FYI Security Spin. :)

diamond_ramsey · #1 2nd March 2010, 06:06 AM

FYI Security Spin.

https://fedoraproject.org/wiki/Fedor...#Security_Spin

"...The Fedora Security Spin provides a safe test environment to work on security auditing, forensics, system rescue and teaching security testing methodologies in universities and other organizations. The spin is maintained by a community of security testers and developers. It comes with the clean and fast LXDE Desktop Environment and a customized menu that provides all the instruments needed to follow a proper test path for security testing or to rescue a broken system. The Live image has been crafted to make it possible to install software while running, and if you are running it from a USB stick created with the LiveUSB Creator's overlay feature, you can install and update software and save your test results permanently..."

About Security Spin -

http://spins.fedoraproject.org/security/#home

Available Apps of Security Spin -

https://fedorahosted.org/security-sp.../availableApps

Hope this helps.

blittle · #2 2nd March 2010, 06:47 AM

I like it, could use some more tools but its a good start.

diamond_ramsey · #3 3rd March 2010, 10:32 PM

blittle, thank you for your post.

Quote:

Originally Posted by blittle

I like it, could use some more tools but its a good start.

Very true, if you have idea(s) for others tools, then please contact the maintainers and provide your input for the Security Spin.

I think this is a great start for an effective set of tools.

Hope this helps.

bodhi.zazen · #4 18th March 2010, 10:41 PM

Quote:

Originally Posted by diamond_ramsey

FYI Security Spin.

https://fedoraproject.org/wiki/Fedor...#Security_Spin

"...The Fedora Security Spin provides a safe test environment to work on security auditing, forensics, system rescue and teaching security testing methodologies in universities and other organizations. The spin is maintained by a community of security testers and developers. It comes with the clean and fast LXDE Desktop Environment and a customized menu that provides all the instruments needed to follow a proper test path for security testing or to rescue a broken system. The Live image has been crafted to make it possible to install software while running, and if you are running it from a USB stick created with the LiveUSB Creator's overlay feature, you can install and update software and save your test results permanently..."

About Security Spin -

http://spins.fedoraproject.org/security/#home

Available Apps of Security Spin -

https://fedorahosted.org/security-sp.../availableApps

Hope this helps.

Looks like a great idea, but can you tell me how to contact the maintainers of this spin ?

I could not find any contact information on any of the links, no mailing list or IRC channel other then the general Fedora info.

I took rawhide for a look-see , the Security Daily Build, and there are a few issues.

First, there is no auto-login. The default user and password is not listed anywhere.

Of course root and liveuser do not work.

Looking under the surface, the problem is that SELinux is blocking logins.

You can access the system with Ctrl-alt-F2, log in a root, no password.

Set a password for liveuser.

The set selinux into permissive mode and restart the lxde greeter.

But even then I could only log into LXDE (which is fine) , but I could not log into gnome/openbox, openbox, or kde/openbox.

Seemed this thread was as good as posting o n#fedora or to the general fedora users mailing list, but if not, I can post in those locations as well.

diamond_ramsey · #5 18th March 2010, 11:01 PM

bodhi.zazen, thank you for your post.

Quote:

Originally Posted by bodhi.zazen

Looks like a great idea, but can you tell me how to contact the maintainers of this spin ?...

I think that at the URL -

http://fedoraproject.org/wiki/Securi...n#Owner.28s.29

Try the reference to the owner -

http://fedoraproject.org/wiki/JoergSimon

Joerg, is very knowledgeable as well as helpful. I see great promise in this Security Spin.

Quote:

Originally Posted by bodhi.zazen

...I took rawhide for a look-see , the Security Daily Build, and there are a few issues...

+1. Feedback makes for a better understanding. :v)

Hope this helps.

bodhi.zazen · #6 18th March 2010, 11:17 PM

Perfect, thank you.

diamond_ramsey · #7 22nd March 2010, 05:26 AM

bodhi.zazen, thank you for your posts.

Quote:

Originally Posted by bodhi.zazen

...First, there is no auto-login. The default user and password is not listed anywhere.

Of course root and liveuser do not work....You can access the system with Ctrl-alt-F2, log in a root, no password.

Set a password for liveuser.

The set selinux into permissive mode and restart the lxde greeter...

I did the same as you and issued liveuser a password,

issued getforce and selinux was Enforcing mode,

issued setforce 0 now when I try getenforce, selinux is Permissive mode

updated the /etc/selinux/config file contents from Enforcing to Permissive

even created another account, too.

**cwickert** · #8 24th March 2010, 02:52 AM

Quote:

Originally Posted by bodhi.zazen

First, there is no auto-login. The default user and password is not listed anywhere.

The LXDM autologin was simply not configured because the spin used SLIM previously. Fixed today, see http://git.fedorahosted.org/git/?p=s...ebd96f8a33597f

Quote:

Looking under the surface, the problem is that SELinux is blocking logins.

Should be fixed with selinux-policy-3.6.32-106, see https://bugzilla.redhat.com/show_bug.cgi?id=564320

Quote:

But even then I could only log into LXDE (which is fine) , but I could not log into gnome/openbox, openbox, or kde/openbox.

This is https://bugzilla.redhat.com/show_bug.cgi?id=520245

As you can see: I am working on all these problems. If you spot more, just let me know. Testing and Feedback is welcome.

bodhi.zazen · #9 24th March 2010, 08:12 PM

Quote:

Originally Posted by cwickert

The LXDM autologin was simply not configured because the spin used SLIM previously. Fixed today, see http://git.fedorahosted.org/git/?p=s...ebd96f8a33597f

Should be fixed with selinux-policy-3.6.32-106, see https://bugzilla.redhat.com/show_bug.cgi?id=564320

This is https://bugzilla.redhat.com/show_bug.cgi?id=520245

As you can see: I am working on all these problems. If you spot more, just let me know. Testing and Feedback is welcome.

Thank you for all your work, I appreciate your effort and the information you posted here.

I will try the new spin.

Is there a mailing list for the Security respin ? I would be more then happy to post feedback.

diamond_ramsey · #10 30th March 2010, 07:26 AM

bodhi.zazen, thank you for your posts.

Quote:

Originally Posted by bodhi.zazen

Thank you for all your work, I appreciate your effort and the information you posted here....

I appreciate Christoph's support, too.

Quote:

Originally Posted by bodhi.zazen

...Is there a mailing list for the Security respin ? I would be more then happy to post feedback.

I saw a reference, here, Security Spin Desktop Support -

http://spins.fedoraproject.org/security/#support

"...Help via Chat

General help is available in irc channel #fedora on irc.freenode.net.

For help using IRC, please visit the Fedora IRC how-to.
Help via Email

General help with Fedora is available on the Fedora users' mailing list at users@lists.fedoraproject.org...."

Christoph, may have another location, too. For that, I am unsure.

Hope this helps.