Add missing 'f' to updates and testing repo urls

Also update the comments at the top of fedora-live-kde.ks and
fedora-livecd-kde.ks, it's been ages since "livecd-kde" last fit on an
actual CD, the target size is 1 GiB now.

Makefile

@@ -1,20 +1,38 @@
 # Get the version name first by seeing if HEAD is tagged
-version := $(shell git tag --points-at HEAD)
+version := $(shell git tag --points-at HEAD -l '0.*.*' | head -1)
 # And if it wasn't use a git hash
 ifeq ($(version),)
   version := $(shell git log -1 --abbrev=8 --pretty=git%h)
 endif
 
+DESTDIR := /usr
+
+DATADIR := $(DESTDIR)/share
+
+DOCDIR := $(DATADIR)/doc
+
+name := spin-kickstarts
+
 all: dist
 
+install:
+	mkdir -p -m 755 $(DATADIR)/$(name)
+	install *.ks* -m 644 $(DATADIR)/$(name)
+	mkdir -p -m 755 $(DATADIR)/$(name)/custom
+	install -m 644 custom/* $(DATADIR)/$(name)/custom
+	mkdir -p -m 755 $(DATADIR)/$(name)/l10n
+	install -m 644 l10n/* $(DATADIR)/$(name)/l10n
+
 clean:
-	rm -f spin-kickstarts-*.tar.gz
+	rm -f $(name)-*.tar.gz
 
-dist:
-	git archive --format=tar --prefix=spin-kickstarts-$(version)/ HEAD | gzip > spin-kickstarts-$(version).tar.gz
+dist:	$(name)-$(version).tar.gz
 
-publish:
-	scp spin-kickstarts-$(version).tar.gz fedorahosted.org:spin-kickstarts
+$(name)-$(version).tar.gz:
+	git archive --format=tar --prefix=$(name)-$(version)/ HEAD | gzip > $(name)-$(version).tar.gz
+
+publish:	$(name)-$(version).tar.gz
+	scp $(name)-$(version).tar.gz fedorahosted.org:$(name)
 
 dist-clean:
 	git clean -f -d

custom/qa-test-day.ks

@@ -66,7 +66,6 @@ selinux --permissive
 -realmd
 -rhythmbox
 -sane-backends*
--sendmail
 -shotwell
 -simple-scan
 -system-config-*

fedora-arm-base.ks

@@ -4,6 +4,9 @@ auth --useshadow --enablemd5
 selinux --enforcing
 firewall --enabled --service=mdns,ssh
 
+# configure extlinux bootloader
+bootloader extlinux
+
 # make sure that initial-setup runs and lets us do all the configuration bits
 firstboot --reconfig
 
@@ -22,7 +25,10 @@ kernel-lpae
 
 chrony
 arm-boot-config
+extlinux-bootloader
 initial-setup
+#lets resize / on first boot
+dracut-modules-growroot
 
 # install uboot images
 uboot-beagle
@@ -33,6 +39,7 @@ uboot-smdkv310
 uboot-uevm
 uboot-wandboard_dl
 uboot-wandboard_solo
+uboot-wandboard_quad
 
 %end
 

fedora-arm-desktop-vfat.ks

@@ -0,0 +1,12 @@
+%include fedora-arm-base.ks
+%include fedora-arm-xbase.ks
+%include fedora-desktop-packages.ks
+%include fedora-arm-vfat-partitioning.ks
+
+part / --size=4000 --fstype ext4
+
+%packages
+-initial-setup
+
+%end
+

fedora-arm-desktop.ks

@@ -0,0 +1,12 @@
+%include fedora-arm-base.ks
+%include fedora-arm-xbase.ks
+%include fedora-desktop-packages.ks
+%include fedora-arm-partitioning.ks
+
+part / --size=4000 --fstype ext4
+
+%packages
+-initial-setup
+
+%end
+

fedora-arm-kde-vfat.ks

@@ -3,6 +3,8 @@
 %include fedora-kde-packages.ks
 %include fedora-arm-vfat-partitioning.ks
 
