Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 19/20 > Security and Privacy
FedoraForum Search

Forgot Password? Join Us!

Security and Privacy Sadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 2nd March 2010, 06:06 AM
diamond_ramsey Offline
Registered User
 
Join Date: Aug 2009
Posts: 788
windows_98_nt_2000mozilla
FYI Security Spin. :)

FYI Security Spin.

https://fedoraproject.org/wiki/Fedor...#Security_Spin

"...The Fedora Security Spin provides a safe test environment to work on security auditing, forensics, system rescue and teaching security testing methodologies in universities and other organizations. The spin is maintained by a community of security testers and developers. It comes with the clean and fast LXDE Desktop Environment and a customized menu that provides all the instruments needed to follow a proper test path for security testing or to rescue a broken system. The Live image has been crafted to make it possible to install software while running, and if you are running it from a USB stick created with the LiveUSB Creator's overlay feature, you can install and update software and save your test results permanently..."

About Security Spin -

http://spins.fedoraproject.org/security/#home

Available Apps of Security Spin -

https://fedorahosted.org/security-sp.../availableApps

Hope this helps.
__________________
2 dual cores, 11 GB RAM, F18 Spherical Cow - 3.11.10-100.fc18.x86_64 / i686
2 dual cores, 11 GB RAM, F19 Schrödinger's Cat - 3.14.14-100.fc19.x86_64 / i686
2 dual cores, 11 GB RAM, F20 Heisenbug - 3.15.7-200.fc20.x86_64 / i686
2 dual cores, 11 GB RAM, F21 TBD - 3.16.0-0.rc7.git1.1.fc21.x86_64 / i686
80 x86_64 computing cores, 144 GB RAM & 8 SATA Seagate 7200.12 500 GB harddisks
Reply With Quote
  #2  
Old 2nd March 2010, 06:47 AM
blittle Offline
Registered User
 
Join Date: Jun 2007
Posts: 405
linuxfedorafirefox
I like it, could use some more tools but its a good start.
__________________
My Smolt Profile
Reply With Quote
  #3  
Old 3rd March 2010, 10:32 PM
diamond_ramsey Offline
Registered User
 
Join Date: Aug 2009
Posts: 788
linuxfedorafirefox
:) blittle, thank you for your post. :)

blittle, thank you for your post.

Quote:
Originally Posted by blittle View Post
I like it, could use some more tools but its a good start.
Very true, if you have idea(s) for others tools, then please contact the maintainers and provide your input for the Security Spin.

I think this is a great start for an effective set of tools.

Hope this helps.
__________________
2 dual cores, 11 GB RAM, F18 Spherical Cow - 3.11.10-100.fc18.x86_64 / i686
2 dual cores, 11 GB RAM, F19 Schrödinger's Cat - 3.14.14-100.fc19.x86_64 / i686
2 dual cores, 11 GB RAM, F20 Heisenbug - 3.15.7-200.fc20.x86_64 / i686
2 dual cores, 11 GB RAM, F21 TBD - 3.16.0-0.rc7.git1.1.fc21.x86_64 / i686
80 x86_64 computing cores, 144 GB RAM & 8 SATA Seagate 7200.12 500 GB harddisks
Reply With Quote
  #4  
Old 18th March 2010, 10:41 PM
bodhi.zazen Offline
Registered User
 
Join Date: Jul 2006
Location: Montana
Posts: 731
windows_xp_2003firefox
Re: FYI Security Spin. :)

Quote:
Originally Posted by diamond_ramsey View Post
FYI Security Spin.

https://fedoraproject.org/wiki/Fedor...#Security_Spin

"...The Fedora Security Spin provides a safe test environment to work on security auditing, forensics, system rescue and teaching security testing methodologies in universities and other organizations. The spin is maintained by a community of security testers and developers. It comes with the clean and fast LXDE Desktop Environment and a customized menu that provides all the instruments needed to follow a proper test path for security testing or to rescue a broken system. The Live image has been crafted to make it possible to install software while running, and if you are running it from a USB stick created with the LiveUSB Creator's overlay feature, you can install and update software and save your test results permanently..."

About Security Spin -

http://spins.fedoraproject.org/security/#home

Available Apps of Security Spin -

https://fedorahosted.org/security-sp.../availableApps

Hope this helps.
Looks like a great idea, but can you tell me how to contact the maintainers of this spin ?

