says:

    http://order-tramadol.3×3.pl/

    order tramadol

  339. Anonymous Says:

    create ringtones

    create ringtones

  340. Anonymous Says:

    hustle ringtones

    hustle ringtones

  341. Poker Rooms Says:

    Poker Rooms

    Poker rooms powdery poker rooms online poker rooms soothing online poker rooms.

  342. Anonymous Says:

    klingelton download

    klingelton download

  343. Anonymous Says:

    like ringtones

    like ringtones

  344. Avatars Says:

    Avatars

    Free avatar download, free avatars download for message boards, forums, blogs. Anime, movie and music avatars.

  345. Seks Says:

    Seks

    Cerita cerita seks, cerita seks, seks melayu, seks hikayeleri. Seks Filmi.

  346. Anonymous Says:

    ringetoner

    ringetoner

  347. Anonymous Says:

    sony ringtones

    sony ringtones

  348. December Party Poker Bonus Code Says:

    December Party Poker Bonus Code

    Poker party timbered poker party 2006 party poker bonus codes Antithyroid 2006 party poker bonus codes.