LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora
User Name
Password
Fedora This forum is for the discussion of the Fedora Project.

Notices



Reply
 
Search this Thread
Old 02-23-2008, 02:04 PM   #1
zcrxsir88
Member
 
Registered: Oct 2004
Location: Cardiff-by-the-Sea, CA
Distribution: Fedora X & RHEL X.X
Posts: 51

Rep: Reputation: 18
Fedora 8 Live DVD Security?!?!?!


All,

I'm looking at creating a Fedora 8 LiveCD, but i need to lock it down as much as possible. Basically all I want to have installed is Gnome (stripped of all the extras, no Firefox, Openoffice, etc).

I will be using LiveCD-Creator for this project. I tried using Revisor, but it hasn't been working well.

I have been told that you cannot crack open the ISO after creation. Is this true? I was thinking about building the ISO slimmed down as much as possible and then modifying the config files within the ISO after creation for better security.

Does anyone have any recommended kickstart configs?

Thanks in advance!
 
Old 02-24-2008, 01:54 PM   #2
b0uncer
Guru
 
Registered: Aug 2003
Distribution: CentOS, OS X
Posts: 5,131

Rep: Reputation: Disabled
If you want it secure, why pick up Fedora? Or the other way around, why not making it from ground up, so you know exactly what is taken in and what left out?

Check out linuxfromscratch.org => LFS, and the others.

Not sure what you mean by "crack open the ISO after creation"; the file can be mounted and read, as long as it's not encrypted (and even then, with enough time it's theoretically possible), and an image can be made of a ready ISO, modified and re-burnt. So I don't see how you could possibly lock something down that can be read the same thing as with copyright-protected audio CDs for example..none of the things actually worked like intended, mostly just annoyed the non-criminal-minded customers.
 
Old 02-24-2008, 08:25 PM   #3
zcrxsir88
Member
 
Registered: Oct 2004
Location: Cardiff-by-the-Sea, CA
Distribution: Fedora X & RHEL X.X
Posts: 51

Original Poster
Rep: Reputation: 18
What I mean by "cracking open the ISO" is to use one of the ISO tools to open it up, modify the config files so that when it boots up it's in the most secure possible configuration.
 
Old 02-24-2008, 10:56 PM   #4
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Quote:
Originally Posted by zcrxsir88 View Post
What I mean by "cracking open the ISO" is to use one of the ISO tools to open it up, modify the config files so that when it boots up it's in the most secure possible configuration.
Basically you mount the ISO, copy the contents, modify them, then make a new ISO. Example:
Code:
mount -t iso9660 -o loop livecd.iso /mnt/cdrom
cp -a /mnt/cdrom/* /tmp/whatever
# (Now make your edits in /tmp/whatever.)
cd /tmp/whatever
mkisofs -o /tmp/customlivecd.iso \
-R -J -V "My CD" -hide-rr-moved -v -d -N -no-emul-boot -boot-load-size 4 -boot-info-table \
-sort isolinux/iso.sort -b isolinux/isolinux.bin -c isolinux/isolinux.boot -A "My CD" .
 
Old 02-24-2008, 11:20 PM   #5
zcrxsir88
Member
 
Registered: Oct 2004
Location: Cardiff-by-the-Sea, CA
Distribution: Fedora X & RHEL X.X
Posts: 51

Original Poster
Rep: Reputation: 18
Thanks for the post. Has anyone had any luck actually breaking one of those ISO's open and modifying them? I was told that there is some problems with doing it. He said he tried, but ran into some sort of compression that is used in the disc and couldn't get it to boot properly again. (This was an ISO created with the Livecd-creator utility)
 
Old 02-25-2008, 12:57 AM   #6
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Quote:
Originally Posted by zcrxsir88 View Post
Thanks for the post. Has anyone had any luck actually breaking one of those ISO's open and modifying them? I was told that there is some problems with doing it. He said he tried, but ran into some sort of compression that is used in the disc and couldn't get it to boot properly again. (This was an ISO created with the Livecd-creator utility)
I do it all the time. I am not familiar with Fedora, but pretty much all live CDs use either Cramfs or Squashfs for their root filesystem image. All this does is add an additional step before you start modifying. Basically, once you've mounted/copied the ISO image contents, you mount the Cramfs/Squashfs image and then proceed in a similar fashion (copy the contents, modify them, then re-create the Cramfs/Squashfs image when you're done, before sticking it back in your /tmp/whatever directory in order to then create the ISO image.
 
Old 02-25-2008, 11:15 AM   #7
zcrxsir88
Member
 
Registered: Oct 2004
Location: Cardiff-by-the-Sea, CA
Distribution: Fedora X & RHEL X.X
Posts: 51

Original Poster
Rep: Reputation: 18
That is probably what he was talking about. I'll have to look into properly doing all that.

Thanks.
 
  


Reply

Tags
cd, creator, fedora, iso, live, livecd, security


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
live dvd fedora 8 X86_64 umfufu Linux - Newbie 2 12-26-2007 01:38 AM
How do I uses a Fedora 8 dvd after a Live Install rundarm Fedora - Installation 2 11-20-2007 03:24 AM
LXer: Fedora Games Live DVD LXer Syndicated Linux News 0 11-12-2007 04:11 AM
DvD writer on Fedora 7 live cd Xvium Linux - Hardware 2 06-20-2007 12:39 AM
where is the torrent for Fedora Live DVD 4 ? mozkill Fedora 1 08-18-2005 04:27 AM


All times are GMT -5. The time now is 06:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration