bilibop 0.6.3 source package in Ubuntu

Changelog

bilibop (0.6.3) unstable; urgency=high

  * Fix missing support for aufs in autopkgtest test (lockfs).
    Closes: #969606

  * Move executable files from /usr/lib/bilibop to /usr/libexec/bilibop
    according to FHS 3.0, Debian Policy and lintian (pedantic).

  * Update translations for debconf
    - nl: thanks to Frans Spiesschaert. Closes: #955504
    - de: thanks to Chris Leick. Closes: #956344
    - es: thanks to Camaleón. Closes: #958870
    - pt: thanks to Américo Monteiro. Closes: #962411

  * debian/control:
    - Bump debhelper-compat version to 13.
    - Bump Standards-Version to 4.5.1: no changes needed.
  * debian/substvars: move to debian/description to avoid lintian warning
    (source-contains-debian-substvars).
  * debian/rules: update dh_gencontrol override accordingly (+fix syntax).
  * debian/copyright: update GPL license URL to https.

 -- Yann Amar <email address hidden>  Sat, 23 Jan 2021 11:23:33 +0000

Upload details

Uploaded by:
bilibop project
Uploaded to:
Sid
Original maintainer:
bilibop project
Architectures:
linux-any
Section:
misc
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Oracular release universe misc
Noble release universe misc
Mantic release universe misc
Lunar release universe misc
Jammy release universe misc

Downloads

File Size SHA-256 Checksum
bilibop_0.6.3.dsc 1.8 KiB bde24635c171c79e74723e4080c2f841647d204fd77617c468b389e4687b4479
bilibop_0.6.3.tar.xz 125.4 KiB 33a24672c6d896a47f14d9a47e2b8688e1655c8d358b838b9d8351cc58de3640

Available diffs

No changes file available.

Binary packages built by this source

bilibop: run Debian GNU/Linux from external media - metapackage

 Bilibop helps to maintain a Debian GNU/Linux operating system installed
 on an external media (USB, FireWire, Flash memory, eSATA). It hardens
 standard rules and policies to make the system more robust in this
 particular situation.
 .
 The installation of this metapackage will install other BILIBOP packages
 as dependencies. You should not install it, unless your system is writable
 and runs from an external device.

bilibop-common: shell functions for bilibop scripts

 Bilibop helps to maintain a Debian GNU/Linux operating system installed
 on an external media (USB, FireWire, Flash memory, eSATA). It hardens
 standard rules and policies to make the system more robust in this
 particular situation.
 .
 This package provides shell functions usable by other bilibop scripts on the
 running system or into the initramfs environment. These functions use /dev,
 /proc and /sys databases to output the drive name or the partition hosting
 the running system, and are fully usable by any unprivileged user or
 application. Dm-crypt, LVM, loop devices, aufs and overlay root filesystems
 (and almost any combination of them) are supported. A 'drivemap' command is
 also provided, to show block devices in a tree of dependencies.

bilibop-lockfs: lock filesystems and write changes into RAM

 Bilibop helps to maintain a Debian GNU/Linux operating system installed
 on an external media (USB, FireWire, Flash memory, eSATA). It hardens
 standard rules and policies to make the system more robust in this
 particular situation.
 .
 If the lockfs feature is enabled (in a configuration file, in the boot
 commandline or by a heuristic), nothing will be written on the filesystems
 listed in /etc/fstab, except for those that have been whitelisted, or for
 the encrypted swap devices. More, bilibop-lockfs now is able to detect if
 the drive has been locked by a physical switch, and then overrides its own
 settings to unconditionally apply a 'hard' policy.
 .
 The root filesystem is locked (set readonly, using either aufs or overlay)
 by an initramfs script which also modifies the temporary fstab to prepare
 other filesystems to be locked later by a mount helper script.
 .
 bilibop-lockfs provides the following features:
  * whitelist based policy: filesystems on which you want to allow persistent
    changes must be explicitly listed in a configuration file.
  * swap devices policy: they can be used 'as is', noauto, only if encrypted,
    only if encrypted with a random key, or not used at all.
  * not only filesystems are set read-only, but also block devices: this
    forbids changes of the partition table, boot sectors, LUKS headers and
    LVM metadata.
  * plymouth messages to know at boot time if bilibop-lockfs is enabled or
    not, or if an error occurred.
  * desktop notifications at startup about filesystems status, to inform the
    user that volatile or persistent changes are allowed or not, and where.
 .
 This package can be used as an alternative to fsprotect or overlayroot,
 especially for writable operating systems embedded on a USB stick; but it
 may also be installed on public or personal computers, for daily use,
 kiosks, testing purposes, or as a tool in anti-forensics strategies.

bilibop-rules: No summary available for bilibop-rules in ubuntu hirsute.

No description available for bilibop-rules in ubuntu hirsute.

bilibop-udev: minimal udev rule for Debian GNU/Linux running from external media

 Bilibop helps to maintain a Debian GNU/Linux operating system installed
 on an external media (USB, FireWire, Flash memory, eSATA). It hardens
 standard rules and policies to make the system more robust in this
 particular situation.
 .
 This package provides a udev rules file to manage the external drive hosting
 the running system. Its goal is to forbid low-level write access on this
 drive and its partitions by any unprivileged user or application.
 .
 This package is not designed to be used on internal disks. It works only
 for OS installed on removable and writable media, especially LiveUSB systems
 and disk images provided by most vendors of popular ARM-based development
 boards. See also the bilibop-rules package.