Digital Forensics Virtual File System

Edit Package python-dfVFS

dfVFS, or Digital Forensics Virtual File System, provides read-only access to file-system objects from various storage media types and file formats. The goal of dfVFS is to provide a generic interface for accessing file-system objects, for which it uses several back-ends that provide the actual implementation of the various storage media types, volume systems and file systems.

dfVFS originates from the Plaso project and is also based on ideas from the GRR project. It was largely rewritten and made into a stand-alone project to provide more flexibility and allow other projects to make use of the VFS functionality. dfVFS originally was named PyVFS, but that name conflicted with another project.

dfVFS is currently implemented as a Python module.

Refresh
Refresh
Source Files
Filename Size Changed
dfvfs-20221224.tar.gz 0098019043 93.5 MB
python-dfVFS-rpmlintrc 0000000058 58 Bytes
python-dfVFS.changes 0000011446 11.2 KB
python-dfVFS.spec 0000005102 4.98 KB
Revision 25 (latest revision is 27)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1102232 from Greg Freemyer's avatar Greg Freemyer (gregfreemyer) (revision 25)
- use %{?sle15_python_module_pythons} to select python versions 
- re-enable %check section as the built-in tests now all pass
        --
- update to 20221224
  - Added support for empty GPT with MBR partitions
  - Added CoreStorage volume system
  - improved handling of bad ZIP files
  - see git commit log for additional changes
- Add requirements on more Python modules
- Upstream libyal/plaso is only supporting python 3.7 or newer
  - Add BuildRequires:  %{python_module base >= 3.7}
- update to 20220917
  - Changes for empty APFS volumes
  - Changes to expose extended attribute extents
  - Added empty volume support to file system searcher
  - Added APFS number of links support 
  - Extended StatAttribute with device number 
  - Changes to ZIP file entry for latest dfDateTime 
  - Added ISO9660 test file and tests 
- add BuildRequires python-libcaes
- add BuildRequires python-libfsfat
- re-disable %check section as the built-in tests fail again for most APFS tests
- ran spec-cleaner
- remove Requires:  python-six
   - This is untested as it is difficult to have an opensuse release without python-six at this point
- allow multiple python packages to be built (eg. python38, python39, python310)
   - rm %define pythons python38
   - add %Obsoletes python3-dfVFS
   - add %define skip_python2 1
- update to 20220419
  - changes to support python-dtfabric 20220219
  - update methods for working with GPT and HFS+ volumes
- add BuildRequires libphdi   required to provide Parallels Disk Image support
- re-enable %check section as the built-in tests now all pass
- update requires libluksde to require a current version
- update requires python-dtfabric to require a current version
- update to 20211228
  - deprecated GetStat file entry method
- Manually run tests results in:
  - Ran 1228 tests in 299.931s
  - NO errors reported!
- update to 20211017
  - changes to support pyfwnt 20210717
  - added pyxattr to add attribute support for multiple filesystems 
  - added size entry for ext, XFS, HFS file entries
- update to 20210606
  - added pymodi to support Mac OS disk images
  - API changes related to time objects to be compatible with newer dependency versions
- added BuildRequires:  %{python_module libmodi}
- added Requires:  python-libmodi
- update to 20210213
  - added pyvsgpt to support hybrid GPT partition table setups
  - added pyvsxfs to support XFS filesystem support
  - moved examples folder to new github project dfvfs-snippets
- added BuildRequires:  %{python_module libvsgpt}
- added BuildRequires:  %{python_module libvsxfs}
- added Requires:  python-libvsgpt
- added Requires:  python-libvsxfs
  
