Package: bilibop Version: 0.4.16~quidame Architecture: armhf Maintainer: bilibop project Installed-Size: 50 Depends: bilibop-lockfs (= 0.4.16~quidame), bilibop-rules (= 0.4.16~quidame) Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: extra Section: metapackages Filename: pool/main/b/bilibop/bilibop_0.4.16~quidame_armhf.deb Size: 10826 SHA256: e09878a7d4baed14d8ae43634dccdf9bcbb05f9782664f1bcd9d3241db7be785 SHA1: 0006c259790cd4d8f2d14dd1a1ecbc1628db3345 MD5sum: e17ff5af1bbea517e6d020280d4e289c Description: run Debian GNU/Linux from external media - metapackage Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . The installation of this metapackage will install other BILIBOP packages as dependencies. You should not install it, unless your system is writable and runs from an external device. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-common Source: bilibop Version: 0.4.16~quidame Architecture: armhf Maintainer: bilibop project Installed-Size: 212 Depends: udev Suggests: aufs-tools, bilibop-lockfs, bilibop-device-policy, cryptsetup, dmsetup, lvm2 Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-common_0.4.16~quidame_armhf.deb Size: 62898 SHA256: e3c13f0ff12962ce428c21adb3281545a7a88a9ab7c6a358ec9748194b7d93e8 SHA1: a63e17a8238504f803885dd963c10566360b5ef8 MD5sum: 2c7e030a08d2a849088dce223b34d0ef Description: shell functions for bilibop scripts Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides shell functions usable by other bilibop scripts on the running system or into the initramfs environment. These functions use /dev, /proc and /sys databases to output the drive name or the partition hosting the running system, and are fully usable by any unprivileged user or application. Dm-crypt, LVM, loop devices and aufs root filesystems (and any combination of them) are supported. A 'drivemap' command is also provided, to show block devices in a tree of dependencies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-lockfs Source: bilibop Version: 0.4.16~quidame Architecture: armhf Maintainer: bilibop project Installed-Size: 191 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3) Recommends: aufs-tools, cryptsetup Suggests: bilibop-device-policy, gnome-icon-theme, libnotify-bin, plymouth Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-lockfs_0.4.16~quidame_armhf.deb Size: 38928 SHA256: 9701dcae3546594bb92bf0dfb7cc436e1b9215cf944a274280b60f2e062e3f23 SHA1: 4ebf845548311aa5f36483a808f78b99032d8ee5 MD5sum: c43cc52376a2efb2a5526a1112ac3298 Description: lock filesystems and write changes into RAM Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . If the lockfs feature is enabled (in a configuration file, in the boot commandline or by a heuristic), nothing will be written on the filesystems listed in /etc/fstab, except for those that have been whitelisted, or for the encrypted swap devices. . The root filesystem is locked (set readonly, using aufs) by an initramfs script which also modifies the temporary fstab to prepare other filesystems to be locked later by a mount helper script. . bilibop-lockfs provides the following features: * whitelist based policy: filesystems on which you want to allow persistent changes must be explicitly listed in a configuration file. * not only filesystems are set read-only, but also block devices: this forbids changes of the partition table, boot sectors, LUKS headers and LVM metadata. * management of swap devices, that can be used as is, noauto, only if encrypted or not used at all. * desktop notifications at startup about filesystems status, to inform the user that volatile or persistent changes are allowed or not, and where. . This package can be used as an alternative to fsprotect, especially for writable operating systems embedded on a USB stick; but it may also be installed on public or personal computers, for daily use, testing purposes or as a tool in anti-forensics strategies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-rules Source: bilibop Version: 0.4.16~quidame Architecture: armhf Maintainer: bilibop project Installed-Size: 227 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3), debconf (>= 0.5) | debconf-2.0 Recommends: grub-common, lvm2, udisks Suggests: bilibop-lockfs, cryptsetup, grub-coreboot | grub-efi-amd64 | grub-efi-ia32 | grub-ieee1275 | grub-pc, pmount, policykit-1 Conflicts: bilibop-udev Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-rules_0.4.16~quidame_armhf.deb Size: 48612 SHA256: 28d2b6a0e72edc89b6301697fff757f831131214e26fc4c03630eed736e794b7 SHA1: 467e6a5a64bb69b264606af313a9cf247938cc65 MD5sum: 45f9a5a4b1e5e9bdc4f3fb87b9789492 Description: device management rules for OS running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its main goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application, but some other convenient and optional rules have been added for desktop-level management of the system disk and partitions (need udisks), as well as the internal disks of the computer. The 'lsbilibop' command allows the admin to update udev properties of the devices after the configuration file has been modified. . To ease device management, bilibop-rules also provides helper scripts to: * build custom bilibop udev rules running faster than the generic ones * make some persistent and cumulative rules files unpersistent * use either a fake or an always-up-to-date grub device map * filter Physical Volumes, to activate only those needed by the system . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, including LiveUSB systems. See also the bilibop-udev package. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-udev Source: bilibop Version: 0.4.16~quidame Architecture: armhf Maintainer: bilibop project Installed-Size: 66 Depends: bilibop-common (= 0.4.16~quidame) Suggests: bilibop-lockfs Conflicts: bilibop-rules Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-udev_0.4.16~quidame_armhf.deb Size: 12892 SHA256: 0700fffa957695736752b656976116a6267788c993eaf8e433b4b035a743f84f SHA1: 19d92bae997c3e81ccf2d5e82d62872336214202 MD5sum: 81d1fd068ffb6db9ed3b21ffd5c31bc9 Description: minimal udev rule for Debian GNU/Linux running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application. . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, especially LiveUSB systems. See also the bilibop-rules package. . Some features may require Linux kernel 2.6.37 or higher to work properly.