digabi-os
digabi-os copied to clipboard
Create toolset for checking ISO images
Create toolset, than can automatically test compiled ISO images for known issues. Should be compatible with Debian Live images (ie. should be able to check them as well).
For debian-cd project, there was GSOC project, see https://wiki.debian.org/DebianCDTester and http://pancutan.alioth.debian.org/
However this tool would be set of Bash scripts OR Python code.
Features
- SUID/SGID binaries must be whitelisted
- world-writable files/directories (?)
- check boot records (incl. EFI)
- check image size (warn, if size > 700MB)
- more...
If we use AppArmor, tell if some binaries have no rules (enforcing) enabled.