Package: anon-apt-sources-list Version: 3:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 72 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_6.8-1_all.deb Size: 29468 SHA256: 9e63f4f9b2d68838d65b890eec30630240eb88ac6fa1fb4ea60e7e723c6ce415 SHA1: f8d2c4bd6b22b1f66a31f5bd4afaecde18d7b4a2 MD5sum: effbfab583b7107d717e8c24043e6564 Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.list for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.list for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:9.6-1 Architecture: all Maintainer: iry Installed-Size: 263 Depends: helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_9.6-1_all.deb Size: 93244 SHA256: 43d068b0e60e406ec35b8f3f9a61503d7ca2d33ce993d04a8fceee1ac7086aea SHA1: 89ca85dae2947e64b43f41a403ee887936dfa22e MD5sum: 0b6775bbd8a25fa44ce5eb79b7d4264d Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 121 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.5-1_all.deb Size: 64168 SHA256: fef72accadcf98b588009c5990acf4008a9684d146dd7f5bb79c8b521fd4150d SHA1: e6c58a1f2dc27c351eab57dcf07b5fc63917de00 MD5sum: 7cb1a03cce87f0f4f190cbada3840b23 Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 95 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.0-1_all.deb Size: 35040 SHA256: 8d7f89a5faafb8176e45f7f401344fb7b8892d70930f36b20990f6ee2cb00c4f SHA1: f34b5a7c0238bc9d5fa57c5a335ce804c128b494 MD5sum: 08d020e5238dde4e36c8d8ac7462237f Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.2-1_all.deb Size: 23608 SHA256: 569a47ac86ec76b036a023f784b7646f48bbe37469a4787b79d576fb29e29987 SHA1: 759d8ade0dbfd6a6cdb08d6ed7cda9c05d3861e3 MD5sum: bcabd3eb5d8b40b8c04e0082c19db4a6 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_5.7-1_all.deb Size: 26452 SHA256: e555923bcd6dff7c8b7a1921d5001d338c3bac77d1a529cd3ff211ec033c339a SHA1: 0a276f856f8ab21b00727af6d2a4994ac3800670 MD5sum: 63b600f1d2b39d8af167b3b9af7f9a4e Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.3-1_all.deb Size: 34344 SHA256: 05e0c5ea1eebdf463a41fed774ba950091df8a497d84ca07574f01b0545df018 SHA1: 26f19b8b3d6acbf2ecc2e3530eff4dfdc3d98f8c MD5sum: 47ca7d0d3ebe88fd3157ca385e16abd0 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_31.0-1_all.deb Size: 76444 SHA256: 3e47417a88f08fb780ef9402237bf3204259653bca3e3f2bf5b214b71ca56c50 SHA1: 18596a336b52107d450e648d4f9e9bd681849f3a MD5sum: 3f8975f4aea42ecbcef3b7e570b00f3d Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. . Safe to remove, if you know what you are doing. Package: binaries-freedom Version: 0:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 30 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.0-1_all.deb Size: 10776 SHA256: e4a18445b5e79ca7457ecda624260b3a0f9e80ddb2bcaf219d5bedae481ceb0c SHA1: b99f440bcd5487eff7d04ad89cfcfd38dfd1b48b MD5sum: 2f099873f96ba7caae6f97fab7d3db3e Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:3.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 27 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_3.6-1_all.deb Size: 13036 SHA256: 721b3adf11112d9f035294c571cbb468299c151e122b2faf4792334e3b1c75c6 SHA1: 93ebec90abdeb69b82e51299df0309be94466a9e MD5sum: a0e8e963ac3cc83d3feaa96d031716e9 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 86 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_6.7-1_all.deb Size: 30068 SHA256: fe11c2033305bec43c9f54682a57f35b4de46d0324c5f2fa2e4ad038c8b01ec7 SHA1: c4709768be786313abc8b8b310aaa4e6f66d2b46 MD5sum: e6fbc30ca279685a83196c86803c606d Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: calamares-settings-debian Version: 13.1.3-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 316 Depends: calamares, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.3-1_all.deb Size: 227220 SHA256: b0999b32522d6146a29c9af73a4926bbf2141b806148a3622238e37b20b36201 SHA1: af90b5078a0b2df3cbcf4335517c133ac42bffb4 MD5sum: 5933af361f1703a15d122c8ece515a27 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.2-1_all.deb Size: 13188 SHA256: b69b8c15d6e137ab2676e1a4c93a1c612a544c3c933f4fe933b9392ea9568e75 SHA1: effd486a1ef5f4f26f6b8685c220617e873b26b3 MD5sum: e355764c131e6f639c5f64889b35bf48 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2024.05.22 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2024.05.22_all.deb Size: 4372 SHA256: 22eb433ce2e23eb79914b80825b84c30f6aa785a824a971a9a7aff93bc0a5057 SHA1: 2d8e1f35f05c2b62051c83bb6fe0bebce0029335 MD5sum: 058f3b902a815b762f79e7b035705d00 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 102 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_4.2-1_all.deb Size: 25248 SHA256: 1b370fe45dba96f052e0154d9d4c75b5c8e3ed8897a03267861d93569a08fc33 SHA1: 7cd6b09fc90af96cd278f3088963f14131e87503 MD5sum: 82c1653137afd20f0189c40e005e94fa Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file, that removes `quiet`, `loglevel=0` and `debugfs=off` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable and adds `debug=vc` to the kernel boot parameter to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc`. . Enables persistent systemd journal log. . Disables `/lib/systemd/coredump.conf.d/disable-coredumps.conf` by package `security-misc` by creating a symlink from `/etc/systemd/coredump.conf.d/disable-coredumps.conf` to `/dev/null`. `debian/debug-misc.links` . Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:10.7-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 147 Conflicts: whonix-xfce-desktop-config Replaces: whonix-xfce-desktop-config Provides: whonix-xfce-desktop-config Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_10.7-1_all.deb Size: 46692 SHA256: 885be28796df2e9198459b8e73d32977303496bd2304ade9809402b5b4928ccc SHA1: ca952870565783ddfe78eeb076e6444ada9f05db MD5sum: 1cbf7c6b49df98b399e694a356594d2d Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for user 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:10.7-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 63 Depends: xfce4-whiskermenu-plugin, xfce4-genmon-plugin, arc-theme, gnome-themes-extra, gnome-themes-extra-data, gtk2-engines-murrine, gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_10.7-1_all.deb Size: 33868 SHA256: 8156ff68ca422fa303f15fcaa98b14e5af12f51d4b20590345bb0fe8915e2bd5 SHA1: aa287b5153563e809e02d5a65b43b16c82fc0d17 MD5sum: 48a8b9ac5bc57de9786ab842ecea128b Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:38.