bilibop 0.6.3 source package in Ubuntu
Changelog
bilibop (0.6.3) unstable; urgency=high * Fix missing support for aufs in autopkgtest test (lockfs). Closes: #969606 * Move executable files from /usr/lib/bilibop to /usr/libexec/bilibop according to FHS 3.0, Debian Policy and lintian (pedantic). * Update translations for debconf - nl: thanks to Frans Spiesschaert. Closes: #955504 - de: thanks to Chris Leick. Closes: #956344 - es: thanks to Camaleón. Closes: #958870 - pt: thanks to Américo Monteiro. Closes: #962411 * debian/control: - Bump debhelper-compat version to 13. - Bump Standards-Version to 4.5.1: no changes needed. * debian/substvars: move to debian/description to avoid lintian warning (source-contains-debian-substvars). * debian/rules: update dh_gencontrol override accordingly (+fix syntax). * debian/copyright: update GPL license URL to https. -- Yann Amar <email address hidden> Sat, 23 Jan 2021 11:23:33 +0000
Upload details
- Uploaded by:
- bilibop project
- Uploaded to:
- Sid
- Original maintainer:
- bilibop project
- Architectures:
- linux-any
- Section:
- misc
- Urgency:
- Very Urgent
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
bilibop_0.6.3.dsc | 1.8 KiB | bde24635c171c79e74723e4080c2f841647d204fd77617c468b389e4687b4479 |
bilibop_0.6.3.tar.xz | 125.4 KiB | 33a24672c6d896a47f14d9a47e2b8688e1655c8d358b838b9d8351cc58de3640 |
Available diffs
- diff from 0.6.0 to 0.6.3 (13.0 KiB)
No changes file available.
Binary packages built by this source
- bilibop: run Debian GNU/Linux from external media - metapackage
Bilibop helps to maintain a Debian GNU/Linux operating system installed
on an external media (USB, FireWire, Flash memory, eSATA). It hardens
standard rules and policies to make the system more robust in this
particular situation.
.
The installation of this metapackage will install other BILIBOP packages
as dependencies. You should not install it, unless your system is writable
and runs from an external device.
- bilibop-common: shell functions for bilibop scripts
Bilibop helps to maintain a Debian GNU/Linux operating system installed
on an external media (USB, FireWire, Flash memory, eSATA). It hardens
standard rules and policies to make the system more robust in this
particular situation.
.
This package provides shell functions usable by other bilibop scripts on the
running system or into the initramfs environment. These functions use /dev,
/proc and /sys databases to output the drive name or the partition hosting
the running system, and are fully usable by any unprivileged user or
application. Dm-crypt, LVM, loop devices, aufs and overlay root filesystems
(and almost any combination of them) are supported. A 'drivemap' command is
also provided, to show block devices in a tree of dependencies.
- bilibop-lockfs: lock filesystems and write changes into RAM
Bilibop helps to maintain a Debian GNU/Linux operating system installed
on an external media (USB, FireWire, Flash memory, eSATA). It hardens
standard rules and policies to make the system more robust in this
particular situation.
.
If the lockfs feature is enabled (in a configuration file, in the boot
commandline or by a heuristic), nothing will be written on the filesystems
listed in /etc/fstab, except for those that have been whitelisted, or for
the encrypted swap devices. More, bilibop-lockfs now is able to detect if
the drive has been locked by a physical switch, and then overrides its own
settings to unconditionally apply a 'hard' policy.
.
The root filesystem is locked (set readonly, using either aufs or overlay)
by an initramfs script which also modifies the temporary fstab to prepare
other filesystems to be locked later by a mount helper script.
.
bilibop-lockfs provides the following features:
* whitelist based policy: filesystems on which you want to allow persistent
changes must be explicitly listed in a configuration file.
* swap devices policy: they can be used 'as is', noauto, only if encrypted,
only if encrypted with a random key, or not used at all.
* not only filesystems are set read-only, but also block devices: this
forbids changes of the partition table, boot sectors, LUKS headers and
LVM metadata.
* plymouth messages to know at boot time if bilibop-lockfs is enabled or
not, or if an error occurred.
* desktop notifications at startup about filesystems status, to inform the
user that volatile or persistent changes are allowed or not, and where.
.
This package can be used as an alternative to fsprotect or overlayroot,
especially for writable operating systems embedded on a USB stick; but it
may also be installed on public or personal computers, for daily use,
kiosks, testing purposes, or as a tool in anti-forensics strategies.
- bilibop-rules: No summary available for bilibop-rules in ubuntu hirsute.
No description available for bilibop-rules in ubuntu hirsute.
- bilibop-udev: minimal udev rule for Debian GNU/Linux running from external media
Bilibop helps to maintain a Debian GNU/Linux operating system installed
on an external media (USB, FireWire, Flash memory, eSATA). It hardens
standard rules and policies to make the system more robust in this
particular situation.
.
This package provides a udev rules file to manage the external drive hosting
the running system. Its goal is to forbid low-level write access on this
drive and its partitions by any unprivileged user or application.
.
This package is not designed to be used on internal disks. It works only
for OS installed on removable and writable media, especially LiveUSB systems
and disk images provided by most vendors of popular ARM-based development
boards. See also the bilibop-rules package.