:: Re: [DNG] [Kali Linux 0003165]: Fin…
Kezdőlap
Delete this message
Reply to this message
Szerző: sam
Dátum:  
Címzett: dng
Tárgy: Re: [DNG] [Kali Linux 0003165]: Find a way to disable most services by default with systemd
On Mon, 11 Jul 2016 23:06:24 +0200
Jaromil <jaromil@???> wrote:

>
> Mostly for historical reasons, I'm posting here below the trace of a
> Kali Linux bug that has just been deleted from their tracker.
>
> Forensic distros are useful for many reasons. When minimal they can be
> also more reliable, I guess most people here convenes. So now I'm
> trying to get the Parrot OS developers interested in having a spin
> based on Devuan, with no success. Unfortunately Their parrot-build
> scripts are admittedly still incomplete to reproduce a release.
>
> Anyone here has a strong (perhaps professional, hence sustainable)
> interest in a forensic distro without systemd?
>


YES!

I've previously tried a number of the available forensic Linux options, but I succeded in breaking every one of them when I tried to gut them of their systemd payloads. I'd really love a Devuan-based forensic suite, or even something like Whonix but without the systemd cruft.

Alas, my interest is not presently a professionally-motivated or directed one (though that may change soon enough, stranger things may happen and all that), however I would greatly appreciate having a non-systemd castrated (and in particular Devuan) forensic distro in my toolbox which I have thoroughly tested and deployed prior to that happening.

How shall we make it so?

--Sam


> ----- Forwarded message from Kali Linux Bug Tracker
> <noreply@???> -----
>
> Date: Mon, 11 Jul 2016 20:59:28 +0100
> From: Kali Linux Bug Tracker <noreply@???>
> To: jaromil@???
> Subject: [Kali Linux 0003165]: Find a way to disable most services by
> default with systemd
>
>
> The following issue has been DELETED. 
> ====================================================================== 
> Reported By:                newhack
> Assigned To:                rhertzog
> ====================================================================== 
> Project:                    Kali Linux
> Issue ID:                   3165
> Category:                   Kali Package Bug
> Reproducibility:            always
> Severity:                   minor
> Priority:                   normal
> Status:                     resolved
> Target Version:             2.0
> Resolution:                 fixed
> Fixed in Version:           2016.2
> ====================================================================== 
> Date Submitted:             2016-03-17 06:26 GMT
> Last Modified:              2016-03-17 06:26 GMT
> ====================================================================== 
> Summary:                    Find a way to disable most services by
> default with systemd
> Description: 
> Kali forks update-rc.d to disable most services that depend on
> $network to avoid having services be accessible without any admin
> configuration.

>
> Kali Rolling switched to systemd and the hack in update-rc.d is now
> mostly useless. We must find a new solution for this.
> ======================================================================
>
> ----------------------------------------------------------------------
> (0004946) rhertzog (administrator) - 2014-12-08 14:25
> https://bugs.kali.org/view.php?id=3165#c4946
> ----------------------------------------------------------------------
> It looks like that the proper answer is using a "preset" file:
> http://freedesktop.org/wiki/Software/systemd/Preset/
>
> This answers at least how to not enable services by default. But it
> doesn't answer how to not start any service in "forensic" mode. This
> is probably implemented with a different "target" at boot time.
>
> ----------------------------------------------------------------------
> (0004945) rhertzog (administrator) - 2014-12-09 09:10
> https://bugs.kali.org/view.php?id=3165#c4945
> ----------------------------------------------------------------------
> Unfortunately, it looks like we can't use Preset file in Debian
> currently. I just filed a bug about this:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772555
>
> ----------------------------------------------------------------------
> (0004947) rhertzog (administrator) - 2015-03-25 06:05
> https://bugs.kali.org/view.php?id=3165#c4947
> ----------------------------------------------------------------------
> It looks like most of the services are still properly disabled thanks
> to some systemd/update-rc.d integration. But there are corner cases
> when the packages ships a .service file that does not have the same
> name as the init script.
>
> I just filed http://bugs.debian.org/781155 on openbsd-inetd for
> example. And also the update-rc.d integration with systemd is
> somewhat problematic: http://bugs.debian.org/746580
>
> ----------------------------------------------------------------------
> (0004948) jaromil (reporter) - 2015-07-22 11:30
> https://bugs.kali.org/view.php?id=3165#c4948
> ----------------------------------------------------------------------
> Hi there and apologies for slight off-topic, just mentioning:
>
> In case you do experience too many problems with the systemd switch
> of Debian, we have arms open over at Devuan with a beta release
> approaching and a complete CI that is building packages for all
> original targets, see http://devuan.org
>
> Even just an experimental branch of Kali 2.0 based on Devuan would be
> easy to do and may provide a better experience for both users and
> developers.
>
> ----------------------------------------------------------------------
> (0004949) rhertzog (administrator) - 2015-07-22 13:29
> https://bugs.kali.org/view.php?id=3165#c4949
> ----------------------------------------------------------------------
> Jaromil, in fact the switch has been rather smooth for us and we look
> forward to taking advantages of systemd's feature set!
>
> ----------------------------------------------------------------------
> (0004950) rhertzog (administrator) - 2016-03-08 10:35
> https://bugs.kali.org/view.php?id=3165#c4950
> ----------------------------------------------------------------------
> This issue should be fixed with init-system-helpers_1.28+kali3.dsc and
> base-files 2016.2.0.
>
> base-files provides systemctl preset files and init-system-helpers
> has been modified so that "deb-systemd-helper enable" calls
> "systemctl preset" instead of doing the work itself.
>
> Issue History 
> Date Modified    Username       Field
> Change
> ======================================================================
> 2016-03-17 06:26 newhack        New Issue 2016-03-17 06:26
> newhack        Issue generated from: 0003156                   

>
> 2016-07-11 20:59 g0tmi1k        Issue Deleted:
> 0003165
> ======================================================================

>
>
> ----- End forwarded message -----
>
>
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng