Fix MAC Address Issue

[Erik Kristensen]

Just a few notes of mods that may be useful for upstream SIFT updates. These were checked against v2.14 rev2.
- Remove "dnet-common" package via aptitude to fix ethernet problem. (See http://www.fantaghost.com/2010/06/eth0-mac-address-fixed-on-aa0004000a04/)
- wipe contents of /etc/udev/rules.d/70-persistent-net.rules as part of pre-distribution cleanup (allows eth0 to take the first NIC, regardless of MAC address)
- included in script, below

Bigger picture/idea-grade stuff (not ready for full implementation):
- In one of the system-wide shell config files like /etc/bashrc, do an include /etc/sansforensics/* (would allow other course leads to just drop scripts in there to be handled. I'm adding /usr/local/for572/bin to the front of PATH, for example)
- need to look at app-armor settings. can't write to /cases with sudo-run binaries, for example (e.g. tcpdump). (see http://ubuntuforums.org/showthread.php?t=1501339)

I used this prep script before compressing the VM to shrink the size: (I drop to runlevel 1 to run this)
> #!/bin/bash
> echo "ACTION REQUIRED!"
> echo "remove any snapshots that already exist and press Return"
> read
>
> echo "zeroize free space and shrink:"
> for mtpt in $( df | grep ^\/dev\/ | awk '{print $6}' ); do
> echo "- zeroize $mtpt"
> dd if=/dev/zero of=$mtpt/ddfile
> rm -f $mtpt/ddfile
> echo "- shrink $mtpt"
> vmware-toolbox-cmd disk shrink $mtpt
> done
> echo > /etc/udev/rules.d/70-persistent-net.rules

[Erik Kristensen (unhandledexception)]

Don't know if you've hit this with 2.14, but it bit me today for a while.

MAC address comes up as a conflict and network dies. fix here: http://www.fantaghost.com/2010/06/eth0-mac-address-fixed-on-aa0004000a04/

[Erik Kristensen (unhandledexception)]

I don't think this is an actual issue.