软件包：bilibop-lockfs（0.6.3 以及其他的）

[ 源代码： bilibop  ]

lock filesystems and write changes into RAM

Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation.

If the lockfs feature is enabled (in a configuration file, in the boot commandline or by a heuristic), nothing will be written on the filesystems listed in /etc/fstab, except for those that have been whitelisted, or for the encrypted swap devices. More, bilibop-lockfs now is able to detect if the drive has been locked by a physical switch, and then overrides its own settings to unconditionally apply a 'hard' policy.

The root filesystem is locked (set readonly, using either aufs or overlay) by an initramfs script which also modifies the temporary fstab to prepare other filesystems to be locked later by a mount helper script.

bilibop-lockfs provides the following features:

 * whitelist based policy: filesystems on which you want to allow persistent
   changes must be explicitly listed in a configuration file.
 * swap devices policy: they can be used 'as is', noauto, only if encrypted,
   only if encrypted with a random key, or not used at all.
 * not only filesystems are set read-only, but also block devices: this
   forbids changes of the partition table, boot sectors, LUKS headers and
   LVM metadata.
 * plymouth messages to know at boot time if bilibop-lockfs is enabled or
   not, or if an error occurred.
 * desktop notifications at startup about filesystems status, to inform the
   user that volatile or persistent changes are allowed or not, and where.

This package can be used as an alternative to fsprotect or overlayroot, especially for writable operating systems embedded on a USB stick; but it may also be installed on public or personal computers, for daily use, kiosks, testing purposes, or as a tool in anti-forensics strategies.

标签: 系统管理: 系统开机, 文件系统工具, 实做语言: sh, bash, ksh, tcsh 或其他 shells, 角色: role::plugin, role::program, 应用程序集: Debian

其他与 bilibop-lockfs 有关的软件包

• dep: bilibop-common (= 0.6.3+b1) [除 riscv64]

  shell functions for bilibop scripts

  dep: bilibop-common (= 0.6.3+b3) [riscv64]

• dep: initramfs-tools

  generic modular initramfs generator (automation)

• dep: udev (>= 242-6)

  /dev/目录和热插拔管理守护程序

• rec: cryptsetup

  disk encryption support - startup scripts

• sug: aufs-dkms

  软件包暂时不可用

• sug: bilibop-device-policy

  本虚包由这些包填实： bilibop-rules, bilibop-udev

• sug: gnome-icon-theme

  This package contains the default icon theme used by the GNOME

• sug: libnotify-bin

  sends desktop notifications to a notification daemon (Utilities)

• sug: plymouth

  boot animation, logger and I/O multiplexer

下载 bilibop-lockfs

下载可用于所有硬件架构的

硬件架构	版本	软件包大小	安装后大小	文件
alpha （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
amd64	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
arm64	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
armel	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
armhf	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
hppa （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
i386	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
ia64 （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
m68k （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
mips64el	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
ppc64 （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
ppc64el	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
riscv64	0.6.3+b3	36.8 kB	128.0 kB	[文件列表]
s390x	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
sh4 （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
sparc64 （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]
x32 （非官方移植版）	0.6.3+b1	36.8 kB	128.0 kB	[文件列表]