パッケージ: bilibop-lockfs (0.6.3)
bilibop-lockfs に関するリンク
Debian の資源:
bilibop ソースパッケージをダウンロード:
メンテナ:
外部の資源:
- ホームページ [un.poivron.org]
類似のパッケージ:
lock filesystems and write changes into RAM
Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation.
If the lockfs feature is enabled (in a configuration file, in the boot commandline or by a heuristic), nothing will be written on the filesystems listed in /etc/fstab, except for those that have been whitelisted, or for the encrypted swap devices. More, bilibop-lockfs now is able to detect if the drive has been locked by a physical switch, and then overrides its own settings to unconditionally apply a 'hard' policy.
The root filesystem is locked (set readonly, using either aufs or overlay) by an initramfs script which also modifies the temporary fstab to prepare other filesystems to be locked later by a mount helper script.
bilibop-lockfs provides the following features:
* whitelist based policy: filesystems on which you want to allow persistent changes must be explicitly listed in a configuration file. * swap devices policy: they can be used 'as is', noauto, only if encrypted, only if encrypted with a random key, or not used at all. * not only filesystems are set read-only, but also block devices: this forbids changes of the partition table, boot sectors, LUKS headers and LVM metadata. * plymouth messages to know at boot time if bilibop-lockfs is enabled or not, or if an error occurred. * desktop notifications at startup about filesystems status, to inform the user that volatile or persistent changes are allowed or not, and where.
This package can be used as an alternative to fsprotect or overlayroot, especially for writable operating systems embedded on a USB stick; but it may also be installed on public or personal computers, for daily use, kiosks, testing purposes, or as a tool in anti-forensics strategies.
その他の bilibop-lockfs 関連パッケージ
|
|
|
|
-
- dep: bilibop-common (= 0.6.3)
- shell functions for bilibop scripts
-
- dep: initramfs-tools
- 汎用モジュラー initramfs ジェネレータ (自動化)
-
- dep: udev (>= 242-6)
- /dev/ およびホットプラグ管理デーモン
-
- rec: cryptsetup
- ディスク暗号化サポート - 起動スクリプト
-
- sug: aufs-dkms
- パッケージは利用できません
-
- sug: bilibop-device-policy
- 以下のパッケージによって提供される仮想パッケージです: bilibop-rules, bilibop-udev
-
- sug: gnome-icon-theme
- GNOME Desktop アイコンテーマ
-
- sug: libnotify-bin
- 通知デーモンにデスクトップ通知を送信 (ユーティリティ)
-
- sug: plymouth
- 起動時アニメーション、ロガーおよび I/O マルチプレクサ