+part / --size=4000 --fstype ext4
+
 %post
 echo -n "Enabling initial-setup gui mode on startup"
 ln -s /usr/lib/systemd/system/initial-setup-graphical.service /etc/systemd/system/graphical.target.wants/initial-setup-graphical.service

fedora-arm-kde.ks

@@ -3,6 +3,8 @@
 %include fedora-kde-packages.ks
 %include fedora-arm-partitioning.ks
 
+part / --size=4000 --fstype ext4
+
 %post
 echo -n "Enabling initial-setup gui mode on startup"
 ln -s /usr/lib/systemd/system/initial-setup-graphical.service /etc/systemd/system/graphical.target.wants/initial-setup-graphical.service

fedora-arm-mate-vfat.ks

@@ -3,6 +3,8 @@
 %include fedora-mate-packages.ks
 %include fedora-arm-vfat-partitioning.ks
 
+part / --size=5000 --fstype ext4
+
 %post
 echo -n "Enabling initial-setup gui mode on startup"
 ln -s /usr/lib/systemd/system/initial-setup-graphical.service /etc/systemd/system/graphical.target.wants/initial-setup-graphical.service

fedora-arm-mate.ks

@@ -3,6 +3,8 @@
 %include fedora-mate-packages.ks
 %include fedora-arm-partitioning.ks
 
+part / --size=5000 --fstype ext4
+
 %post
 echo -n "Enabling initial-setup gui mode on startup"
 ln -s /usr/lib/systemd/system/initial-setup-graphical.service /etc/systemd/system/graphical.target.wants/initial-setup-graphical.service

fedora-arm-minimal-vfat.ks

@@ -1,6 +1,9 @@
 %include fedora-arm-base.ks
 %include fedora-arm-vfat-partitioning.ks
 
+part swap --size=128 --fstype swap
+part / --size=1400 --fstype ext4
+
 %post
 
 # setup systemd to boot to the right runlevel

fedora-arm-minimal.ks

@@ -1,6 +1,9 @@
 %include fedora-arm-base.ks
 %include fedora-arm-partitioning.ks
 
+part swap --size=128 --fstype swap
+part / --size=1400 --fstype ext4
+
 %post
 
 # setup systemd to boot to the right runlevel

fedora-arm-partitioning.ks

@@ -1,5 +1,4 @@
-bootloader --location=none
 part /boot --size=512 --fstype ext3
 part swap --size=512 --fstype swap
-part / --grow --size=6500 --fstype ext4
+part / --size=3000 --fstype ext4
 

fedora-arm-vfat-partitioning.ks

@@ -1,5 +1,4 @@
-bootloader --location=none
 part /boot/uboot --size=20 --fstype vfat
 part swap --size=512 --fstype swap
-part / --grow --size=6500 --fstype ext4
+part / --size=3400 --fstype ext4
 

fedora-desktop-packages.ks

@@ -0,0 +1,23 @@
+%packages
+@firefox
+@gnome-desktop
+@libreoffice
+
+# FIXME; apparently the glibc maintainers dislike this, but it got put into the
+# desktop image at some point.  We won't touch this one for now.
+nss-mdns
+
+# This one needs to be kicked out of @standard
+-smartmontools
+
+# We use gnome-control-center's printer and input sources panels instead
+-system-config-printer
+-im-chooser
+
+# Similarly, there was also some debate about removing rsyslog from @standard
+# (since much of its functionality is provided by journald now), but it's
+# not going to happen for f20 either, so drop it here for now.
+# https://lists.fedoraproject.org/pipermail/devel/2013-July/186796.html
+-rsyslog
+
+%end

fedora-install-fedora.ks

@@ -16,16 +16,17 @@
 # use the source repo, we can't just include fedora-repo.ks
 
 # In the master branch the rawhide repo commands should be uncommented.
-repo --name=rawhide --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch
-repo --name=rawhide-source  --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide-source&arch=$basearch
+#repo --name=rawhide --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch
+#repo --name=rawhide-source  --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide-source&arch=$basearch
 
 # In non-master branches the fedora repo commands should be uncommented
-#repo --name=fedora --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
-#repo --name=fedora-source  --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-source-$releasever&arch=$basearch
+repo --name=fedora --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name=fedora-source  --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-source-$releasever&arch=$basearch
 
