[Fedora-spins] [spin-kickstarts/F-15] Security: Final fixes for F15
commit 12b759046703c820b19406a8e00ecc36c779fe6e
Author: Christoph Wickert <cwickert(a)fedoraproject.org>
Date: Sat May 7 14:02:42 2011 +0200
Security: Final fixes for F15
fedora-livecd-security.ks | 64 +++++++++++++++++++++++++++++++-------------
1 files changed, 45 insertions(+), 19 deletions(-)
---
diff --git a/fedora-livecd-security.ks b/fedora-livecd-security.ks
index 0b46ba9..f839e1f 100644
--- a/fedora-livecd-security.ks
+++ b/fedora-livecd-security.ks
@@ -22,39 +22,61 @@
%include fedora-live-minimization.ks
%packages
-#GUI Stuff
+### LXDE desktop
@lxde-desktop
lxlauncher
obconf
lxdm
-xarchiver
-gnome-bluetooth
+
+### internet
+firefox
+icedtea-web
+midori
+claws-mail
+
+### audio & video
alsa-plugins-pulseaudio
-system-config-printer
-#gmixer
-pavucontrol
-lxmusic
asunder
+lxmusic
+pavucontrol
+
+### system
+gigolo
+
+### more desktop stuff
+fedora-icon-theme
+adwaita-cursor-theme
+adwaita-gtk2-theme
+adwaita-gtk3-theme
+
+# pam-fprint causes a segfault in LXDM when enabled
+-fprintd-pam
+
+# needed for automatic unlocking of keyring (#643435)
+gnome-keyring-pam
+
+gnome-bluetooth
hal-storage-addon
-xcompmgr
-xdg-user-dirs-gtk
+
+# needed for xdg-open to support LXDE
perl-File-MimeInfo
-gnome-keyring-pam
+
+xdg-user-dirs-gtk
+
gnome-packagekit*
-kpackagekit
+
+# LXDE has lxpolkit. Make sure no other authentication agents end up in the spin.
-polkit-gnome
-polkit-kde
+
+# make sure xfce4-notifyd is not pulled in
notification-daemon
-xfce4-notifyd
-metacity
-gigolo
-
-
-# internet
-firefox
-midori
-claws-mail
+# make sure xfwm4 is not pulled in for firstboot
+# https://bugzilla.redhat.com/show_bug.cgi?id=643416
+metacity
# Command line
cnetworkmanager
@@ -83,10 +105,14 @@ yum-presto
-sendmail
ssmtp
-acpid
+
+# drop some system-config things
-system-config-boot
+#-system-config-language
-system-config-lvm
-system-config-network
-system-config-rootpassword
+#-system-config-services
-policycoreutils-gui
# Useful tools
@@ -311,7 +337,7 @@ cat >> /etc/rc.d/init.d/livesys << EOF
cat > /etc/xdg/lxsession/LXDE/autostart << FOE
/usr/libexec/gam_server
@lxpanel --profile LXDE
-@pcmanfm --desktop --profile lxde
+@pcmanfm --desktop --profile LXDE
@pulseaudio -D
FOE