Package: bilibop Version: 0.4.16~quidame Architecture: sparc Maintainer: bilibop project Installed-Size: 50 Depends: bilibop-lockfs (= 0.4.16~quidame), bilibop-rules (= 0.4.16~quidame) Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: extra Section: metapackages Filename: pool/main/b/bilibop/bilibop_0.4.16~quidame_sparc.deb Size: 10828 SHA256: 4d794ddce1b787439f7d32db353a6a0251bc0f9134ace743e492698b17469195 SHA1: 4c3727769ddb35ba62161a38114b261da337054b MD5sum: 5ee4ccd04357c3fa8f022f61875aa261 Description: run Debian GNU/Linux from external media - metapackage Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . The installation of this metapackage will install other BILIBOP packages as dependencies. You should not install it, unless your system is writable and runs from an external device. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-common Source: bilibop Version: 0.4.16~quidame Architecture: sparc Maintainer: bilibop project Installed-Size: 212 Depends: udev Suggests: aufs-tools, bilibop-lockfs, bilibop-device-policy, cryptsetup, dmsetup, lvm2 Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-common_0.4.16~quidame_sparc.deb Size: 62886 SHA256: 9760f62224d69404c7f280071c71ce7eb96bc65ff0e57db3596c0735b37570ec SHA1: 35f8f5942ac577d99d71959e68db72431390b82e MD5sum: 77268dd110f185bb87f8cf6be177947f Description: shell functions for bilibop scripts Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides shell functions usable by other bilibop scripts on the running system or into the initramfs environment. These functions use /dev, /proc and /sys databases to output the drive name or the partition hosting the running system, and are fully usable by any unprivileged user or application. Dm-crypt, LVM, loop devices and aufs root filesystems (and any combination of them) are supported. A 'drivemap' command is also provided, to show block devices in a tree of dependencies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-lockfs Source: bilibop Version: 0.4.16~quidame Architecture: sparc Maintainer: bilibop project Installed-Size: 191 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3) Recommends: aufs-tools, cryptsetup Suggests: bilibop-device-policy, gnome-icon-theme, libnotify-bin, plymouth Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-lockfs_0.4.16~quidame_sparc.deb Size: 38914 SHA256: e094e5b7091d0d6084f77bf69543879b5214cd7d10e5347ae1be2807886e8b0b SHA1: 7956724d9a1d103973217f999c607ba71093870d MD5sum: 68333b78a392e5a040459408eec6b24d Description: lock filesystems and write changes into RAM Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . If the lockfs feature is enabled (in a configuration file, in the boot commandline or by a heuristic), nothing will be written on the filesystems listed in /etc/fstab, except for those that have been whitelisted, or for the encrypted swap devices. . The root filesystem is locked (set readonly, using aufs) by an initramfs script which also modifies the temporary fstab to prepare other filesystems to be locked later by a mount helper script. . bilibop-lockfs provides the following features: * whitelist based policy: filesystems on which you want to allow persistent changes must be explicitly listed in a configuration file. * not only filesystems are set read-only, but also block devices: this forbids changes of the partition table, boot sectors, LUKS headers and LVM metadata. * management of swap devices, that can be used as is, noauto, only if encrypted or not used at all. * desktop notifications at startup about filesystems status, to inform the user that volatile or persistent changes are allowed or not, and where. . This package can be used as an alternative to fsprotect, especially for writable operating systems embedded on a USB stick; but it may also be installed on public or personal computers, for daily use, testing purposes or as a tool in anti-forensics strategies. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-rules Source: bilibop Version: 0.4.16~quidame Architecture: sparc Maintainer: bilibop project Installed-Size: 227 Depends: bilibop-common (= 0.4.16~quidame), initramfs-tools, initscripts (>= 2.88dsf-13.3), debconf (>= 0.5) | debconf-2.0 Recommends: grub-common, lvm2, udisks Suggests: bilibop-lockfs, cryptsetup, grub-coreboot | grub-efi-amd64 | grub-efi-ia32 | grub-ieee1275 | grub-pc, pmount, policykit-1 Conflicts: bilibop-udev Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-rules_0.4.16~quidame_sparc.deb Size: 48608 SHA256: ecf5618ac1b463bf4c66b52bd1dc2bb9262833e49678c15a2baa834d3e19422b SHA1: 83901e7fc79091c2b52123f3a2efbb17b59605b7 MD5sum: 82e1ecb264c696ec51d868cea796ad4a Description: device management rules for OS running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its main goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application, but some other convenient and optional rules have been added for desktop-level management of the system disk and partitions (need udisks), as well as the internal disks of the computer. The 'lsbilibop' command allows the admin to update udev properties of the devices after the configuration file has been modified. . To ease device management, bilibop-rules also provides helper scripts to: * build custom bilibop udev rules running faster than the generic ones * make some persistent and cumulative rules files unpersistent * use either a fake or an always-up-to-date grub device map * filter Physical Volumes, to activate only those needed by the system . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, including LiveUSB systems. See also the bilibop-udev package. . Some features may require Linux kernel 2.6.37 or higher to work properly. Package: bilibop-udev Source: bilibop Version: 0.4.16~quidame Architecture: sparc Maintainer: bilibop project Installed-Size: 66 Depends: bilibop-common (= 0.4.16~quidame) Suggests: bilibop-lockfs Conflicts: bilibop-rules Provides: bilibop-device-policy Homepage: https://un.poivron.org/~quidame/wiki/bilibop Priority: optional Section: admin Filename: pool/main/b/bilibop/bilibop-udev_0.4.16~quidame_sparc.deb Size: 12894 SHA256: d60ad719e409ae18e392da84af29c5031572e47911786dae0c0d496a9c1c445c SHA1: 315e6fdbaaed16423a16b5179d925758c794d508 MD5sum: 618b59e49b4291dd864f11f6e355b778 Description: minimal udev rule for Debian GNU/Linux running from external media Bilibop helps to maintain a Debian GNU/Linux operating system installed on an external media (USB, FireWire, Flash memory, eSATA). It hardens standard rules and policies to make the system more robust in this particular situation. . This package provides a udev rules file to manage the external drive hosting the running system. Its goal is to forbid low-level write access on this drive and its partitions by any unprivileged user or application. . This package is not designed to be used on internal disks. It works only for OS installed on removable and writable media, especially LiveUSB systems. See also the bilibop-rules package. . Some features may require Linux kernel 2.6.37 or higher to work properly.