 # Package manifest for the compose.  Uses repo group metadata to translate groups.
 # (default groups for the configured repos are added by --default)
-%packages --default
+# @base got renamed to @standard, but @base is still included by default by pungi.
+%packages --default --nobase
 
 # pungi is an inclusive depsolver so that multiple packages are brought 
 # in to satisify dependencies and we don't always want that. So we  use
@@ -39,7 +40,8 @@ repo --name=rawhide-source  --mirrorlist=http://mirrors.fedoraproject.org/mirror
 -generic*
 -GConf2-dbus*
 -bluez-gnome
--java-1.8.0-openjdk
+# Periods cause problems in paterns, so replace with *s
+-java-1*8*0-openjdk
 -community-mysql*
 -jruby*
 

fedora-live-base.ks

@@ -77,8 +77,6 @@ exists() {
     \$*
 }
 
-touch /.liveimg-configured
-
 # Make sure we don't mangle the hardware clock on shutdown
 ln -sf /dev/null /etc/systemd/system/hwclock-save.service
 
@@ -204,6 +202,13 @@ systemctl --no-reload disable atd.service 2> /dev/null || :
 systemctl stop crond.service 2> /dev/null || :
 systemctl stop atd.service 2> /dev/null || :
 
+# Mark things as configured
+touch /.liveimg-configured
+
+# add static hostname to work around xauth bug
+# https://bugzilla.redhat.com/show_bug.cgi?id=679486
+echo "localhost" > /etc/hostname
+
 EOF
 
 # bah, hal starts way too late

fedora-live-design-suite.ks

@@ -17,7 +17,7 @@ part / --size 8192
 # graphics
 blender
 bluefish 
-cinepaint
+#cinepaint
 cmyktool
 darktable
 dia
@@ -26,23 +26,26 @@ fontforge
 font-manager 
 gimp
 gimp-*-plugin
+gimp-data-extras
+gimp-high-pass-filter
+gimp-normalmap
+gimp-resynthesizer
 gpick
 GREYCstoration-gimp 
 hugin 
-inkscape
 mypaint
+inkscape
 nautilus-image-converter
 optipng
-# pinta # is huge because it needs mono
-# postr # dropped because shotwell support flickr upload
+phatch
+screenruler
 scribus
 colord-extra-profiles 
 synfigstudio
-# ufraw # dropped as duplicate of darktable
 xournal
 
 # office
-gnote
+vym
 pdfshuffler  
 
 # internet
@@ -59,12 +62,16 @@ pitivi
 # fonts
 aajohan-comfortaa-fonts
 adobe-source-sans-pro-fonts
+campivisivi-titillium-fonts
 lato-fonts
 overpass-fonts
 
 # removal of duplicated and unneeded applications
 -gnome-boxes
+-gthumb
 -eog
+-gnome-photos
+
 
 # Legacy cmdline things we don't want
 -krb5-auth-dialog
@@ -89,22 +96,32 @@ overpass-fonts
 
 %end
 
-#%post
+%post
+#Override the favorite desktop application in Dash
+cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
+[org.gnome.shell]
+favorite-apps=['firefox.desktop', 'evolution.desktop', 'shotwell.desktop', 'gimp.desktop', 'inkscape.desktop', 'blender.desktop', 'libreoffice-writer.desktop', 'scribus.desktop', 'nautilus.desktop', 'bijiben.desktop', 'anaconda.desktop']
+#Enable categories in Gnome Shell
+app-folder-categories=['Utilities', 'Sundry', 'Office', 'Network', 'Internet', 'Graphics', 'Games', 'Multimedia', 'System', 'Development', 'Accessories', 'System Settings', 'Other']
+FOE
 
 # Add link to the Inkscape Course
-#cat >> /usr/share/applications/inkscape-course.desktop << FOE
-#[Desktop Entry]
-#Name=Introduction To Inkscape
-#GenericName=Inkscape Course
-#Comment=Materials from Máirín Duffy's Inkscape Class
-#Exec=xdg-open http://linuxgrrl.com/learn/Introduction_To_Inkscape
-#Type=Application
-#Icon=fedora-logo-icon
-#Categories=Graphics;Documentation;
-#FOE
-#chmod a+x /usr/share/applications/inkscape-course.desktop
+cat >> /usr/share/applications/inkscape-course.desktop << FOE
+[Desktop Entry]
+Name=Introduction To Inkscape
+GenericName=Inkscape Course
+Comment=Materials from Máirín Duffy's Inkscape Class
+Exec=xdg-open http://linuxgrrl.com/learn/Introduction_To_Inkscape
+Type=Application
+Icon=fedora-logo-icon
+Categories=Graphics;Documentation;
+FOE
+chmod a+x /usr/share/applications/inkscape-course.desktop
 