I could not find any contact information on any of the links, no mailing list or IRC channel other then the general Fedora info.

I took rawhide for a look-see , the Security Daily Build, and there are a few issues.

First, there is no auto-login. The default user and password is not listed anywhere.

Of course root and liveuser do not work.

Looking under the surface, the problem is that SELinux is blocking logins.

You can access the system with Ctrl-alt-F2, log in a root, no password.

Set a password for liveuser.

The set selinux into permissive mode and restart the lxde greeter.

But even then I could only log into LXDE (which is fine) , but I could not log into gnome/openbox, openbox, or kde/openbox.

Seemed this thread was as good as posting o n#fedora or to the general fedora users mailing list, but if not, I can post in those locations as well.
__________________
If it is not broken, tweak it... If you break Fedora you get to keep both pieces :p
Reply With Quote
  #5  
Old 18th March 2010, 11:01 PM
diamond_ramsey Offline
Registered User
 
Join Date: Aug 2009
Posts: 788
windows_xp_2003firefox
:) bodhi.zazen, thank you for your post. :)

bodhi.zazen, thank you for your post.

Quote:
Originally Posted by bodhi.zazen View Post
Looks like a great idea, but can you tell me how to contact the maintainers of this spin ?...
I think that at the URL -

http://fedoraproject.org/wiki/Securi...n#Owner.28s.29

Try the reference to the owner -

http://fedoraproject.org/wiki/JoergSimon

Joerg, is very knowledgeable as well as helpful. I see great promise in this Security Spin.

Quote:
Originally Posted by bodhi.zazen View Post
...I took rawhide for a look-see , the Security Daily Build, and there are a few issues...
+1. Feedback makes for a better understanding. :v)

Hope this helps.
__________________
2 dual cores, 11 GB RAM, F18 Spherical Cow - 3.11.10-100.fc18.x86_64 / i686
2 dual cores, 11 GB RAM, F19 Schrödinger's Cat - 3.14.14-100.fc19.x86_64 / i686
2 dual cores, 11 GB RAM, F20 Heisenbug - 3.15.7-200.fc20.x86_64 / i686
2 dual cores, 11 GB RAM, F21 TBD - 3.16.0-0.rc7.git1.1.fc21.x86_64 / i686
80 x86_64 computing cores, 144 GB RAM & 8 SATA Seagate 7200.12 500 GB harddisks
Reply With Quote
  #6  
Old 18th March 2010, 11:17 PM
bodhi.zazen Offline
Registered User
 
Join Date: Jul 2006
Location: Montana
Posts: 731
windows_xp_2003firefox
Re: FYI Security Spin. :)

Perfect, thank you.
__________________
If it is not broken, tweak it... If you break Fedora you get to keep both pieces :p
Reply With Quote
  #7  
Old 22nd March 2010, 05:26 AM
diamond_ramsey Offline
Registered User
 
Join Date: Aug 2009
Posts: 788
linuxfedorafirefox
:) bodhi.zazen, thank you for your posts. :)

bodhi.zazen, thank you for your posts.

Quote:
Originally Posted by bodhi.zazen View Post
...First, there is no auto-login. The default user and password is not listed anywhere.

Of course root and liveuser do not work....You can access the system with Ctrl-alt-F2, log in a root, no password.

Set a password for liveuser.

The set selinux into permissive mode and restart the lxde greeter...
I did the same as you and issued liveuser a password,

issued getforce and selinux was Enforcing mode,

issued setforce 0 now when I try getenforce, selinux is Permissive mode

updated the /etc/selinux/config file contents from Enforcing to Permissive

even created another account, too.
__________________
2 dual cores, 11 GB RAM, F18 Spherical Cow - 3.11.10-100.fc18.x86_64 / i686
2 dual cores, 11 GB RAM, F19 Schrödinger's Cat - 3.14.14-100.fc19.x86_64 / i686
2 dual cores, 11 GB RAM, F20 Heisenbug - 3.15.7-200.fc20.x86_64 / i686
2 dual cores, 11 GB RAM, F21 TBD - 3.16.0-0.rc7.git1.1.fc21.x86_64 / i686
80 x86_64 computing cores, 144 GB RAM & 8 SATA Seagate 7200.12 500 GB harddisks
Reply With Quote
  #8  
Old 24th March 2010, 02:52 AM
cwickert Offline
Fedora Contributor And Community Manager
 