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 391 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_38.2-1_all.deb Size: 130860 SHA256: 3c954863a0379fdf27d9f758dd9469ff39d40b85da1c6e4b558b9f1142edc699 SHA1: a8565003161375f8c658cddd4df710aeb482afd9 MD5sum: b21d8960866321bd14f1f4a9cc75b394 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-base-files Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 405 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, zsh-syntax-highlighting, zsh-autosuggestions Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_12.2-1_all.deb Size: 123288 SHA256: 6edcea1c3aed6a19aa4125e4d4508b31588b39dc6e2c78bc1c7ac676004eb23a SHA1: 63859e9f91168562b8edbe1e83ea023df023725b MD5sum: 9c85f9db8bf0db91d665ce8875f0e7b8 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dummy-dependency Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: firefox-esr, qubes-core-agent-passwordless-root, tb-default-browser, tb-starter, tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency_31.0-1_all.deb Size: 76468 SHA256: c98dc6480f4fd264cb59ecdf1d123d470e9031fc3fc395a21aafd1969cc61d92 SHA1: b6029489b08bb44e1be12d37578027450f34d803 MD5sum: f9dbaf60ecb8dcb6ebdb01608b3746e2 Description: dummy package to satisfy architecture specific dependencies A metapackage, which satisfies the dependency on: . - tb-updater - tb-starter - tb-default-browser - qubes-core-agent-passwordless-root - firefox-esr . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_31.0-1_all.deb Size: 76412 SHA256: 5deadaf03dd22efdf406ac3e4d845e4e3ca9a4ab9d2d9d62cd0d178e319b7fd2 SHA1: c1c77e454f4e42b2da1ef85d96a085a0808fc4f5 MD5sum: f61a016bd3f635731c32623df90c0a40 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_31.0-1_all.deb Size: 76396 SHA256: 6d18c83be3630cab363c09ff804497697b51e5ec8de9e91881e83f6b47eb178d SHA1: 3bbab52b73bc7662dadb705a114a20cdf5d78157 MD5sum: d7e4cae092bc10c130070ff0ca840af0 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_31.0-1_all.deb Size: 76404 SHA256: 534fc4341c8573a469d9b0ce610b100b0894bc8faaeb9b8c225a1cfe2e9f3a04 SHA1: bd19a414a88ef27d7b33631319dbe28a7fea0ac8 MD5sum: e44585f8e7dd47943a01b2c14851a5e8 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_31.0-1_all.deb Size: 76404 SHA256: 5126a95157ef0e85b3cb42bbc1a55a7733f0cf6062cd4f008be201517a567594 SHA1: 8f5da6e39cadf9cf7785fdc39dc5714714932447 MD5sum: a85717dcca5daed91531603bb44eca92 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_31.0-1_all.deb Size: 76396 SHA256: 9c7418d320316026a1562e3fe4fdee7232dc9d9ff3866591da013a7fac310300 SHA1: af2a401f9c269e0bd42da9c2ef2fff2e9efe7345 MD5sum: 9f293afcab3ea7986f1e0106089af740 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_31.0-1_all.deb Size: 76388 SHA256: cd01b2e6fb9eb438307df40a9f44b879d0fa877907241ab39831d13b2db3333a SHA1: 14dabe5ff39c1fb75120b1961810997a719637be MD5sum: 9eea74eab58bf5372078b46fc0c4dbec Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_31.0-1_all.deb Size: 76396 SHA256: 5e9fa65ca67bcebbd1e5d5a08d5f33d8c2a0a8b7caad03a9e0d308ed2a6ada3a SHA1: 8b43fdc9193759179c01fadae238cb641b2b2a32 MD5sum: 3c76cfa27fdb943e537e7d8ecbaf522a Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: genmkfile Version: 3:15.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 153 Depends: make, dpkg-dev, devscripts, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_15.4-1_all.deb Size: 55800 SHA256: 9f6adfa7e86d9643d910c22c9fa3d128d0e4609fc425fafd99434f595e8ce6a7 SHA1: 5fc762b6740d103ead14414b5636b2aa8458b189 MD5sum: fa1dd822d68ada2826e9f9af089da58b Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 646 Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_4.6-1_all.deb Size: 490196 SHA256: d6a630d3de2efa13c0a64e5c4c1db04dd24f39e71961cd836ae4d58ab185c9b0 SHA1: 1e96ca5f5c5d8ffaf10e17842f7094f1257fda71 MD5sum: f22db1c4844d5f0f319d0af14cb4203a Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: grub-live-initramfs-tools | grub-live-dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_6.6-1_all.deb Size: 26596 SHA256: 350e8825c1e25caa5c5d2555a496d8d53dfb777cc763f1b5a02bdb078f30be79 SHA1: 0e18650cd42ad6d9547eab22cef6e0be53ebc148 MD5sum: 9b858d514f2b4c04f91fd1d3a9c48f9a Description: grub live boot menu entry Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_6.6-1_all.deb Size: 23876 SHA256: eed44efce0d0afaeaa1ec0730c9ac94935248aa274529b71be47ad7ddfc31839 SHA1: e8cbc712addcaf17ef902fcff96c8f1dfb16975e MD5sum: bdda358d16dfbae2f439446c52465621 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: grub-live-initramfs-tools Source: grub-live Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: grub-live, live-boot, live-tools Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-initramfs-tools_6.6-1_all.deb Size: 23884 SHA256: ef9db95acc551b1504131bcb89420262bb5c31809962b0d89e1aa180f02209b2 SHA1: 72c5f5b4ac2d77da5eb984878d9d6c83249ece40 MD5sum: d8b288c95ef57a9e49a99c09d79ab021 Description: grub live initramfs-tools dependencies initramfs-tools version metapackage for grub-live . See also grub-live package. Package: hardened-kernel Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_4.8-1_all.deb Size: 157664 SHA256: d425ead5d98d6f9c5f9cc71ac575c1b4a1d01daa0282daee4f0792183bc604db SHA1: 9acecdcdda909eb329bb1faebc060c2f4949b29c MD5sum: f09813392fbe43e9d50f189f4bb8ae97 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:25.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 373 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_25.2-1_all.deb Size: 122720 SHA256: 2b206d372d138603e411aa48b4844939c8104f3791543ccf4996c22a19eb1d63 SHA1: aec85d63e51a7d81f6e933fe6b7f2e7c55825752 MD5sum: 4b13cbe8d92384eed91961e5cee2ce23 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. Package: icon-pack-dist Version: 3:4.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2696 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_4.5-1_all.deb Size: 1478492 SHA256: 2a2b5a6c535bdcbb6d92b3e486b64b14fc953e516d978de010d69d7b4f5dad81 SHA1: b655a2d0c6e0ba179dfb093b0800cdc58df14b9d MD5sum: 56182314ff0b2e62788264fb631e23f5 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 70 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_7.1-1_all.deb Size: 29876 SHA256: 99eac9f444845f3ac14bd5148775fa076745ee679d3c8a108f335109dc4f710b SHA1: 83f5236a044dc5a1605abc36c0cf6ec549e27f0a MD5sum: ed259441afc4cb9a4a5f176effaed9dc Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-base-files Version: 3:8.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 468 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_8.1-1_all.deb Size: 338604 SHA256: 6e82a6980fa7d103eb0a3441ba0a4e6992c71aabd2eb38147ec057859cb32eb7 SHA1: e8dfce3d31a473ac5d5e245f7d08d1681a89b42b MD5sum: ea013f3bc5c59020fe716a4e77f45d50 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /etc/skel/.bashrc, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-cli Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: anon-apt-sources-list, dosfstools, kicksecure-base-files, kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-recommended-cli, lvm2, ntfs-3g, obfs4proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli_31.0-1_all.deb Size: 76404 SHA256: 094cb15c1352f5bba60f43411dc6b7170accf2f5b26fc040f30c14a22b626429 SHA1: 681dd8ca8daa0144f14cefa5a114b076184c42db MD5sum: afa2e7a08b0c16407a740512541b6a0e Description: Kicksecure command line interface CLI A metapackage, which installs packages, for Kicksecure CLI. . Do not remove. Package: kicksecure-cli-host Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-cli-host-packages-recommended, kicksecure-dependencies-system, non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host_31.0-1_all.deb Size: 76364 SHA256: c423ac95f84d92ff3ecd0567e29def7fd6e766eedde217d80aa26d4bc7ed3e1e SHA1: e8e0cd3d55feeb33645f50d630a73ba5c5a91091 MD5sum: c36c5fc5b80d67a154751f0d8393f7f4 Description: Kicksecure Host command line interface CLI A metapackage, which installs packages, for Kicksecure CLI Host. . Do not remove. Package: kicksecure-cli-host-packages-recommended Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host-packages-recommended_31.0-1_all.deb Size: 76376 SHA256: 656ebaba925e5c8ce6824efceac9e0d441a146264cf4b2838d48457ff7d78877 SHA1: 66968f36b1f0cb4f6b481b574c5e8afc64b6c173 MD5sum: 650300cd230c3b2a9678d7077362e5f6 Description: Recommended Kicksecure Host CLI Packages A metapackage, which installs packages, which are recommended for Kicksecure CLI Host. . Not useful to have inside Qubes. . Safe to remove, if you know what you are doing. Package: kicksecure-cli-vm Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-dependencies-system, kicksecure-network-conf, non-qubes-enhancements-cli, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-vm_31.0-1_all.deb Size: 76424 SHA256: 58861750285719df6e12457425ea5194331a30f5b67bd408d7c1b92c4146b64d SHA1: da074bac833468651c0ec05bcad5e3dfc27f2229 MD5sum: 820fcc1afba951979ab8aea73cd945c2 Description: Kicksecure command line interface CLI VMs A metapackage, which installs packages, for Kicksecure CLI Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: kicksecure-default-applications-cli Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, magic-wormhole, makepasswd, pwgen Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-default-applications-cli_31.0-1_all.deb Size: 76448 SHA256: 77ff44dd323517f7caa60b63991e5f4b3e4c3944bcf8b1cb8c4a95e846aae322 SHA1: cc91ffa0e5443942fcbfc950ef8d82d20e086ccb MD5sum: 848663bb7aacc182c4ed2e6ac6a03ec3 Description: Default applications packages for Kicksecure A metapackage, which includes default packages to ensure, Kicksecure useful recommended tools are installed. . Safe to remove, if you know what you are doing. Package: kicksecure-dependencies-cli Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, desktop-config-dist, dialog, dist-base-files, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc, setup-dist, sudo, timesanitycheck, usrmerge Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-cli_31.0-1_all.deb Size: 76504 SHA256: 033195f7b155fddf61d79e262b24219ee0ed7d714686be0a9c8b8e35b4dca9cc SHA1: e10dd190a92cdffd1f7e9be52ca988ba41549e5f MD5sum: cddce3a569c9dd40a836df70e231010a Description: Dependencies for hardened systems CLI A metapackage, which installs command line interface (CLI) packages which should be installed on hardened systems. . Do not remove. Package: kicksecure-dependencies-system Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: dracut | linux-initramfs-tool | initramfs-tools Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-system_31.0-1_all.deb Size: 76388 SHA256: 90553e300f9c315f1e5fb98c4c889dc68d48bfb3ccf273f06c3e940eb6f8edb6 SHA1: 08ce661d8412b16ff063a50ef777c676d4bc32e1 MD5sum: eb44b37e05a2af1702de615eacffb3ce Description: System for hardened systems A metapackage, which installs system packages which should be installed on hardened systems. . Currently only depends on boot process related dependencies. . Do not remove. Package: kicksecure-desktop-applications-recommended Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: catfish, electrum | dummy-dependency-electrum, firefox-esr | dummy-dependency, flatpak, gpa, keepassxc, kicksecure-welcome-page, msgcollector-gui, repository-dist-wizard, ristretto, sdwdate-gui, setup-wizard-dist, tumbler, vlc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-recommended_31.0-1_all.deb Size: 76476 SHA256: 0ef3a26c88b21220f9766ef34d0506b5f9fb5c7cd7736fdd7f7a0e6221064310 SHA1: 0a89714d46aba9ca2b1002485ef2b4c3dddfd315 