-#EOF
+# rebuild schema cache with any overrides we installed
+glib-compile-schemas /usr/share/glib-2.0/schemas
 
-#%end
+EOF
+
+%end
 

fedora-live-desktop.ks

@@ -3,27 +3,10 @@
 # mailto:desktop@lists.fedoraproject.org
 
 %include fedora-live-base.ks
+%include fedora-desktop-packages.ks
 
 part / --size 4096
 
-%packages
-@firefox
-@gnome-desktop
-@libreoffice
-
-# FIXME; apparently the glibc maintainers dislike this, but it got put into the
-# desktop image at some point.  We won't touch this one for now.
-nss-mdns
-
-# This one needs to be kicked out of @standard
--smartmontools
-
-# We use gnome-control-center's printer and input sources panels instead
--system-config-printer
--im-chooser
-
-%end
-
 %post
 cat >> /etc/rc.d/init.d/livesys << EOF
 

fedora-live-jam-kde.ks

@@ -116,7 +116,8 @@ lv2-c++-tools
 lv2-samplv1
 lv2-synthv1
 lv2-drumkv1
-
+lv2-triceratops
+lv2-newtonator
 
 #dssi
 nekobee-dssi
@@ -140,6 +141,7 @@ nano
 mscore
 lilypond
 frescobaldi
+mup
 
 #audio utilities
 jamin
@@ -154,6 +156,7 @@ rtirq
 #patchage
 #ladish #not packaged yet
 japa
+radium-compressor
 
 #streaming
 idjc

fedora-live-kde.ks

@@ -2,7 +2,7 @@
 #
 # Description:
 # - Fedora Live Spin with the K Desktop Environment (KDE), 2 GiB version
-#   see fedora-livecd-kde.ks for the default CD-sized version
+#   see fedora-livecd-kde.ks for the default 1 GiB version
 #
 # Maintainer(s):
 # - Sebastian Vahl <fedora@deadbabylon.de>

fedora-livecd-kde.ks

@@ -1,7 +1,7 @@
 # fedora-livecd-kde.ks
 #
 # Description:
-# - Fedora Livecd Spin with the K Desktop Environment (KDE)
+# - Fedora Live Spin with the K Desktop Environment (KDE), default 1 GiB version
 #
 # Maintainer(s):
 # - Sebastian Vahl <fedora@deadbabylon.de>
@@ -10,6 +10,9 @@
 %include fedora-live-kde-base.ks
 %include fedora-live-minimization.ks
 
+# DVD payload
+part / --size=4096
+
 
 %packages
 # unwanted packages from @kde-desktop

fedora-livecd-lxde.ks

@@ -36,7 +36,7 @@ MailClient=sylpheed.desktop
 FOE
 
 # set up auto-login for liveuser
-sed -i 's|# autologin=dgod|autologin=liveuser|g' /etc/lxdm/lxdm.conf
+sed -i 's/# autologin=.*/autologin=liveuser/g' /etc/lxdm/lxdm.conf
 
 # Show harddisk install on the desktop
 sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop
@@ -45,32 +45,13 @@ cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
 
 # create default config for clipit, otherwise it displays a dialog on startup
 mkdir -p /home/liveuser/.config/clipit
-cat .config/clipit/clipitrc  << FOE
+cat > /home/liveuser/.config/clipit/clipitrc  << FOE
 [rc]
 use_copy=true
-use_primary=false
-synchronize=false
-automatic_paste=false
-show_indexes=false
 save_uris=true
-use_rmb_menu=false
 save_history=false
-history_limit=50
-items_menu=20
 statics_show=true
-statics_items=10
-hyperlinks_only=false
-confirm_clear=false
 single_line=true
-reverse_history=false
-item_length=50
-ellipsize=2
-history_key=<Ctrl><Alt>H
-actions_key=<Ctrl><Alt>A
-menu_key=<Ctrl><Alt>P
-search_key=<Ctrl><Alt>F
-offline_key=<Ctrl><Alt>O
-offline_mode=false
 FOE
 
