朝鲜开发的 Linux 系统Red Star OS 3.0 发布
Red Star OS 3.0 发布，这是朝鲜自定义的 Linux 系统的最新版本，Red Star OS，有着 OS X 风格的界面。更多内容请看发行说明。
Red Star OS 是朝鲜IT技术专家开发的基于Linux操作系统，它的安装光盘上还印有金正日的名言，表明自主研发的Linux操作系统对朝鲜是多么重要。 Red Star OS的奇特之处有：只提供朝鲜语言；系统菜单图标是红星；浏览器名称叫“My Country”（基于Firefox）；办公软件叫“We”，类似OpenOffice；甚至还提供了杀毒软件和防火墙（由朝鲜自己开发，非开源软 件）。
Updated 2015-01-08: This sure is getting attention. Added screenshots of the Windows executable included in the disc.
The latest version of North Korea’s custom Linux distribution, Red Star OS – that one with the OS X style interface – has leaked onto the internet. While the guy who talked about technology in North Korea on the 31C3 conference said he didn’t see anybody using Red Star seriously, it’s an interesting distro to check out.
The Korean installer is actually easy to go through blindly. All you need to watch out for is the network configuration, which is not set to DHCP by default. Some extras (including compilers and a LAMP stack) are available through the Customize dialog right before it starts the actual installation.
The installer (a customized version of Fedora’s Anaconda) can run in English with a modification to the ISO: on /isolinux/isolinux.cfg, replace lang=ko withlang=en – some minor parts are still in Korean, ignore them. The final system will still be in Korean, but we’ll fix that later. I also tried making a hotswap disc that starts the installer in English, however isolinux and Anaconda don’t take hotswapping kindly.
The root user is disabled on Red Star, and it doesn’t look like there is a way to enable it. UnFortunately, they left a big security hole: the Software Manager (swmng.app), which runs as root through sudo and will install any RPM package, even if unsigned.
To get root, get this RPM package I made (2015-01-02: fixed the RPM, I had uploaded the wrong one) into Red Star through an ISO (if you’re using a virtual machine) or USB key, double-click it to open it with the Software Manager, and click through the blue buttons until it’s done. After that, run rootsh to get a root shell. Being a RedHat-based system (hinting on Fedora 15), SELinux will prevent you from doing some things, but disabling it is a matter of runningsetenforce 0 as root.
Also, I am aware that @hackerfantastic has developed another root method using udev event scripts.
Like the installer, the system can run in English, and the included apps have English translations as well. Replace every ko_KP with en_US in /etc/sysconfig/i18nand /usr/share/config/kdeglobals (at the end of the file). Reboot, and the system will be in English.
You will need to use vi to edit the files. Quick guide: the Insert key cycles between view, insert and replace modes; use the arrow keys to navigate; press Esc, type :wq! and press Enter to save and exit; skip the w to exit without saving.
For some reason, Red Star’s iptables is set to only allow outgoing connections to certain ports. That doesn’t include DNS, so you can’t get a proper internet connection on Red Star. To fix that, run this command as root to clear Red Star’s default iptables rules, and reboot:
The included “Naenara Browser” is Firefox 3.5, and despite being set to browse on the North Korean intranet, it works just fine on the internet. Its language can be changed to English by disabling the Korean language pack (thanks Chocohead): go to the second-to-last menu, select the third option, go to the fourth tab, select the “(ko-KP)” add-on, click the first button to disable it, and click the button on the yellow bar to restart the browser.
- There appears to be a system file modification detector, which warns about modified system files when you log in. Running the installer in English was enough for it to complain about the kernel files, at least for me. To disable it, run this command as root: rm /usr/share/autostart/intcheck_kde.desktop
- The disc includes a Windows executable named install.exe, which displays a dialog (actually an image lifted from a bitmap resource) with two buttons. The first one displays an error (it probably tells you to boot from the DVD to start installation), and the second one quits.
- You can press Esc on the boot splash for verbose boot.
- In several places, you’ll see English or South Korean locales replaced to accommodate the North Korean locales.
- There is a surprising lack of Engrish in the included apps. They must have taken the English text straight from OS X.
- The “Crosswin” Windows compatibility layer is nothing but a wrapper around Wine 1.2.2.