MD5sum: 9ae7f8240e219bc16df7b167b87c5af0 Description: Kicksecure Recommended Desktop Applications A metapackage, which installs recommended packages, for graphical user interface (GUI) Kicksecure. . Do not remove. Package: kicksecure-desktop-applications-xfce Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: gvfs, libexo-2-0, lxqt-sudo, mousepad, pkexec, policykit-1-gnome, polkitd, thunar, thunar-archive-plugin, thunar-volman, xarchiver, xfce4-terminal Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-xfce_31.0-1_all.deb Size: 76468 SHA256: c5100c5c77109bfae0e8d5551eeba48975646c44b1633514760218d903571195 SHA1: 8faf1cd0f8a9abc4c7a4a08b8d96362f62f390c9 MD5sum: a784479497240eebf0427cc4240dd8fd Description: Recommended applications for hardened Xfce desktop GUI A metapackage, which installs minimal, yet complete enough to contain the very basics, Xfce applications. . Safe to remove. Package: kicksecure-desktop-environment-essential-gui Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: desktop-config-dist, desktop-config-dist-dependencies, gtk2-engines-pixbuf, libgl1-mesa-dri, mesa-vulkan-drivers, upower, x11-xserver-utils, xdg-desktop-portal, xserver-xorg, xserver-xorg-video-fbdev, xserver-xorg-video-vesa, xserver-xorg-video-vmware | dummy-dependency-xorg-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-gui_31.0-1_all.deb Size: 76488 SHA256: 4e026f6fc4c2ca73773b45fcfe662787899e08357c6df3e67fa27aaf5607b5f6 SHA1: 89b3284f6ec865bf71a597f1eea1f1198ba4a711 MD5sum: af4e20b83cbf456884ba9fcdd2fdb332 Description: Desktop Depends GUI A metapackage, which installs dependencies for desktop environments, such as KDE, GNOME, etc. . kicksecure-desktop-environment-essential-xfce depends on this package. Package: kicksecure-desktop-environment-essential-xfce Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: accountsservice, gnome-brave-icon-theme, gnome-keyring, kicksecure-desktop-environment-essential-gui, lightdm, xdg-desktop-portal-gtk, xfce4 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-xfce_31.0-1_all.deb Size: 76456 SHA256: cf8fc509046188c4f8f3a376c35f2624b2354899328c0341fd868aa2c25b9127 SHA1: 2c726e4d7363b3032780eeadf486c4c8a3f87b07 MD5sum: c48601d9964457a69f2b86ab3a908b15 Description: Recommended applications for hardened Xfce Desktop Environment A metapackage, which installs minimal, yet complete enough to contain a very basic Xfce Desktop Environment. . Safe to remove. Package: kicksecure-network-conf Version: 3:6.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.5-1_all.deb Size: 22324 SHA256: 26ef4f692ee303bfca815998551c8994c85079dab6b2088f2df6e3a538699e96 SHA1: d41ac9ad27df172fd62a90695534422088d62aef MD5sum: c1a836874f93168737446617960a6b7f Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 48 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.5-1_all.deb Size: 18968 SHA256: 4ed88e7b6b00eab9c034408b4742026ff074365e1be82897d670240197e38a80 SHA1: 154f2714dd84225512dd6ca75841350112c18a1f MD5sum: 66c4be172978355df0d74a67a9907f8b Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_31.0-1_all.deb Size: 76384 SHA256: adb10ec5a3043f7a60ea04bdbcfc3a39c7e933370c5adc297c628fac15d1333b SHA1: 20afb88a8da4af6389b9a5616afbe500169852fa MD5sum: d179a43622571b5b9c73de14edf71990 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. . Do not remove. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_31.0-1_all.deb Size: 76408 SHA256: 222bf6f99cd3054c59373c6a94d575e050375fcecdf9d11f38a5b5b3b62a4bed SHA1: d07307eb3cc5fba896ac3dbf2e129eb0b37808f1 MD5sum: b7c62a648818f6e6134c1fb096cdf241 Description: Default packages for Kicksecure-Qubes CLI A metapackage, which installs packages, for Kicksecure on Qubes without recommended GUI applications. . Currently only depends on kicksecure-cli but useful for future maintenance in case Qubes specific changes will be required. . Do not remove. Package: kicksecure-qubes-gui Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-desktop-applications-recommended, kicksecure-desktop-applications-xfce, kicksecure-qubes-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui_31.0-1_all.deb Size: 76356 SHA256: fb7a740a506cb8145768acb7a08157271c6a8e1580d0839b580bbee165680e1a SHA1: 66341f8ef810e788fa425778edbb84154c503327 MD5sum: b33215bf76921c89f4ec0b5b854d8391 Description: Default packages for Kicksecure-Qubes GUI A metapackage, which installs packages, for Kicksecure on Qubes including recommended GUI applications. . Do not remove. Package: kicksecure-recommended-cli Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: apparmor-profiles-kicksecure | dummy-dependency-apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto2, libpam-tmpdir, lsof, man-db, mesa-utils, most, nano, net-tools, open-link-confirmation, openvpn, p7zip-full, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unar, unzip, usability-misc, usbutils, vim, xz-utils, zip Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-recommended-cli_31.0-1_all.deb Size: 76700 SHA256: 230de22c7fc989b0bfa1b2a29312877a254d10c1aca5c6c84fda6ec08129f56c SHA1: 89aff413601ee022a76bcc55497d845ef2483c35 MD5sum: 8572c77d38f2ae928c53675927684c7d Description: Recommended packages for Kicksecure A metapackage, which includes recommended packages to ensure, Kicksecure standard tools are available. . Safe to remove, if you know what you are doing. Package: kicksecure-shared-host-xfce Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: ddrescueview, discover, gddrescue, gnome-disk-utility, gnome-system-monitor, gparted, grub-live | grub-live-boot | boot-live, gsmartcontrol, hwinfo, icon-pack-dist, non-qubes-enhancements-gui, laptop-detect, lm-sensors, lshw, non-qubes-audio, nvme-cli, psensor, pv, sdwdate-gui, smart-notifier, smartmontools, xfce4-power-manager, xfce4-screenshooter, xfce4-xkb-plugin, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-shared-host-xfce_31.0-1_all.deb Size: 76596 SHA256: aa9ea54addc48465adf47e80bf386b6c9671f76d1e82eba7dad5b54db4a11d82 