Added kickstart for security spin as board has approved this spin.

http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html
This commit is contained in:
Adam Miller 2010-02-19 08:32:02 -06:00
parent 5ddfdd4a6a
commit 9bc51159de

215
fedora-livecd-security.ks Normal file
View File

@ -0,0 +1,215 @@
# Filename:
# fedora-livecd-security.ks
# Description:
# A fully functional live OS based on Fedora for use in security auditing, forensics research, and penetration testing.
# Maintainers:
# Hiemanshu Sharma <hiemanshu [AT] fedoraproject <dot> org>
# Christoph Wickert <cwickert [AT] fedoraproject <dot> org>
# Joerg Simon <jsimon [AT] fedoraproject <dot> org>
# Acknowledgements:
# Fedora LiveCD Xfce Spin team - some work here was inherited, many thanks!
# Fedora LXDE Spin - Copied over stuff to make LXDE Default
# Luke Macken, Adam Miller for the original OpenBox Security ks and all the Security Applications!
%include fedora-live-base.ks
%packages
-fedora-logos
-fedora-release
-fedora-release-notes
generic-release-notes
generic-release
generic-logos
security-menus
firefox
yum-presto
midori
cups-pdf
gnome-bluetooth
alsa-plugins-pulseaudio
pavucontrol
# Command line
ntfs-3g
powertop
wget
irssi
mutt
yum-utils
cnetworkmanager
Thunar
gtk-xfce-engine
thunar-volman
xarchiver
# dictionaries are big
#-aspell-*
#-man-pages-*
# more fun with space saving
-gimp-help
#GUI Stuff
@lxde
# save some space
-autofs
-nss_db
-sendmail
ssmtp
-acpid
# system-config-printer does printer management better
# xfprint has now been made as optional in comps.
system-config-printer
###################### Security Stuffs ############################
# Reconnaissance
dsniff
hping3
nc6
nc
ncrack
nessus-client
nessus-gui
nessus-server
ngrep
nmap
nmap-frontend
p0f
sing
scanssh
scapy
socat
tcpdump
tiger
unicornscan
wireshark-gnome
xprobe2
nbtscan
tcpxtract
firewalk
hunt
halberd
argus
nbtscan
ettercap
ettercap-gtk
iptraf
pcapdiff
picviz
etherape
lynis
# Forensics
chkrootkit
clamav
dd_rescue
gparted
hexedit
prelude-lml
testdisk
foremost
mhonarc
sectool-gui
rkhunter
scanmem
sleuthkit
unhide
examiner
dc3dd
# Wireless
aircrack-ng
airsnort
kismet
# Code analysis
splint
pscan
flawfinder
rats
# Intrusion detection
snort
aide
tripwire
labrea
honeyd
pads
prewikka
prelude-notify
prelude-manager
nebula
# Password cracking
john
ophcrack
# Anonymity
tor
# under review (#461385)
#hydra
# Useful tools
lsof
ntop
scrot
mc
# Other necessary components
screen
desktop-backgrounds-basic
feh
vim-enhanced
gnome-menus
gnome-terminal
PolicyKit-gnome
# make sure debuginfo doesn't end up on the live image
-\*debug
%end
%post
# set up auto-login for liveuser
cat >> /etc/slim.conf << FOE
auto_login yes
default_user liveuser
FOE
# create /etc/sysconfig/desktop (needed for installation)
cat >> /etc/sysconfig/desktop <<EOF
PREFERRED=/usr/bin/startlxde
DISPLAYMANAGER=/usr/bin/slim-dynwm
EOF
cat >> /etc/rc.d/init.d/livesys << EOF
# disable screensaver locking and make sure gamin gets started
rm -f /etc/xdg/lxsession/LXDE/autostart
cat >> /etc/xdg/lxsession/LXDE/autostart << FOE
/usr/libexec/gam_server
@lxde-settings-daemon
@pulseaudio -D
@lxpanel --profile LXDE
@pcmanfm -d
FOE
# Show harddisk install on the desktop
sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop
mkdir /home/liveuser/Desktop
cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
# Add autostart for parcellite
cp /usr/share/applications/fedora-parcellite.desktop /etc/xdg/autostart
#last thing to do
chown -R liveuser:liveuser /home/liveuser
restorecon -R /home/liveuser
EOF
%end