 # this goes at the end after all other changes.

fedora-livecd-security.ks

@@ -4,365 +4,135 @@
 #   A fully functional live OS based on Fedora for use in security auditing, 
 #   forensics research, and penetration testing.
 # Maintainers:
-#  Christoph Wickert <cwickert [AT] fedoraproject <dot> org>
-#  Joerg Simon <jsimon [AT] fedoraproject <dot> org>
-#  Fabian Affolter <fab [AT] fedoraproject <dot> org>
+#   Fabian Affolter <fab [AT] fedoraproject <dot> org>
+#   Joerg Simon <jsimon [AT] fedoraproject <dot> org>
+#   Christoph Wickert <cwickert [AT] fedoraproject <dot> org>
 # Acknowledgements:
-#   Fedora LiveCD Xfce Spin team - some work here was inherited, many thanks!
+#   Fedora LiveCD Xfce Spin team - some work here was and will be inherited,
+#   many thanks!
 #   Fedora LXDE Spin - Copied over stuff to make LXDE Default
-#   Luke Macken, Adam Miller for the original OpenBox Security ks and all 
+#   Luke Macken and Adam Miller for the original OpenBox Security ks and all
 #   the Security Applications! 
 #   Hiemanshu Sharma <hiemanshu [AT] fedoraproject <dot> org>
-# Important!!!!
-#   Beginning with Security Stuff - we use pattern to parse the kickstart file 
-#   for building the security menu - please use 
-#   # Category: Categoryname <- for new Categories
-#   # Command: Commandname <- for the given Command
-#   # rCommand: Commandname <- for a command as root
-#   # Entry: Menu-Entry <- for the MenuEntry Name (optional)
 
 %include fedora-live-base.ks
 %include fedora-live-minimization.ks
 
 %packages
-### LXDE desktop
-@lxde-desktop
-lxlauncher
-obconf
-lxdm
+@xfce-desktop
+@xfce-apps
+#@xfce-extra-plugins
+#@xfce-media
+#@xfce-office
+#@firefox
 
-### internet
-firefox
-icedtea-web
-pidgin
-sylpheed
-transmission
-
-### graphics
-#mtpaint
-
-### audio & video
-alsa-plugins-pulseaudio
-asunder
-lxmusic
-gxine
-gxine-mozplugin
-pavucontrol
-pnmixer
-# I'm looking for something smaller than
-#gnomebaker
-
-### utils
-galculator
-parcellite
-xpad
-
-### system
-gigolo
-Terminal
-
-### more desktop stuff
-fedora-icon-theme
-adwaita-cursor-theme
-adwaita-gtk2-theme
-adwaita-gtk3-theme
-
-# pam-fprint causes a segfault in LXDM when enabled
--fprintd-pam
-
-# needed for automatic unlocking of keyring (#643435)
-gnome-keyring-pam
-
-network-manager-applet
-
-# needed for xdg-open to support LXDE
-perl-File-MimeInfo
-
-xcompmgr
-xdg-user-dirs-gtk
-xscreensaver-extras
-
-# use yumex instead of gnome-packagekit
-#yumex
--apper
--gnome-packagekit
-
-# LXDE has lxpolkit. Make sure no other authentication agents end up in the spin.
--polkit-gnome
--polkit-kde
-
-# make sure xfce4-notifyd is not pulled in
-notification-daemon
--xfce4-notifyd
-
-# make sure xfwm4 is not pulled in for firstboot
-# https://bugzilla.redhat.com/show_bug.cgi?id=643416
-metacity
-
-# Command line
-powertop
-wget
-yum-utils
-
-# dictionaries are big
--aspell-*
--hunspell-*
--man-pages-*
--words
+# Security tools (not ready at the moment)
+@security-lab
+security-menus
 