SHA1: fc824a676a9fc13b280d13099e782c31f1270e01 MD5sum: f6ecff3f48618b0749da6f834a8bf284 Description: Kicksecure Shared Host Xfce GUI A metapackage, which installs packages, which are recommended for Kicksecure Xfce Host as well as a Whonix-Host with a graphical user interface (GUI). . Safe to remove, if you know what you are doing. Package: kicksecure-welcome-page Version: 3:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 989 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_6.8-1_all.deb Size: 902784 SHA256: 97665bc91180edba5fe18755693cc605534b954ac3eb9f9ca13a2a8194d2f4d7 SHA1: 687d78a55096da54448ab76c7af4e919aca3ee22 MD5sum: 988e0a6844423f07bb2cc59b3c09f891 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: kicksecure-xfce Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce_31.0-1_all.deb Size: 76340 SHA256: 300bb8f647f985b958712433f800a9090bc60279d2cce8ccb74df247b2672331 SHA1: 845e0b7900717806527e58e8b27e15dbc0da12d3 MD5sum: 9ff8ddeee6147776128e2116f1d4535e Description: Kicksecure Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce. . Do not remove. Package: kicksecure-xfce-host Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli-host, kicksecure-desktop-applications-recommended, kicksecure-network-conf, kicksecure-network-conf-gui, kicksecure-shared-host-xfce, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-host_31.0-1_all.deb Size: 76364 SHA256: 928918d7cb1c06a4d6eb818eb8aa71527ddd8beb2b01af372b64ab571fdb64f5 SHA1: d2569792d14149b270189631ed7cb523e0583989 MD5sum: e4ef76972f0bb26d0d4cd232cde4926f Description: Kicksecure Host Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce Host. . Do not remove. Package: kicksecure-xfce-vm Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli-vm, kicksecure-desktop-applications-recommended, kicksecure-network-conf-gui, kicksecure-xfce, non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-vm_31.0-1_all.deb Size: 76432 SHA256: 247476112f297b5527128f155590697fba0303762916812792bf06cc4198ff6b SHA1: 7e8f8b358f39cd5ce40bb4c71c39115d30e92465 MD5sum: fe4d35e5d958b2f7393a5647b2ec6e47 Description: Kicksecure Xfce GUI for VMs A metapackage, which installs packages, for Kicksecure Xfce in Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: legacy-dist Version: 3:15.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 127 Depends: helper-scripts, apt-forktracer, deborphan Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_15.5-1_all.deb Size: 48712 SHA256: 12a31ad0a54445afe9b93472e002c7cc33f170b390c9a4a2af62efb060de3fb6 SHA1: 14533d7563c9705937cedce1e2746e2c89903a43 MD5sum: e642634ef333f3e3441a935c8f50f80f Description: Prepare older Build Versions of Whonix for Upgrade Applies fixes required for upgrading from for example Whonix 8.x to Whonix 9.x etc. . Upgrades from Whonix 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:10.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_10.6-1_all.deb Size: 54044 SHA256: 30a9cbbbc9a9b3856ccdfbc2944910bdc6d442574e847a9c298037c54f9e44e8 SHA1: 2ae90801b1ec0449a357892594beb22806c8579e MD5sum: 5a596ce82665807c413703f151d79c74 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 293 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_7.5-1_all.deb Size: 143636 SHA256: 6218fb205e1974ee956e14d07f7fab65de24814a54cace412f6b646e5cb11d20 SHA1: 55ab67b8a89de3f4209cc99c7f57563bc02a6e03 MD5sum: 8c3d6b86d1ebaed58e1cbc3c565e6166 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: mediawiki-shell Version: 3:3.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: helper-scripts, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_3.4-1_all.deb Size: 41028 SHA256: e69f40fa6741ccc44c4e6ef13695f3d4da0f37c5aa1a8e01909d24b54913340e SHA1: f77d720c6a170b120e5b5ff45117b926d7f2d4af MD5sum: cef31aabe6b74ea9fa11f67167071b39 Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:13.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 217 Depends: python3, inotify-tools, procps, safe-rm, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_13.5-1_all.deb Size: 66016 SHA256: 4d9a8dca08d1247714ce8e1c255db72d2528a52de8b8844bda6e3233de9cfffb SHA1: cf74b9df03876f5a10f19677caafb45bde559eef MD5sum: 1b73cfd3e89b194ef8053028754cc2fb Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:13.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: msgcollector, wmctrl, python3-pyqt5, qtwayland5, zenity, libnotify-bin | kde-baseapps-bin, mate-notification-daemon, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_13.5-1_all.deb Size: 44556 SHA256: 6b016fc53cd56bf3d931f395ea58ee6fdafaf94aab9fa1bc15f19593d6352323 SHA1: ff049b8e3f93cdf71fd430cda3cdb7a7f2e22b9e MD5sum: 20c5388c567ff995bcf16c0a80fc69da Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: non-qubes-audio Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: libasound2, pavucontrol, pipewire-audio | pulseaudio, pipewire-pulse | pulseaudio, rtkit | pulseaudio, wireplumber | pipewire-media-session-pulseaudio | pulseaudio Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-audio_31.0-1_all.deb Size: 76476 SHA256: 9fb905ae129ce35f89b89e615aff5eb1deeb0d3e4223acbd736d4e3945d79893 SHA1: 507d72cd6caa7b6842dd3512721cbc658172c5a2 MD5sum: de0590f15a757d2f3c413d9eddf74011 Description: Recommended packages for Audio Support in non-Qubes A metapackage, which includes recommended packages which are useful to provide audio support. . These are not useful in Qubes, since Qubes already has its own native audio implementation. