fedora-kickstarts/fedora-live-security.ks

# Filename:
#   fedora-livecd-security.ks
# Description:
#   A fully functional live OS based on Fedora for use in security auditing, 
#   forensics research, and penetration testing.
# Maintainers:
#   Fabian Affolter <fab [AT] fedoraproject <dot> org>
#   Joerg Simon <jsimon [AT] fedoraproject <dot> org>
#   JT Pennington <jt [AT] fedoraproject <dot> org>
# Acknowledgements:
#   Fedora LiveCD Xfce Spin team - some work here was and will be inherited,
#   many thanks, especially to Christoph Wickert!
#   Fedora LXDE Spin - Copied over stuff to make LXDE Default
#   Luke Macken and Adam Miller for the original OpenBox Security ks and all
#   the Security Applications! 
#   Hiemanshu Sharma <hiemanshu [AT] fedoraproject <dot> org>

%include fedora-live-base.ks
%include fedora-live-minimization.ks

# spin was failing to compose due to lack of space, so bumping the size.
part / --size 10240

%packages
# install env-group to resolve RhBug:1891500
@^xfce-desktop-environment

@xfce-apps

# Security tools
@security-lab
security-menus

# unlock default keyring. FIXME: Should probably be done in comps
gnome-keyring-pam

# save some space
-autofs
-acpid
-gimp-help
-desktop-backgrounds-basic
-PackageKit*                # we switched to dnfdragora, so we don't need this
-aspell-*                   # dictionaries are big
-gnumeric
-foomatic-db-ppds
-foomatic
-stix-fonts
-default-fonts-core-math
-ibus-typing-booster
-xfce4-sensors-plugin
-man-pages-*

# drop some system-config things
-system-config-rootpassword
-policycoreutils-gui

# exclude some packages to save some space
# use './fsl-maintenance.py -l' in your security spin git folder to build
-ArpON
-aide
-binwalk
-bkhive
-bonesi
-bro
-cmospwd
-dnstop
-etherape
-hfsutils
-httpie
-httrack
-hydra
-kismon
-labrea
-nebula
-netsed
-onesixtyone
-packETH
-pads
-pdfcrack
-proxychains
-pyrit
-raddump
-rkhunter
-safecopy
-samdump2
-scalpel
-sslstrip
-tcpreen
-tcpreplay
-tripwire
-wipe
-zmap

%end

%post
# xfce configuration

# create /etc/sysconfig/desktop (needed for installation)

cat > /etc/sysconfig/desktop <<EOF
PREFERRED=/usr/bin/startxfce4
DISPLAYMANAGER=/usr/sbin/lightdm
EOF

# set livesys session type
sed -i 's/^livesys_session=.*/livesys_session="xfce"/' /etc/sysconfig/livesys

%end
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`# Filename:`
			`# fedora-livecd-security.ks`
			`# Description:`
Less than 80 chars per line 2012-09-16 11:32:25 +00:00			`# A fully functional live OS based on Fedora for use in security auditing,`
			`# forensics research, and penetration testing.`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`# Maintainers:`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`# Fabian Affolter <fab [AT] fedoraproject <dot> org>`
			`# Joerg Simon <jsimon [AT] fedoraproject <dot> org>`
Update fedora-live-security.ks 2022-07-26 20:04:33 +00:00			`# JT Pennington <jt [AT] fedoraproject <dot> org>`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`# Acknowledgements:`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`# Fedora LiveCD Xfce Spin team - some work here was and will be inherited,`
Update file header 2016-02-06 10:43:19 +00:00			`# many thanks, especially to Christoph Wickert!`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`# Fedora LXDE Spin - Copied over stuff to make LXDE Default`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`# Luke Macken and Adam Miller for the original OpenBox Security ks and all`
Less than 80 chars per line 2012-09-16 11:32:25 +00:00			`# the Security Applications!`
removed gmixer - caused build error 2011-02-28 13:45:40 +00:00			`# Hiemanshu Sharma <hiemanshu [AT] fedoraproject <dot> org>`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00
			`%include fedora-live-base.ks`
Rework live-base and desktop minimization First, strip the "minimization" parts out of fedora-live-base.ks, and move them into fedora-live-minimization.ks. All previous consumers of fedora-live-base.ks are updated. The old fedora-live-base.ks was conflating two entirely different things: * A live-based image which can be used to install * Stripping some random bits to fit onto a CD The previous fedora-livecd-desktop is now fedora-live-desktop.ks. The new file fedora-livecd-desktop.ks is actually further minimizations on top of fedora-live-desktop.ks. Split up these two concepts so that fedora-live-desktop is THE desktop. What we expect everyone to have as a base, and the exact same set of packages should be installed by Standalone Anaconda (DVD) as well. Then, we have minimization hacks in fedora-live-desktop-cd.ks. Over time, we should be shrinking the default install and making it more just-in-time, by e.g. having many more things use the PackageKit library to pull in components as needed. 2010-03-23 13:14:04 +00:00			`%include fedora-live-minimization.ks`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00
remove more pkgs 2013-10-01 21:32:48 +00:00			`# spin was failing to compose due to lack of space, so bumping the size.`
Security: Add space to prevent failures on compose 2013-09-25 01:28:48 +00:00			`part / --size 10240`

Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`%packages`
Add environment for several spins It resolve problem in dnf when user removes secondary env-group. It also add additional excludes to keep installed set same as before the change. 2020-11-16 14:51:31 +00:00			`# install env-group to resolve RhBug:1891500`
			`@^xfce-desktop-environment`

FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`@xfce-apps`

exclude openvas-client 2014-06-13 13:59:22 +00:00			`# Security tools`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`@security-lab`
			`security-menus`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00
Synced with xfce 2013-09-05 22:36:47 +00:00			`# unlock default keyring. FIXME: Should probably be done in comps`
			`gnome-keyring-pam`

Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`# save some space`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-autofs`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`-acpid`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-gimp-help`
			`-desktop-backgrounds-basic`
Update comments to dnfdragora 2017-03-31 23:38:37 +00:00			`-PackageKit* # we switched to dnfdragora, so we don't need this`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-aspell-* # dictionaries are big`
Removed more packages to save space 2013-09-05 22:35:55 +00:00			`-gnumeric`
			`-foomatic-db-ppds`
			`-foomatic`
			`-stix-fonts`
Security: exclude default-fonts-core-math See a90d590e00f1c972235dbb5793aa3eb81840c85e - this is the same fix, for the security image. As with LXDE, since https://fedoraproject.org/wiki/Changes/ImproveDefaultFontHandling we need to also drop default-fonts-core-math if we want to drop stix-fonts, or the image build fails. Signed-off-by: Adam Williamson <awilliam@redhat.com> 2023-08-29 19:30:59 +00:00			`-default-fonts-core-math`
Removed more packages to save space 2013-09-05 22:35:55 +00:00			`-ibus-typing-booster`
			`-xfce4-sensors-plugin`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-man-pages-*`
Security: Final fixes for F15 2011-05-07 12:02:42 +00:00
			`# drop some system-config things`
modified to work well with F14 2010-10-27 13:43:07 +00:00			`-system-config-rootpassword`
			`-policycoreutils-gui`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`# exclude some packages to save some space`
			`# use './fsl-maintenance.py -l' in your security spin git folder to build`
			`-ArpON`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-aide`
			`-binwalk`
			`-bkhive`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-bonesi`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-bro`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-cmospwd`
			`-dnstop`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-etherape`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-hfsutils`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-httpie`
			`-httrack`
			`-hydra`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-kismon`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-labrea`
			`-nebula`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-netsed`
			`-onesixtyone`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-packETH`
			`-pads`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-pdfcrack`
			`-proxychains`
			`-pyrit`
			`-raddump`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-rkhunter`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-safecopy`
remove more pkgs 2013-10-01 21:32:48 +00:00			`-samdump2`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`-scalpel`
			`-sslstrip`
			`-tcpreen`
			`-tcpreplay`
			`-tripwire`
			`-wipe`
remove old packages 2015-02-20 13:44:56 +00:00			`-zmap`
exclude openvas-client 2014-06-13 13:59:22 +00:00
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`%end`

			`%post`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`# xfce configuration`

Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`# create /etc/sysconfig/desktop (needed for installation)`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00
Security: Sync LXDE and LXDM configuration with LXDE spin 2010-03-23 18:42:50 +00:00			`cat > /etc/sysconfig/desktop <<EOF`
FSL moved to Xfce 2013-08-13 11:51:50 +00:00			`PREFERRED=/usr/bin/startxfce4`
			`DISPLAYMANAGER=/usr/sbin/lightdm`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00			`EOF`

Switch all live media variants to use livesys-scripts Reference: https://fedoraproject.org/wiki/Changes/ModernizeLiveMedia 2022-11-29 06:30:25 +00:00			`# set livesys session type`
			`sed -i 's/^livesys_session=.*/livesys_session="xfce"/' /etc/sysconfig/livesys`
Added kickstart for security spin as board has approved this spin. http://lists.fedoraproject.org/pipermail/advisory-board/2010-February/008027.html 2010-02-19 14:32:02 +00:00
			`%end`