Package: bilibop Version: 0.4.16~quidame Architecture: s390x Maintainer: bilibop project Installed-Size: 50 Depends: bilibop-lockfs (= 0.4.16~quidame), bilibop-rules (= 0.4.16~quidame) Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: extra Section: metapackages Filename: pool/main/b/bilibop/bilibop_0.4.16~quidame_s390x.deb Size: 10822 SHA256: cb1ce95ecf4680bbd74cd7830a610853b1097663bd8fa2c66acabc0ed2b851fb SHA1: abcc3c0a95ff4a7c2a1fff4efe868360201f468a MD5sum: 5cbdf783605777b8f8292de47d269ce3 Description: run Debian GNU/Linux from external media - metapackage Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . The installation of this metapackage will install other BILIBOP packages as dependencies. You should not install it, unless your system is writable and runs from an external device. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-common Source: bilibop Version: 0.4.16~quidame Architecture: s390x Maintainer: bilibop project Installed-Size: 212 Depends: udev Suggests: aufs-tools, bilibop-lockfs, bilibop-device-policy, cryptsetup, dmsetup, lvm2 Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-common_0.4.16~quidame_s390x.deb Size: 62884 SHA256: dd04a79b964f8afbb56d268138f1f320fc91af11c0f11f27b74b27575c0eae74 SHA1: 15482b679614ac5f747b628ed02075e09c0728fe MD5sum: e91b97aab3bee4892ed16b1a4c052a4a Description: shell functions for bilibop scripts Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides shell functions usable by other bilibop scripts on the running system or into the initramfs environment. These functions use /dev, /proc and /sys databases to output the drive name or the partition hosting the running system, and are fully usable by any unprivileged user or application. Dm-crypt, LVM, loop devices and aufs root filesystems (and any combination of them) are supported. A 'drivemap' command is also provided, to show block devices in a tree of dependencies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-lockfs Source: bilibop Version: 0.4.16~quidame Architecture: s390x Maintainer: bilibop project Installed-Size: 191 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3) Recommends: aufs-tools, cryptsetup Suggests: bilibop-device-policy, gnome-icon-theme, libnotify-bin, plymouth Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-lockfs_0.4.16~quidame_s390x.deb Size: 38920 SHA256: c2d3fe667b9b0ad9019b13bd233293a5620894934096692e526dfca3a1f46dd6 SHA1: aaa85d9b6c429cd1730c9568d863c762ffabc56f MD5sum: 78acfd6939d1e5876ec3fa815e8882dc Description: lock filesystems and write changes into RAM Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . If the lockfs feature is enabled (in a configuration file, in the boot commandline or by a heuristic), nothing will be written on the filesystems listed in /etc/fstab, except for those that have been whitelisted, or for the encrypted swap devices. . The root filesystem is locked (set readonly, using aufs) by an initramfs script which also modifies the temporary fstab to prepare other filesystems to be locked later by a mount helper script. . bilibop-lockfs provides the following features: * whitelist based policy: filesystems on which you want to allow persistent changes must be explicitly listed in a configuration file. * not only filesystems are set read-only, but also block devices: this forbids changes of the partition table, boot sectors, LUKS headers and LVM metadata. * management of swap devices, that can be used as is, noauto, only if encrypted or not used at all. * desktop notifications at startup about filesystems status, to inform the user that volatile or persistent changes are allowed or not, and where. . This package can be used as an alternative to fsprotect, especially for writable operating systems embedded on a USB stick; but it may also be installed on public or personal computers, for daily use, testing purposes or as a tool in anti-forensics strategies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-rules Source: bilibop Version: 0.4.16~quidame Architecture: s390x Maintainer: bilibop project Installed-Size: 227 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3), debconf (>= 0.5) | debconf-2.0 Recommends: grub-common, lvm2, udisks Suggests: bilibop-lockfs, cryptsetup, grub-coreboot | grub-efi-amd64 | grub-efi-ia32 | grub-ieee1275 | grub-pc, pmount, policykit-1 Conflicts: bilibop-udev Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-rules_0.4.16~quidame_s390x.deb Size: 48622 SHA256: 6577b4a20154c231474e8b3ba3c6a3d16abce41d332683d06ddc3bb5872eb7e8 SHA1: e7a9e89ba632c6b6ce610356ff2b0f02893069ab MD5sum: b54d7bc564a1f5a720f22a9a99de1095 Description: device management rules for OS running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its main goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application, but some other convenient and optional rules have been added for desktop-level management of the system disk and partitions (need udisks), as well as the internal disks of the computer. The 'lsbilibop' command allows the admin to update udev properties of the devices after the configuration file has been modified. . To ease device management, bilibop-rules also provides helper scripts to: * build custom bilibop udev rules running faster than the generic ones * make some persistent and cumulative rules files unpersistent * use either a fake or an always-up-to-date grub device map * filter Physical Volumes, to activate only those needed by the system . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, including LiveUSB systems. See also the bilibop-udev package. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-udev Source: bilibop Version: 0.4.16~quidame Architecture: s390x Maintainer: bilibop project Installed-Size: 66 Depends: bilibop-common (= 0.4.16~quidame) Suggests: bilibop-lockfs Conflicts: bilibop-rules Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-udev_0.4.16~quidame_s390x.deb Size: 12896 SHA256: bc252f5b5bf70b60276afe6a0ae1f817a329c84f1322341a518919b4e1c2769b SHA1: af1fe1de29e4be9929bdd69d100bdde9da5e7c57 MD5sum: d54d241ef891923301636935c21ec1c4 Description: minimal udev rule for Debian GNU/Linux running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application. . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, especially LiveUSB systems. See also the bilibop-rules package. . Some features may require Linux kernel 2.6.37 or higher to work properly.