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-cli Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: acpi-support, console-common, console-setup, cryptsetup, dmsetup, grub-live | grub-live-boot | boot-live, kbd, keyboard-configuration, libzulucrypt-plugins, swap-file-creator, tirdad, udev, zulucrypt-cli Replaces: non-qubes-vm-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-cli_31.0-1_all.deb Size: 76556 SHA256: ee0016f259bde14882b40356d32bf9ae90943599b476038992e49a2ed9dc694d SHA1: f63d9ed02b07c422cb02072d403ea17a325443fc MD5sum: 739863dfde5d57260acbde3e286a0408 Description: Recommended packages for terminal based machines (CLI) A metapackage, which includes recommended packages which are useful within CLI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-gui Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: non-qubes-enhancements-cli, rads, zulucrypt-gui Replaces: non-qubes-vm-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-gui_31.0-1_all.deb Size: 76464 SHA256: 3e9e52292e68fd1a6740daa4a647bc9da679ab16d071cadf1e1fe6bb267f80f3 SHA1: 6b89900f9199b956b1ee05b5d230ef4c14528bbf MD5sum: 7a305d158fbbb1cdd2e9459fbfd0bf49 Description: Recommended packages for graphical systems (GUI) A metapackage, which includes recommended packages which are useful within GUI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: open-link-confirmation Version: 3:6.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 87 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater, tb-default-browser Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_6.4-1_all.deb Size: 30108 SHA256: 860811604da8d7c485741f523ba20b9eddf38d2caf057f53bf7e8886c3e8d510 SHA1: 8f1ad254c786ce24271531da1b4b7e36608081a1 MD5sum: 0cca3ded4504d2c8ac12b45382b3a809 Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: orca-screen-reader-support Source: kicksecure-meta-packages Version: 3:31.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: gstreamer1.0-plugins-good, libatk-adaptor, libgail-common, non-qubes-audio, orca, python3-gst-1.0, sound-icons, speech-dispatcher-espeak-ng, xbrlapi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/orca-screen-reader-support_31.0-1_all.deb Size: 76464 SHA256: d44b6c1be19a2c9f3a33c638111c40fd3a00160f267b2d7f05cd675b1b585abe SHA1: bbde0d0df4104240446629fbed50ffb1ec6ef935 MD5sum: 7f6e46095823a2c05f8139126181aba8 Description: dependencies for the orca screen reader A metapackage, which includes depencency packages for the orca screen reader. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: rads Version: 3:7.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_7.4-1_all.deb Size: 35056 SHA256: 848546515e656ba1f807053a64429722da406c11fd381dc941cdce9dbf86bef7 SHA1: e0cb080504747ce29358d89b3a511c2c340d709a MD5sum: 256dcd4b16f0e21a10e1e6831c408f4b Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:2.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 101 Depends: helper-scripts, dracut, kexec-tools Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_2.9-1_all.deb Size: 24432 SHA256: cf63f30a9b3e742248a04aadce7351bbb150392f32c357ab5563a6b1563cb919 SHA1: 536d3ff91a12d0373acf04df9c5ffa10fad82702 MD5sum: 1160714f7efa8798d64628b732490028 Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs. Package: repository-dist Version: 3:11.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 198 Depends: helper-scripts, lsb-release, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_11.4-1_all.deb Size: 104104 SHA256: f22616e015f5b8bb4f9a12d42bca29dfecf91ef2e69a8f040b94d3d1fb27de21 SHA1: 1dbc8d761dafd130452a425bca99dc86c7619ef3 MD5sum: 985a04cd542bd3d2b0d47feca48179f1 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.list`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:11.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 70 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_11.4-1_all.deb Size: 37012 SHA256: 4d90578cece36f540c70c0b7ae02dfd0fea4f991762a1f0ce67ae0e2c6451be6 SHA1: 3237346c43d82c6b989cb9b2a81f9a9f32e248ba MD5sum: 836e6d81d4ba75350fa455450222ebd5 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.0-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.0-1_all.deb Size: 19276 SHA256: 589b42abdd79797e10d2a5bbfdf86d43c55262eb068582aa5bd219e26348b42e SHA1: 300b0be96a3f538c04e2ff79e5cf3a7eac1cc568 MD5sum: 1cbae15e9d2f8c7d32a44864b81ad1f4 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_6.7-1_all.deb Size: 48480 SHA256: 235a52d98ae1ea648160f207cf050aea61ce5211ab19452880a81bcddf1b7162 SHA1: 89c5e1c3f63887858736e9195f0ec42a532bc40b MD5sum: 3cdc51280ba6c40205bbb8827fc3d680 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:24.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 339 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, python3:any Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_24.2-1_all.deb Size: 147560 SHA256: 73df2d1532cc53c1039fdc2c9ab08cf328b3273f3826b4f79a4c81aa79dfcc45 SHA1: 4b25feecf487f7ed0c2c2d799e4cc0ac040c9e7a MD5sum: 520dca765c3f1bae2416fc68f73d4c55 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:10.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 240 Depends: sudo, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_10.4-1_all.deb Size: 90528 SHA256: 842d8d9c516cc09debcae805a2aefc94c5c462ad37cfa74fd25ca221d9f2ed83 SHA1: 02aab29b5ba0b696f679a07e77521da2f9b27f4e MD5sum: 0459bed464c6e88614bc08ac038f8e22 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc Version: 3:42.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 574 Depends: adduser, apparmor-profile-dist, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend Replaces: anon-gpg-tweaks, swappiness-lowest, tcp-timestamps-disable Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc_42.2-1_all.deb Size: 202764 SHA256: a825c0ed9bb764a1777b528b18ef666a54b74b689760615b38d079b85f0e3da7 SHA1: ba32dd1a086193a9d233189a112e847d333e6fd6 MD5sum: 398720a6026fceeeedc43c2fc7ac60bc Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.2-1_all.deb Size: 17648 SHA256: 1ee52fdf3969dd77a969a87bd714e14be44e340d12c0f3230eb9228bedc3ba42 SHA1: 0effa0294a23eef0db9947a42d35232f90854ba1 MD5sum: 18f648663b73d98a1325747710126040 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:10.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 138 Depends: helper-scripts, dialog, sudo, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_10.4-1_all.deb Size: 45960 SHA256: 49439dd0ed287ee2dbe26d97c44dd242b5198c1eff863de8c4b4198b5f470a31 SHA1: bdd4cc5f39859d3ac3fba6440d99ecaac0bbfbc0 MD5sum: ea1a2da8a767919209b2d2e585beb1a7 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:11.