Join Date: Nov 2009
Location: Münster, Germany
Posts: 40
linuxfedorafirefox
Re: FYI Security Spin. :)

Quote:
Originally Posted by bodhi.zazen View Post
First, there is no auto-login. The default user and password is not listed anywhere.
The LXDM autologin was simply not configured because the spin used SLIM previously. Fixed today, see http://git.fedorahosted.org/git/?p=s...ebd96f8a33597f

Quote:
Looking under the surface, the problem is that SELinux is blocking logins.
Should be fixed with selinux-policy-3.6.32-106, see https://bugzilla.redhat.com/show_bug.cgi?id=564320

Quote:
But even then I could only log into LXDE (which is fine) , but I could not log into gnome/openbox, openbox, or kde/openbox.
This is https://bugzilla.redhat.com/show_bug.cgi?id=520245

As you can see: I am working on all these problems. If you spot more, just let me know. Testing and Feedback is welcome.
__________________
Christoph Wickert
Xfce and LXDE Maintainer at the FedoraProject
Reply With Quote
  #9  
Old 24th March 2010, 08:12 PM
bodhi.zazen Offline
Registered User
 
Join Date: Jul 2006
Location: Montana
Posts: 731
windows_xp_2003firefox
Re: FYI Security Spin. :)

Quote:
Originally Posted by cwickert View Post
The LXDM autologin was simply not configured because the spin used SLIM previously. Fixed today, see http://git.fedorahosted.org/git/?p=s...ebd96f8a33597f


Should be fixed with selinux-policy-3.6.32-106, see https://bugzilla.redhat.com/show_bug.cgi?id=564320


This is https://bugzilla.redhat.com/show_bug.cgi?id=520245

As you can see: I am working on all these problems. If you spot more, just let me know. Testing and Feedback is welcome.
Thank you for all your work, I appreciate your effort and the information you posted here.

I will try the new spin.

Is there a mailing list for the Security respin ? I would be more then happy to post feedback.
__________________
If it is not broken, tweak it... If you break Fedora you get to keep both pieces :p
Reply With Quote
  #10  
Old 30th March 2010, 07:26 AM
diamond_ramsey Offline
Registered User
 
Join Date: Aug 2009
Posts: 788
linuxfedorafirefox
:) bodhi.zazen, thank you for your posts. :)

bodhi.zazen, thank you for your posts.

Quote:
Originally Posted by bodhi.zazen View Post
Thank you for all your work, I appreciate your effort and the information you posted here....
I appreciate Christoph's support, too.

Quote:
Originally Posted by bodhi.zazen View Post
...Is there a mailing list for the Security respin ? I would be more then happy to post feedback.
I saw a reference, here, Security Spin Desktop Support -

http://spins.fedoraproject.org/security/#support

"...Help via Chat

General help is available in irc channel #fedora on irc.freenode.net.

For help using IRC, please visit the Fedora IRC how-to.
Help via Email

General help with Fedora is available on the Fedora users' mailing list at users@lists.fedoraproject.org...."

Christoph, may have another location, too. For that, I am unsure.

Hope this helps.
__________________
2 dual cores, 11 GB RAM, F18 Spherical Cow - 3.11.10-100.fc18.x86_64 / i686
2 dual cores, 11 GB RAM, F19 Schrödinger's Cat - 3.14.14-100.fc19.x86_64 / i686
2 dual cores, 11 GB RAM, F20 Heisenbug - 3.15.7-200.fc20.x86_64 / i686
2 dual cores, 11 GB RAM, F21 TBD - 3.16.0-0.rc7.git1.1.fc21.x86_64 / i686
80 x86_64 computing cores, 144 GB RAM & 8 SATA Seagate 7200.12 500 GB harddisks
Reply With Quote
Reply

Tags
fyi, security, spin

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Spin Issue intrealm Fedora Spins & Remixes 2 30th January 2010 11:30 PM
Omega Spin mrnatch221 Fedora Spins & Remixes 2 7th October 2009 12:15 AM
eSATA HDD Spin Down? fixxer Hardware & Laptops 0 26th August 2007 09:58 PM


Current GMT-time: 06:34 (Saturday, 02-08-2014)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat