Package: anon-apt-sources-list Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 72 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_6.9-1_all.deb Size: 29536 SHA256: a3bdc04888cce9ba1e82234b3fab48138ccbcc01f3d1da19d1d9da159a14ac2f SHA1: a02eab46cab9391e0c1d829a98d9b498eea0fbc2 MD5sum: bed2028bbedec1012bdae9597647201d Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.list for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.list for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:9.7-1 Architecture: all Maintainer: iry Installed-Size: 263 Depends: helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_9.7-1_all.deb Size: 93320 SHA256: c13076e5d425bb14f7662f4c7de115f7888e14cb61a97baab86d30e2239b65c3 SHA1: 649562f3ace2186c7915b7a882dbfad393755e1e MD5sum: e1847b55bb94d1ff16b01199dcb80d10 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.6-1_all.deb Size: 64264 SHA256: e518c9a544fa2709cb7afca7c992fee2620bc83701067d1daf8ea73ed01f834e SHA1: 3c751e9eef4d32e6831184cdc9bc0ffa894e3849 MD5sum: 426adac983d9f5766354ea7bf0cc824f Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 95 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.1-1_all.deb Size: 35136 SHA256: 52ab79a5305c272304d20c7f877da1755fb2fe4990e646129a3691d06861cf1c SHA1: e26f8111f487a5df7cd58e7ea188df60418d5373 MD5sum: 0b562ae59a9ecbe1d292f71b92726fcd Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.3-1_all.deb Size: 23728 SHA256: f21b32af2fe5e97e1deb2ec3d5b99643d09a29dd0f417462ce04a9b62d84be75 SHA1: 9fc848712e947b2a75d68a054f885f431f720587 MD5sum: ef3323d6884a5f4a13aebd5ad59b76ee Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_5.8-1_all.deb Size: 26540 SHA256: 9c4a89aed339b626661798ce0b1bacb1c8cfe28d0e7698dc22f239ec22689ec7 SHA1: c910dfe161d3b8a952202faf19a5e7f39326f0bf MD5sum: e9c56317599ccb1358a84617233042bb Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.4-1_all.deb Size: 34436 SHA256: 4becf5a59c42ff08923fe0f0f5b2f4e7ab7596c41b78de2888cb37ff2082d99a SHA1: cadbebdfd93b6cbcb1e484f411a2f213908452ce MD5sum: eaa01cbc2a257e9198dc4bc03a8b0e9d Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_31.4-1_all.deb Size: 77020 SHA256: a074639edd6b6b22b98697546d128c5a4d63ac7dfec3785f6cf98b6226c253b7 SHA1: aaff974ff9400f462cb9188af7d3c15827c7abcf MD5sum: 0a0852873f7abb35539657c621582064 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. . Safe to remove, if you know what you are doing. Package: binaries-freedom Version: 0:3.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.1-1_all.deb Size: 10868 SHA256: 05c0764da4a18b836b30ad1b37466abb36aa6af688a04232239fb3a4e9abff56 SHA1: cc2f8bca65cbb0c4916b530c24c2f93c2835ca0e MD5sum: 28025d7471a44c74a5f505858dd57847 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:3.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 27 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_3.7-1_all.deb Size: 13132 SHA256: d9b939535f52cf774e4e00185ddd9183e778f5ec1767c02230d318a3f1314a61 SHA1: 1fee887eb725b6eb3096f88ccc50d8fa1e79e428 MD5sum: c40283fe4e2ed5107f1d6a7cef8cd22e Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 86 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_6.8-1_all.deb Size: 30176 SHA256: ce10389095fde52f2a7debb298ae2ec226eadfd00e26454d399820134b0355f7 SHA1: bfe5192f510ccef6ac770c56c3a983d1f0cd445f MD5sum: f5229514b5f3da5ac872449fac1e35ef Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: calamares-settings-debian Version: 13.1.3-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 316 Depends: calamares, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.3-1_all.deb Size: 227220 SHA256: b0999b32522d6146a29c9af73a4926bbf2141b806148a3622238e37b20b36201 SHA1: af90b5078a0b2df3cbcf4335517c133ac42bffb4 MD5sum: 5933af361f1703a15d122c8ece515a27 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.3-1_all.deb Size: 13292 SHA256: 6ce82af10a7b236361e2e6dfe014ff9bfa4e2dabd34281e377b78b2bfa039221 SHA1: fff22537a21eada2e706375f5276a0d1c888f084 MD5sum: 4f13c1c264668a54e72391520904e70b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2024.05.22 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2024.05.22_all.deb