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 130 Depends: setup-dist, python3-yaml, python3-distutils, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_11.2-1_all.deb Size: 55692 SHA256: c653a66d2636b17dc9246b1ef8efdae95528ef7e3222988ac746f20a221173a5 SHA1: d4be410b4d719190c65c4e73b7139962d2f5bbbd MD5sum: f12901c431886090848bcf4bbfaa4bd2 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: helper-scripts, cryptsetup-bin, bc Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_7.7-1_all.deb Size: 31756 SHA256: 8fd4180710130608c32b2aabcd16efd30d5555c2a4b8f7e5dcef29c45d5936ff SHA1: a7deec73cd2993bf52f0b661b486257f5b1a645f MD5sum: ceb067a8eae2e9cf2a5baf566b18f1a7 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:0.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: helper-scripts, lightdm, pkexec, python3, python3-pyqt5, safe-rm, usability-misc Homepage: https://www.kicksecure.com/wiki/Sys_Maint_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_0.5-1_all.deb Size: 19448 SHA256: d7cd445b8ed2e3d66f03cd1901cf53a2d5f9bb29d39989db4f9585724969285f SHA1: af8f073387a1f5116298d835e9df917a1fa4b9ee MD5sum: 04da20acc03593b88ee874856fbb6114 Description: System Maintenance Panel WARNING: Not yet stable. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 434 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, systemd, adduser, security-misc, spectre-meltdown-checker, apparmor-profile-dist Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_31.4-1_all.deb Size: 140084 SHA256: dc4087764eed95d1e40fbd1298e7c2f3a432332f8fcd5645c22602a7ecea18bb SHA1: 47bcb9adad8820456e656bb45d5cb2347b4ea672 MD5sum: 8f73326f8c9e46cb1e0011fe61335bbb Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: tb-starter Recommends: tb-updater, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-default-browser Priority: optional Section: misc Filename: pool/main/t/tb-default-browser/tb-default-browser_5.1-1_all.deb Size: 24168 SHA256: be2876bb8b0bcd27ff4383a6b360ce3a866614f7b575eff0dd50aabbc53976ba SHA1: b403afd3963debe158f90f4f96d728d38f6f85b5 MD5sum: 02804e75c6453f27ee86a421a70a8b71 Description: Configures system to use /usr/bin/torbrowser as default browser Sets /usr/bin/x-www-browser to /usr/bin/torbrowser. . Sets /usr/bin/gnome-www-browser to /usr/bin/torbrowser. . Sets BROWSER environment variable to /usr/bin/x-www-browser by using /etc/profile.d/ and /etc/X11/Xsession.d/ hooks. . Registers of MIME type handlers to 'torbrowser'. . Sets KDE's default browser to x-www-browser. This only takes effect for newly created user accounts. Not for existing user accounts. This is most useful to help Linux distribution maintainers setting divergent defaults. . See also: The Default Browser on Linux Debacle http://blog.codef00.com/2011/02/18/the-default-browser-on-linux-debacle/ . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-starter Version: 3:17.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 165 Depends: msgcollector Recommends: tb-updater, tb-default-browser, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_17.0-1_all.deb Size: 65480 SHA256: 32a410dcb7589fccc3cfa29468cee21e425229e0afcb6b7823b7bd9aed534ec5 SHA1: 20ba52fe7a4bc4fb81110f014950f803f3be1237 MD5sum: cf23d823992a41ad1806cd7a62a35c81 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:35.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 513 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: tb-default-browser, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_35.7-1_all.deb Size: 237488 SHA256: 380b806af5a7afaa328dfac207b11fb74b2dc3a383c8a80e653c191696edbafe SHA1: 2dfddbe36aab617c0f304acab266cabb26e1107b MD5sum: db310689a989f7e668b5f4292885169e Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter, tb-default-browser and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_6.7-1_all.deb Size: 26664 SHA256: d780d288d95147fd6d65e5d2ef6296d3903458d08113d1e1cc261553cfb949e5 SHA1: eb30a42c64c3e47aa69d1c0080ef7b0e694a244b MD5sum: 261b8c0803a309d3c1dadcfb8813f648 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tirdad Version: 0:0.1.33-1 Architecture: amd64 Maintainer: Patrick Schleizer Installed-Size: 19 Depends: tirdad-dkms Homepage: https://github.com/0xsirus/tirdad Priority: optional Section: kernel Filename: pool/main/t/tirdad/tirdad_0.1.33-1_amd64.deb Size: 14276 SHA256: de03fc3e9dc802b407816781255cc72808bde6c0efbf897c30a4668803f40a26 SHA1: 21fb165b2aa371b23da70de02930b149c764145f MD5sum: 2b41f76e7ba22f3c1d8ce9f20f739a9b Description: TCP ISN CPU Information Leak Protection TCP Initial Sequence Numbers Randomization to prevent TCP ISN based CPU Information Leaks. . The Linux kernel has a side-channel information leak bug. It is leaked in any outgoing traffic. This can allow side-channel attacks because sensitive information about a system's CPU activity is leaked. . It may prove very dangerous for long-running cryptographic operations. [A] . Research has demonstrated that it can be used for de-anonymization of location-hidden services. [1] . Clock skew, . - is leaked through TCP ISNs (Initial Sequence Number) by the Linux kernel. - can be remotely detected through observing ISNs. - can be induced by an attacker through producing load on the victim machine. . Quote Security researcher Steven J. Murdoch (University of Cambridge, Cambridge, UK) [B] . "What the Linux ISN leaks is the difference between two timestamps, not the timestamp itself. A difference lets you work out drift and skew, which can help someone fingerprint the computer hardware, its environment and load. Of course that only works if you can probe a computer, and maintain the same source/destination port and IP address." . Quote Mike Perry, developer at The Tor Project [A]: . "... it is worth complaining to