 # save some space
--sendmail
-ssmtp
+-autofs
 -acpid
+-gimp-help
+-desktop-backgrounds-basic
+-realmd                     # only seems to be used in GNOME
+-PackageKit*                # we switched to yumex, so we don't need this
+-aspell-*                   # dictionaries are big
+-man-pages-*
 
 # drop some system-config things
 -system-config-boot
-#-system-config-language
--system-config-lvm
+#-system-config-network
 -system-config-rootpassword
 #-system-config-services
 -policycoreutils-gui
--gnome-disk-utility
 
-# we need UPower for suspend and hibernate
-upower
-
-###################### Security Stuffs ############################
-security-menus
-##################################################################
-# Category: Reconnaissance
-# rCommand: dsniff -h
-dsniff
-# rCommand: hping -h
-hping3
-nc6
-nc
-# Command: ncrack -h
-ncrack
-ngrep
-# rCommand: nmap -h
-nmap
-# Command: zenmap-root
-nmap-frontend
-# Command: p0f -h
-p0f
-# rCommand: sing -h
-sing
-# Command: scanssh -h
-#temp takout scanssh
-# rCommand: scapy -h
-scapy
-# Command: socat
-# Entry: Socket cat
-socat
-# rCommand: tcpdump -h
-tcpdump
-# rCommand: unicornscan -h
-unicornscan
-# rCommand: wireshark
-# Entry: Wireshark
-wireshark-gnome
-# Command: xprobe2
-xprobe2
-# Command: nbtscan
-nbtscan
-# Command: tcpxtract
-tcpxtract
-# Command: firewalk
-# Entry: Firewalk
-firewalk
-# Command: hunt
-# Entry: Hunt
-hunt
-# Command: dnsenum -h
-# Entry: DNS Enumeration
-dnsenum
-# rCommand: iftop
-iftop
-# Command: argus -h
-argus
-# rCommand: ettercap -C
-# Entry: Ettercap
-ettercap
-ettercap-gtk
-# rCommand: packETH
-packETH
-# rCommand: iptraf-ng
-iptraf-ng
-pcapdiff
-# rCommand: etherape
-etherape
-# Command: lynis
-lynis
-# rCommand: netsniff-ng
-netsniff-ng
-# Command: tcpjunk -x
-tcpjunk
-# rCommand: ssldump -h
-ssldump
-# rCommand: yersinia -G
-# Entry: Yersinia
-yersinia
-net-snmp
-# Command: openvas-client
-# Entry: OpenVAS Client
-openvas-client
-openvas-scanner
-
-#################################################################
-# Category: Forensics
-# Command: ddrescue -h
-ddrescue
-# Command: gparted
-gparted
-hexedit
-# rCommand: testdisk -h
-testdisk
-# Command: foremost -h
-# Entry: Foremost Filecarver
-foremost
-# Command: sectool-gui
-# Entry: sectool
-sectool-gui
-scanmem
-sleuthkit
-# Command: unhide
-unhide
-# Command: examiner
-# Entry: ELF Examiner
-examiner
-dc3dd
-afftools
-# Command: srm -h
-# Entry: Securely Remove Files
-srm
-# Command: nwipe
-# Entry: Securely erase disks
-nwipe
-# Command: firstaidkit -g gtk
-# Entry: First Aid Kit
-#firstaidkit-plugin-all #temp removed - dependency to grub2
-
-ntfs-3g
-ntfsprogs
-
-#####################################################################
-# Category: WebApplicationTesting
-# Command: httping -h
-httping
-# Command: nikto -help
-# Entry: Nikto Websecurity Scanner
-nikto
-# Command: ratproxy -h
-ratproxy
-# Command: lbd
-# Entry: Load Balancing Detector
-lbd
-# Command: skipfish
-skipfish
-# Command: sqlninja
-sqlninja
-
-#######################################################################
-# Category: Wireless
-# Command: aircrack-ng
-aircrack-ng
-# Command: airsnort
-airsnort
-# rCommand: kismet
-kismet
-# Command: weplab
-# Entry: Wep Key Cracker
-weplab
-# Command: wavemon
-wavemon
-
-#######################################################################
-# Category: CodeAnalysis
-# Command: splint
-splint
-# Command: pscan
-pscan
-# Command: flawfinder
-# Entry: Flawfinder
-flawfinder
-# Command: rats
-# Entry: Rough Auditing Tool for Security
-rats
-
-######################################################################
-# Category: IntrusionDetection
-# rCommand: chkrootkit
-chkrootkit
-# Command: aide -h
-aide
-labrea
-# Command: honeyd -h
-# Entry: Honeypot Daemon
-# temp removal
-#honeyd
-# Command: pads -h
-# Entry: Passive Asset Detection System
-pads
-nebula
-# Command: rkhunter
-# Entry: RootKitHunter
-rkhunter
-
-########################################################################
-# Category: PasswordTools
-# Command: john 
-john
-# Command: ophcrack 
-# Entry: Objectif Securite ophcrack
-ophcrack
-# Command: medusa -d
-# Entry: Medusa Brute Force
-medusa
+# exclude some packages to save some space
+# use './fsl-maintenance.py -l' in your security spin git folder to build
+-ArpON
+-bonesi
+-cmospwd
+-dnstop
+-hfsutils
+-honeyd
+-kismon
+-netsed
+-onesixtyone
+-pdfcrack
+-picviz-gui
+-prelude-lml
+-prelude-manager
+-prewikka
+-proxychains
+-pyrit
+-raddump
+-safecopy
+-scalpel
+-sslstrip
+-tcpreen
+-tcpreplay
+-tripwire
+-wipe
 
