summaryrefslogtreecommitdiffstats
path: root/fedora-security-livecd.ks
blob: ca632cf130c620df4ea4aedaf033b1656ec47b71 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
lang en_US.UTF-8
keyboard us
timezone US/Eastern
auth --useshadow --enablemd5
selinux --enforcing
firewall --disabled
repo --name=d7 --baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/development/i386/os
repo --name=e7 --baseurl=http://download.fedora.redhat.com/pub/fedora/linux/extras/development/i386 
xconfig --startxonboot
services --enabled=NetworkManager,dhcdbd --disabled=network,sshd

%packages
# basic desktop packages
@graphical-internet
#@graphics
#@sound-and-video
@gnome-desktop
@base-x
#@games
@base
@core
@admin-tools
@dial-up
@hardware-support
#@printing
kernel

scim*
-scim-devel
-scim-doc
-scim-qt
# work around yum API bug with specifying wildcards for now 
scim-tables
scim-tables-*
scim-sinhala
scim-libs
scim-bridge
scim-bridge-gtk
scim-anthy
scim-hangul
scim-pinyin
scim-chewing
scim-m17n

m17n-lib
m17n-db
#m17n-db-*

fonts-*
# work around yum API bug with specifying wildcards for now 
fonts-arabic
fonts-bengali
fonts-chinese
fonts-gujarati
fonts-hebrew
fonts-hindi
fonts-japanese
fonts-kannada
fonts-korean
fonts-malayalam
fonts-oriya
fonts-punjabi
fonts-sinhala
fonts-tamil
fonts-telugu

# dictionaries are big
-aspell-*
-m17n-db-*
-man-pages-*
# gimp help is huge
-gimp-help
# lose the compat stuff
-compat*

# space sucks
-festival
-gok
-gnome-speech
-ekiga
-gnome-user-docs
-specspo
-esc
-samba-client
-a2ps
-vino
-redhat-lsb

# smartcards won't really work on the livecd.  and we _need_ space
-coolkey
-ccid

# scanning takes quite a bit of space :/
-xsane
-xsane-gimp

# while hplip requires pyqt, it has to go
-hplip

evince

# livecd bits to set up the livecd and be able to install
anaconda

# Security LiveCD Tools
# Other useful stuff
irssi
screen
gtk-recordmydesktop
byzanz
istanbul
#tor

# Security tools
aide
aircrack-ng
airsnort
chkrootkit
clamav
dd_rescue
gpart
hexedit
hping3
john
kismet
lsof
nessus-client
nessus-gui
nessus-server
nc
nc6
ngrep
nmap
p0f
pscan
scanssh
snort
socat
splint
tcpdump
testdisk
tiger
tripwire
wireshark-gnome
xprobe2
tcpxtract
ettercap


%post
# FIXME: it'd be better to get this installed from a package
cat > /etc/rc.d/init.d/fedora-livecd << EOF
#!/bin/bash
#
# livecd: Init script for live cd
#
# chkconfig: 345 00 99
# description: Init script for live cd.

. /etc/init.d/functions

if ! strstr "\`cat /proc/cmdline\`" livecd || [ "\$1" != "start" ] || [ -e /.livecd-configured ] ; then
    exit 0
fi

exists() {
    which \$1 >/dev/null 2>&1 || return
    \$*
}

touch /.livecd-configured

# mount livecd
mkdir -p /mnt/livecd
mount -o ro -t iso9660 /dev/livecd /mnt/livecd

# configure X
exists system-config-display --noui --reconfig --set-depth=24

# unmute sound card
exists alsaunmute 0 2> /dev/null

# add fedora user with no passwd
useradd -c "Fedora live CD" fedora
passwd -d fedora > /dev/null
if [ -e /usr/share/icons/hicolor/96x96/apps/fedora-logo-icon.png ] ; then
    cp /usr/share/icons/hicolor/96x96/apps/fedora-logo-icon.png /home/fedora/.face
    chown fedora:fedora /home/fedora/.face
    # TODO: would be nice to get e-d-s to pick this one up too... but how?
fi

# turn off firstboot for livecd boots
echo "RUN_FIRSTBOOT=NO" > /etc/sysconfig/firstboot

# don't start yum-updatesd for livecd boots
chkconfig --levels 345 yum-updatesd off

# Stopgap fix for RH #217966; should be fixed in HAL instead
touch /media/.hal-mtab
EOF
chmod 755 /etc/rc.d/init.d/fedora-livecd
/sbin/restorecon /etc/rc.d/init.d/fedora-livecd
/sbin/chkconfig --add fedora-livecd

# big  hack, but how else can we fit?
rm -rf /usr/share/doc/*