the kernel developers for the simple reason that adding the 64ns timer post-hash probably *does* leak side channels about CPU activity, and that may prove very dangerous for long-running cryptographic operations (along the lines of the hot-or-not issue). Unfortunately, someone probably needs to produce more research papers before they will listen." . tirdad is a kernel module to hot-patch the Linux kernel to generate random TCP Initial Sequence Numbers for IPv4 TCP connections. . You can refer to this bog post to get familiar with the original issue: . - An analysis of TCP secure SN generation in Linux and its privacy issues - https://bitguard.wordpress.com/?p=982 . This metapackage depends on tirdad-dkms. . References: . - [1] https://www.cl.cam.ac.uk/~sjm217/papers/ccs06hotornot.pdf - [2] http://caia.swin.edu.au/talks/CAIA-TALK-080728A.pdf - [3] http://www.cl.cam.ac.uk/~sjm217/papers/ih05coverttcp.pdf - [4] https://stackoverflow.com/a/12232126 - [5] http://lxr.free-electrons.com/source/net/core/secure_seq.c?v=3.16 - [6] https://trac.torproject.org/projects/tor/ticket/16659 - [7] https://phabricator.whonix.org/T543 - [A] https://trac.torproject.org/projects/tor/ticket/16659#comment:10 - [B] https://trac.torproject.org/projects/tor/ticket/16659#comment:18 Package: tirdad-dkms Source: tirdad Version: 0:0.1.33-1 Architecture: amd64 Maintainer: Patrick Schleizer Installed-Size: 38 Depends: linux-headers-generic, dkms (>= 2.1.0.0) Homepage: https://github.com/0xsirus/tirdad Priority: optional Section: kernel Filename: pool/main/t/tirdad/tirdad-dkms_0.1.33-1_amd64.deb Size: 16016 SHA256: ca945562d93b2049e65c44e0a1d8e60499ee464f394b872bea908ad171db8b6d SHA1: 6e5b80519a61ba9cebc4b9f115971bb4b44fedb9 MD5sum: aca8b5cfc94530dd2b8f2002b86cd9d5 Description: TCP Initial Sequence Numbers Randomization - Source Code and DKMS tirdad is a kernel module to hot-patch the Linux kernel to generate random TCP Initial Sequence Numbers for IPv4 TCP connections. . This package uses DKMS to automatically build the tirdad kernel module. Package: tor Version: 0.4.8.13-2~d12.bookworm+1 Architecture: amd64 Maintainer: Peter Palfrader Installed-Size: 5759 Depends: libc6 (>= 2.34), libcap2 (>= 1:2.10), libevent-2.1-7 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libseccomp2 (>= 0.0.0~20120605), libssl3 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.2), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.8.13-2~d12.bookworm+1_amd64.deb Size: 2050644 SHA256: 162c49b6d1587f0e34ff0fa858ae91bdbeea106b57f8b5916a04aacc6ef39d04 SHA1: 61d4415c98876525cfab8d44ac3e73cc78834b53 MD5sum: 5416bf12fb137d8270002fbdbc97b2e4 Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:6.9-1 Architecture: all Maintainer: troubadour Installed-Size: 179 Depends: anon-connection-wizard, helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_6.9-1_all.deb Size: 68616 SHA256: ab4c079e371f956a4832843425a0282feb3dac3f0a948bbdfa7fc41131bc82ee SHA1: ad520d39c034d0d3bbfcc52348c4f12114aa34d6 MD5sum: 71a23cf44e7e05e56132b14453317873 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: tor, netcat-openbsd, xxd Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_5.5-1_all.deb Size: 26652 SHA256: b6aa1262eea60201441b300b8d0e4d8f358e53c1ef6b036771f9dc8a6038c01a SHA1: 6e4c7af0d04a213ee001bed0d20162fc1db8ff21 MD5sum: 1afa21e6ce9e33bfd2a817cdbefd5a20 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.13-2~d12.bookworm+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 19566 Depends: tor (>= 0.4.8.13-2~d12.bookworm+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.13-2~d12.bookworm+1_all.deb Size: 2415852 SHA256: 8402c2171b54cfc3919803471a06b25871e64b639295bf6ecde8b8c1d25a0dfc SHA1: bd973168ef5d4db605ee665cb7c806ea1e4acee3 MD5sum: 7d1b3bab1ffa3d1c8654559d96880c9d Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:23.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 637 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_23.8-1_all.deb Size: 215688 SHA256: 13f1e8e8ecf37a796b21793e220893adbc732252d05c5a96b4721109a74eb309 SHA1: d4ff816a2e7e1ecddf5413aadb85cde364139349 MD5sum: dfe4d1f1d638da487685f3ff723aed66 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds user "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets user "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . xfce4-terminal: . * Disables automatic scroll on output when manually scrolled up to make reading output such as "sudo journalctl -f" easier. Automatic scroll on output still happening in default when not manually scrolling up beforehand first. . * Enables unlimited scrollback by default to avoid output from being truncated. . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. Package: user-sysmaint-split Version: 3:1.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 99 Depends: security-misc, adduser Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_1.4-1_all.deb Size: 23188 SHA256: 9ce2d64be3e446ed1765eddbef01c909f5baa026584838dbd60993b12645db26 SHA1: e70ea4ba15022c9089f08e586c4020534f9e0933 MD5sum: 27eb8392531f4c6f568bf8bd5b51f2ec Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry "PERSISTENT mode SYSMAINT (For system maintenance tasks.)" . Makes Privilege Escalation Tools (such as sudo, su, pkexec) inaccessible to limited user accounts such as user "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:10.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 136 Depends: sudo, adduser, p7zip-full Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_10.9-1_all.deb Size: 40828 SHA256: e585702293bfbdc58fdddb9aacf72d532b171ec9bd473c92422e541910efa82d SHA1: 7c53277be17146ed9721e5fff4fac111132f2bd2 MD5sum: 702722c374b4795cf67c02284aea4640 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Disables screen locker when running in VMs because that is not useful either. . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds user "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`