- remove  %doc examples
  - no longer provided in source tarball, moved to dfvfs-snippets github project
- remove lintrc reference to examples as examples have been removed
- update to 20201219 
  - added fsext backend
  - changes to expose HFS+ create time
  - added fshfs backend
  - added fsxfs backend
  - added QCOW differential image support
- python-mock is not required for build (even if the testsuite
  would run)
- The majority of dependencies is available for the primary python3
  flavor only. Do the same.
- Update to 20200920
  - Changes to make fsntfs the preferred NTFS back-end
  - Changes to make OS backend more error tollerant 
  - Changes to make NTFS backend more error tollerant 
  - Changes to OS file entry for creation time #440 and ns timestamps 
  - Added XZ compressed stream analyzer 
  - Added VHDX storage media image support 
  - Changes to expose HFS+ creation time
  - Added fshfs back-end
- examples is no longer installed into the site folder. Remove the rename statement.
- add requires for libfsext, libfshfs, libluksde
- updated %fdupes line to eliminate RPM warnings
- Update to 20200211
  - Added volume scanner options (#346)
  - fixed failing test (#425)
  - Added LUKS support (#418)
  - Added initial APFS support
- Add Requires python-dtfabric - testing found not all use cases work without it
- Add Requires python-fsapfs   - testing found not all use cases work without it
- removed the %check section - it is failing on newly added APFS support - not yet reliable
- Once again builds successfully against factory/tumbleweed
- Update to 20200121
- Remove include-examples-in-packages.patch as it is included
  upstream.
- Update to 20200117:
  - switch from PyCrypto to cryptography.io (Hurrah!)
  - test suite passes (gh#log2timeline/dfvfs#421)
- add patch: include-examples-in-packages.patch
- update to 20190902
  - back to Python singlespec and python3
- update to v0~20171230
  * add more python3 support (even though openSUSE package doesn't use it)
  * bug fixes
  * compatible with plaso 20171231
- revert effort to use Python singlespec.  It's just not working smoothly.
- update to v0~20170723
  * worked on internal test structure
- add python3 support
- implement python singlespec syntax
- In Requires: lines for libyal python bindings, use the python-lib* variant of the package
	Python singlespec automatically converts that to python2 / python3 as appropriate
- remove Requres: python-protobuf.  It has been replaced by a JSON solution
- adopt upstream name of python{23}-tsk3
- correct Requires to have 0~ prefix
- update to v0~20160918
  * still pre-release and no ChangeLog available
  * add requires pyfwnt, pyvslvm, python-dfdatetime
- update to v0~20160108
  * still pre-release and no ChangeLog available
  * required by plaso v1.4.0 which is in feature freeze at this point
- update pyvshadow requires to version v0~20160110
- add Requires: pyfsntfs
- update to v0~20150708
  * warning, breaks plaso prior to v1.3.0rc2
  * still pre-release and no ChangeLog available
- update to v0~20150408
  * Plaso is the primary consumer of dfVFS, but it can be used standalone and may have other consumers in the future
  * Warning breaks JSON serialization in plaso and require a plaso version of 20150507 or later.
- update to v0~20150303
  * dfVFS is in a rapid state of development and Changelog entries have not been implemented by upstream
- add Requires: pysigscan, it is a new dependency
- add a new %exclude in %files due to doubly included %doc files
- remove spec file entry deleting installed examples.  Resolved upstream.
  * see https://github.com/log2timeline/dfvfs/issues/4
- chmod run_tests.py to remove the executable bits.  Was causing a rmplint warning.
- update to v0~20150108
  * bugfix for auto-dependency build
- add explicit "%py_compile ." to resolve rpmlint complaint about datestamps not matching
- add the examples folder to the %doc section of %files
- add run_tests.py to the %doc section of %files
- upgrade to v0~20141220
  * dfVFS is in a rapid state of development and Changelog entries have not been implemented by upstream
- v0~20141220 required by latest plaso release
- update Url field to point to the new github site
- update source to be complete URL
- delete DL_URL field
- add an exclude for the "examples" that are provided.  They need a better namespace.
- add check_dependencies.py to %doc so that users can verify they have usable dependencies
- add a %doc line to %files section
- change the license tag to Apache-2.0
- add Requires libvmdk since it is now in OBS
- add Requires libvhdi since it is now in OBS
- add missing "Requires: pyqcow" line to specfile
- remove %attr(755...) line and instead use sed to remove #!/usr/bin/python from *py files
- cleanup Requires: in general
- initial version in OBS (version 0~20140727)
Comments 0
openSUSE Build Service is sponsored by