forked from srbala/fedora-kickstarts
Added kickstart for security spin as board has approved this spin.
http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html
This commit is contained in:
parent
5ddfdd4a6a
commit
9bc51159de
215
fedora-livecd-security.ks
Normal file
215
fedora-livecd-security.ks
Normal file
@ -0,0 +1,215 @@
|
||||
# Filename:
|
||||
# fedora-livecd-security.ks
|
||||
# Description:
|
||||
# A fully functional live OS based on Fedora for use in security auditing, forensics research, and penetration testing.
|
||||
# Maintainers:
|
||||
# Hiemanshu Sharma <hiemanshu [AT] fedoraproject <dot> org>
|
||||
# Christoph Wickert <cwickert [AT] fedoraproject <dot> org>
|
||||
# Joerg Simon <jsimon [AT] fedoraproject <dot> org>
|
||||
# Acknowledgements:
|
||||
# Fedora LiveCD Xfce Spin team - some work here was inherited, many thanks!
|
||||
# Fedora LXDE Spin - Copied over stuff to make LXDE Default
|
||||
# Luke Macken, Adam Miller for the original OpenBox Security ks and all the Security Applications!
|
||||
|
||||
|
||||
%include fedora-live-base.ks
|
||||
|
||||
%packages
|
||||
-fedora-logos
|
||||
-fedora-release
|
||||
-fedora-release-notes
|
||||
generic-release-notes
|
||||
generic-release
|
||||
generic-logos
|
||||
|
||||
security-menus
|
||||
|
||||
firefox
|
||||
yum-presto
|
||||
midori
|
||||
cups-pdf
|
||||
gnome-bluetooth
|
||||
alsa-plugins-pulseaudio
|
||||
pavucontrol
|
||||
|
||||
# Command line
|
||||
ntfs-3g
|
||||
powertop
|
||||
wget
|
||||
irssi
|
||||
mutt
|
||||
yum-utils
|
||||
cnetworkmanager
|
||||
Thunar
|
||||
gtk-xfce-engine
|
||||
thunar-volman
|
||||
xarchiver
|
||||
|
||||
# dictionaries are big
|
||||
#-aspell-*
|
||||
#-man-pages-*
|
||||
|
||||
# more fun with space saving
|
||||
-gimp-help
|
||||
|
||||
#GUI Stuff
|
||||
@lxde
|
||||
|
||||
# save some space
|
||||
-autofs
|
||||
-nss_db
|
||||
-sendmail
|
||||
ssmtp
|
||||
-acpid
|
||||
# system-config-printer does printer management better
|
||||
# xfprint has now been made as optional in comps.
|
||||
system-config-printer
|
||||
|
||||
###################### Security Stuffs ############################
|
||||
# Reconnaissance
|
||||
dsniff
|
||||
hping3
|
||||
nc6
|
||||
nc
|
||||
ncrack
|
||||
nessus-client
|
||||
nessus-gui
|
||||
nessus-server
|
||||
ngrep
|
||||
nmap
|
||||
nmap-frontend
|
||||
p0f
|
||||
sing
|
||||
scanssh
|
||||
scapy
|
||||
socat
|
||||
tcpdump
|
||||
tiger
|
||||
unicornscan
|
||||
wireshark-gnome
|
||||
xprobe2
|
||||
nbtscan
|
||||
tcpxtract
|
||||
firewalk
|
||||
hunt
|
||||
halberd
|
||||
argus
|
||||
nbtscan
|
||||
ettercap
|
||||
ettercap-gtk
|
||||
iptraf
|
||||
pcapdiff
|
||||
picviz
|
||||
etherape
|
||||
lynis
|
||||
|
||||
# Forensics
|
||||
chkrootkit
|
||||
clamav
|
||||
dd_rescue
|
||||
gparted
|
||||
hexedit
|
||||
prelude-lml
|
||||
testdisk
|
||||
foremost
|
||||
mhonarc
|
||||
sectool-gui
|
||||
rkhunter
|
||||
scanmem
|
||||
sleuthkit
|
||||
unhide
|
||||
examiner
|
||||
dc3dd
|
||||
|
||||
# Wireless
|
||||
aircrack-ng
|
||||
airsnort
|
||||
kismet
|
||||
|
||||
# Code analysis
|
||||
splint
|
||||
pscan
|
||||
flawfinder
|
||||
rats
|
||||
|
||||
# Intrusion detection
|
||||
snort
|
||||
aide
|
||||
tripwire
|
||||
labrea
|
||||
honeyd
|
||||
pads
|
||||
prewikka
|
||||
prelude-notify
|
||||
prelude-manager
|
||||
nebula
|
||||
|
||||
# Password cracking
|
||||
john
|
||||
ophcrack
|
||||
|
||||
# Anonymity
|
||||
tor
|
||||
|
||||
# under review (#461385)
|
||||
#hydra
|
||||
|
||||
# Useful tools
|
||||
lsof
|
||||
ntop
|
||||
scrot
|
||||
mc
|
||||
|
||||
# Other necessary components
|
||||
screen
|
||||
desktop-backgrounds-basic
|
||||
feh
|
||||
vim-enhanced
|
||||
gnome-menus
|
||||
gnome-terminal
|
||||
PolicyKit-gnome
|
||||
|
||||
# make sure debuginfo doesn't end up on the live image
|
||||
-\*debug
|
||||
%end
|
||||
|
||||
%post
|
||||
|
||||
# set up auto-login for liveuser
|
||||
cat >> /etc/slim.conf << FOE
|
||||
auto_login yes
|
||||
default_user liveuser
|
||||
FOE
|
||||
|
||||
# create /etc/sysconfig/desktop (needed for installation)
|
||||
cat >> /etc/sysconfig/desktop <<EOF
|
||||
PREFERRED=/usr/bin/startlxde
|
||||
DISPLAYMANAGER=/usr/bin/slim-dynwm
|
||||
EOF
|
||||
|
||||
cat >> /etc/rc.d/init.d/livesys << EOF
|
||||
# disable screensaver locking and make sure gamin gets started
|
||||
rm -f /etc/xdg/lxsession/LXDE/autostart
|
||||
cat >> /etc/xdg/lxsession/LXDE/autostart << FOE
|
||||
/usr/libexec/gam_server
|
||||
@lxde-settings-daemon
|
||||
@pulseaudio -D
|
||||
@lxpanel --profile LXDE
|
||||
@pcmanfm -d
|
||||
FOE
|
||||
|
||||
# Show harddisk install on the desktop
|
||||
sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop
|
||||
mkdir /home/liveuser/Desktop
|
||||
cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
|
||||
|
||||
# Add autostart for parcellite
|
||||
cp /usr/share/applications/fedora-parcellite.desktop /etc/xdg/autostart
|
||||
|
||||
#last thing to do
|
||||
chown -R liveuser:liveuser /home/liveuser
|
||||
restorecon -R /home/liveuser
|
||||
EOF
|
||||
|
||||
%end
|
||||
|
Loading…
Reference in New Issue
Block a user