 %end
 
 %post
-# LXDE and LXDM configuration
+# xfce configuration
+
+# This is a huge file and things work ok without it
+rm -f /usr/share/icons/HighContrast/icon-theme.cache
 
 # create /etc/sysconfig/desktop (needed for installation)
+
 cat > /etc/sysconfig/desktop <<EOF
-PREFERRED=/usr/bin/startlxde
-DISPLAYMANAGER=/usr/sbin/lxdm
+PREFERRED=/usr/bin/startxfce4
+DISPLAYMANAGER=/usr/sbin/lightdm
 EOF
 
 cat >> /etc/rc.d/init.d/livesys << EOF
-# disable screensaver locking and make sure gamin gets started
-cat > /etc/xdg/lxsession/LXDE/autostart << FOE
-/usr/libexec/gam_server
-@lxpanel --profile LXDE
-@pcmanfm --desktop --profile LXDE
-/usr/libexec/notification-daemon
+
+mkdir -p /home/liveuser/.config/xfce4
+
+cat > /home/liveuser/.config/xfce4/helpers.rc << FOE
+MailReader=sylpheed-claws
+FileManager=Thunar
+WebBrowser=midori
 FOE
 
-# set up preferred apps 
-cat > /etc/xdg/libfm/pref-apps.conf << FOE 
-[Preferred Applications]
-WebBrowser=firefox.desktop
-MailClient=redhat-sylpheed.desktop
+# disable screensaver locking (#674410)
+cat >> /home/liveuser/.xscreensaver << FOE
+mode:           off
+lock:           False
+dpmsEnabled:    False
 FOE
 
-# set up auto-login for liveuser
-sed -i 's|# autologin=dgod|autologin=liveuser|g' /etc/lxdm/lxdm.conf
+# deactivate xfconf-migration (#683161)
+rm -f /etc/xdg/autostart/xfconf-migration-4.6.desktop || :
+
+# deactivate xfce4-panel first-run dialog (#693569)
+mkdir -p /home/liveuser/.config/xfce4/xfconf/xfce-perchannel-xml
+cp /etc/xdg/xfce4/panel/default.xml /home/liveuser/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml
+
+# set up lightdm autologin
+sed -i 's/^#autologin-user=.*/autologin-user=liveuser/' /etc/lightdm/lightdm.conf
+sed -i 's/^#autologin-user-timeout=.*/autologin-user-timeout=0/' /etc/lightdm/lightdm.conf
+#sed -i 's/^#show-language-selector=.*/show-language-selector=true/' /etc/lightdm/lightdm-gtk-greeter.conf
+
+# set Xfce as default session, otherwise login will fail
+sed -i 's/^#user-session=.*/user-session=xfce/' /etc/lightdm/lightdm.conf
 
 # Show harddisk install on the desktop
 sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop
 mkdir /home/liveuser/Desktop
 cp /usr/share/applications/liveinst.desktop /home/liveuser/Desktop
 
