Package: bilibop Version: 0.4.16~quidame Architecture: ia64 Maintainer: bilibop project Installed-Size: 50 Depends: bilibop-lockfs (= 0.4.16~quidame), bilibop-rules (= 0.4.16~quidame) Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: extra Section: metapackages Filename: pool/main/b/bilibop/bilibop_0.4.16~quidame_ia64.deb Size: 10824 SHA256: d6d845cc863c04d4e4000256f7a444379236004fab681fb204caf9e1500f7aa2 SHA1: 8f35fb9b9adfd825ce5d098a36109a1846a91607 MD5sum: 8e990775c0b7dfe737c1cab307365a3d Description: run Debian GNU/Linux from external media - metapackage Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . The installation of this metapackage will install other BILIBOP packages as dependencies. You should not install it, unless your system is writable and runs from an external device. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-common Source: bilibop Version: 0.4.16~quidame Architecture: ia64 Maintainer: bilibop project Installed-Size: 212 Depends: udev Suggests: aufs-tools, bilibop-lockfs, bilibop-device-policy, cryptsetup, dmsetup, lvm2 Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-common_0.4.16~quidame_ia64.deb Size: 62896 SHA256: 1c054bb04e1762e7985858ea0f4712fb893322e9055d73947128bc62880218dc SHA1: 27ddc3cb81f4dcc10f960eab9cb82f701194d899 MD5sum: a23b61f0362419661e324dc628e56b5c Description: shell functions for bilibop scripts Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides shell functions usable by other bilibop scripts on the running system or into the initramfs environment. These functions use /dev, /proc and /sys databases to output the drive name or the partition hosting the running system, and are fully usable by any unprivileged user or application. Dm-crypt, LVM, loop devices and aufs root filesystems (and any combination of them) are supported. A 'drivemap' command is also provided, to show block devices in a tree of dependencies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-lockfs Source: bilibop Version: 0.4.16~quidame Architecture: ia64 Maintainer: bilibop project Installed-Size: 191 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3) Recommends: aufs-tools, cryptsetup Suggests: bilibop-device-policy, gnome-icon-theme, libnotify-bin, plymouth Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-lockfs_0.4.16~quidame_ia64.deb Size: 38918 SHA256: 9ef0d0fe2de36986ab9924a6443604162710ece206f5a881fe07a2966b826f05 SHA1: 39f26d4f9d57defd4c58637dea700c44de6d2d00 MD5sum: d637a981b0c3b558028d6acefc6aea27 Description: lock filesystems and write changes into RAM Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . If the lockfs feature is enabled (in a configuration file, in the boot commandline or by a heuristic), nothing will be written on the filesystems listed in /etc/fstab, except for those that have been whitelisted, or for the encrypted swap devices. . The root filesystem is locked (set readonly, using aufs) by an initramfs script which also modifies the temporary fstab to prepare other filesystems to be locked later by a mount helper script. . bilibop-lockfs provides the following features: * whitelist based policy: filesystems on which you want to allow persistent changes must be explicitly listed in a configuration file. * not only filesystems are set read-only, but also block devices: this forbids changes of the partition table, boot sectors, LUKS headers and LVM metadata. * management of swap devices, that can be used as is, noauto, only if encrypted or not used at all. * desktop notifications at startup about filesystems status, to inform the user that volatile or persistent changes are allowed or not, and where. . This package can be used as an alternative to fsprotect, especially for writable operating systems embedded on a USB stick; but it may also be installed on public or personal computers, for daily use, testing purposes or as a tool in anti-forensics strategies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-rules Source: bilibop Version: 0.4.16~quidame Architecture: ia64 Maintainer: bilibop project Installed-Size: 227 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3), debconf (>= 0.5) | debconf-2.0 Recommends: grub-common, lvm2, udisks Suggests: bilibop-lockfs, cryptsetup, grub-coreboot | grub-efi-amd64 | grub-efi-ia32 | grub-ieee1275 | grub-pc, pmount, policykit-1 Conflicts: bilibop-udev Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-rules_0.4.16~quidame_ia64.deb Size: 48608 SHA256: d817372192f48e7792d478c3112ca259ac8e37586a5731ab727bb7f582500191 SHA1: 9a1a190650e5c421b7e93290f049129259c98dca MD5sum: d4fb1850f44b976813820d5c4dc735b8 Description: device management rules for OS running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its main goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application, but some other convenient and optional rules have been added for desktop-level management of the system disk and partitions (need udisks), as well as the internal disks of the computer. The 'lsbilibop' command allows the admin to update udev properties of the devices after the configuration file has been modified. . To ease device management, bilibop-rules also provides helper scripts to: * build custom bilibop udev rules running faster than the generic ones * make some persistent and cumulative rules files unpersistent * use either a fake or an always-up-to-date grub device map * filter Physical Volumes, to activate only those needed by the system . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, including LiveUSB systems. See also the bilibop-udev package. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-udev Source: bilibop Version: 0.4.16~quidame Architecture: ia64 Maintainer: bilibop project Installed-Size: 66 Depends: bilibop-common (= 0.4.16~quidame) Suggests: bilibop-lockfs Conflicts: bilibop-rules Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-udev_0.4.16~quidame_ia64.deb Size: 12900 SHA256: 58eda98966dc83fe7f267f714f1b561019097777f236728036e179d54d7839bd SHA1: b27570967b912f76d7f2a10b372a8d3645241655 MD5sum: 29ec80ffba5688fbb672f0898eca28a1 Description: minimal udev rule for Debian GNU/Linux running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application. . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, especially LiveUSB systems. See also the bilibop-rules package. . Some features may require Linux kernel 2.6.37 or higher to work properly.