-# Add autostart for parcellite
-cp /usr/share/applications/fedora-parcellite.desktop /etc/xdg/autostart
+# and mark it as executable (new Xfce security feature)
+chmod +x /home/liveuser/Desktop/liveinst.desktop
 
-# this goes at the end after all other changes.
+# this goes at the end after all other changes. 
 chown -R liveuser:liveuser /home/liveuser
 restorecon -R /home/liveuser
 
 EOF
 
 %end
-

fedora-livecd-soas.ks

@@ -26,8 +26,8 @@ rm -f /var/lib/rpm/__db*
 
 # Get proper release naming in the control panel
 cat >> /boot/olpc_build << EOF
-Sugar on a Stick 8 ('Ōhelo Berry)
-Fedora release 18 (Spherical Cow)
+Sugar on a Stick 10 (Unknown)
+Fedora release 20 (Rawhide)
 EOF
 
 # Add our activities to the favorites

fedora-livedvd-games.ks

@@ -4,7 +4,7 @@
 # - Bruno Wolff III <bruno@wolff.to>
 # - Formerly maintained by Rahul Sundaram
 
-%include fedora-livecd-desktop.ks
+%include fedora-livecd-xfce.ks
 
 # The recommended part size for DVDs is too close to use for the games spin
 part / --size 10240
@@ -91,7 +91,6 @@ lordsawar
 lure
 machineball
 nethack
-openlierox
 pachi
 pioneers
 quarry
@@ -187,7 +186,6 @@ games-menus
 # No compilations of games as I want to only include games that at least
 # someone thought were good within a genre.
 -kdegames
--gnome-games
 
 # Nothing should be downloading data to play.
 -autodownloader

fedora-livedvd-scientific-kde.ks

@@ -54,7 +54,6 @@ rkward
 qtoctave
 
 # IDEs for the IDE folks
-netbeans
 eclipse
 spyder
 
@@ -63,7 +62,7 @@ emacs
 emacs-color-theme
 vim
 scribus
-scite
+#scite
 lyx
 kile
 

fedora-lxde-packages.ks

@@ -32,13 +32,10 @@ metacity
 
 
 # dictionaries are big
--aspell-*
--hunspell-*
--man-pages-*
--words
+#-man-pages-*
+#-words
 
-# use ssmtp instead of sendmail
--sendmail
+# use ssmtp
 ssmtp
 
 # save some space
@@ -53,7 +50,7 @@ ssmtp
 -stix-fonts
 -ibus-typing-booster
 -xscreensaver-extras
--wqy-zenhei-fonts
+-wqy-zenhei-fonts           # FIXME: Workaround to save space, do this in comps
 
 # FIXME: can be removed once mtpaint is gone from lxde-apps in comps
 -mtpaint
@@ -67,8 +64,5 @@ ssmtp
 -policycoreutils-gui
 -gnome-disk-utility
 
-# we need UPower for suspend and hibernate
-upower
-
 %end
 

fedora-repo-not-rawhide.ks

@@ -0,0 +1,3 @@
+repo --name=fedora --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch
+repo --name=updates --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch
+#repo --name=updates-testing --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f$releasever&arch=$basearch

fedora-repo-rawhide.ks

@@ -0,0 +1 @@
+repo --name=rawhide --mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch

fedora-repo.ks

@@ -3,7 +3,7 @@
 # Exactly one of the following should be uncommented
 
 # For the master branch the following should be uncommented
-%include fedora-repo-rawhide.ks
+#%include fedora-repo-rawhide.ks
 
 # For non-master branches the following should be uncommented
-# %include fedora-repo-non-rawhide.ks
+%include fedora-repo-not-rawhide.ks

fedora-soas-packages.ks

@@ -21,7 +21,6 @@
 -rdate
 -rdist
 -icedtea-web
--sendmail
 -firefox
 -glx-utils
 -nmap-ncat

fedora-xfce-packages.ks

@@ -39,7 +39,6 @@ gnome-keyring-pam
 
 # drop some system-config things
 -system-config-boot
--system-config-lvm
 -system-config-network
 -system-config-rootpassword
 #-system-config-services