Size: 4372 SHA256: 22eb433ce2e23eb79914b80825b84c30f6aa785a824a971a9a7aff93bc0a5057 SHA1: 2d8e1f35f05c2b62051c83bb6fe0bebce0029335 MD5sum: 058f3b902a815b762f79e7b035705d00 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 102 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_4.3-1_all.deb Size: 25340 SHA256: 43e243421f93bec22b6e226130b6ff07cda7f0dcc59d50ad0f2b0cfa463c6147 SHA1: e5580242b6c0549cc023626521ab0e790c63c940 MD5sum: 515043ae898be385454bffc0c6b7d851 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file, that removes `quiet`, `loglevel=0` and `debugfs=off` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable and adds `debug=vc` to the kernel boot parameter to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc`. . Enables persistent systemd journal log. . Disables `/lib/systemd/coredump.conf.d/disable-coredumps.conf` by package `security-misc` by creating a symlink from `/etc/systemd/coredump.conf.d/disable-coredumps.conf` to `/dev/null`. `debian/debug-misc.links` . Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:10.8-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 147 Conflicts: whonix-xfce-desktop-config Replaces: whonix-xfce-desktop-config Provides: whonix-xfce-desktop-config Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_10.8-1_all.deb Size: 46764 SHA256: d72207ffa794dc4831aa29b8970b4697b5b9cb8ad9ba1a09b87aa83800dda81b SHA1: e51eb8f043cc05b87e5d7286a9330d98bfbc2a2b MD5sum: 9666b8820c7a5407064f7b45ecec8770 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for user 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:10.8-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 63 Depends: xfce4-whiskermenu-plugin, xfce4-genmon-plugin, arc-theme, gnome-themes-extra, gnome-themes-extra-data, gtk2-engines-murrine, gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_10.8-1_all.deb Size: 33956 SHA256: 2b7c4e8e72aec93095e1fdecf279dbf1678ddc7288f1632d89b7d775b11d1d1a SHA1: 042ebbdbec650fd388ce1010dd4d59d025f5cdf8 MD5sum: 0527a6a31d56f00e967783a808038edc Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:38.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 391 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_38.5-1_all.deb Size: 131176 SHA256: 8bf04a333cea3be9043366225e01a4ff621fa2f935d495043003eb86d48f2267 SHA1: 9a7c988a7edd70c87ee6c698b2fdd4164b844f26 MD5sum: 644100c35ce8b90c2e3699785e16ea06 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-base-files Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 405 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, zsh-syntax-highlighting, zsh-autosuggestions Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_12.3-1_all.deb Size: 123424 SHA256: a7ac044970197aa9780dc47b8e6e7116413c38725c80aa78ddc831c4875da828 SHA1: 96cc5320960b097628fe9e1e0107739784fbac14 MD5sum: ae3e98d10e5b0fcbde344f33870983d8 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dummy-dependency Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: firefox-esr, qubes-core-agent-passwordless-root, tb-default-browser, tb-starter, tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency_31.4-1_all.deb Size: 77044 SHA256: 69f64ebeded38c6d41405a43156076e839ba2db3523d49c459fa58a5b902f8c0 SHA1: 0015f16649ba92a406f8ad4836af2116e516b86a MD5sum: 6c305d094adf7053721d92b913f0c95c Description: dummy package to satisfy architecture specific dependencies A metapackage, which satisfies the dependency on: . - tb-updater - tb-starter - tb-default-browser - qubes-core-agent-passwordless-root - firefox-esr . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_31.4-1_all.deb Size: 76988 SHA256: e3b074191149bd95b4c73b05d7210b724d97ea6f40785cdfcca6f12871b41080 SHA1: 2c4f6aeb0d0395025b87aa566c3e530ca92aacf7 MD5sum: 2d5450b3cf6822e103ac367f57e1831c Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_31.4-1_all.deb Size: 76984 SHA256: beefd57154ea523f4d3715eef7197ac85e4e1fca01c4d08ee1151023d8b50dd0 SHA1: a078dd19655ff9e09a3d729198c42f002aa6b925 MD5sum: e9bf7d38655da45324a2e2656f752fc5 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_31.4-1_all.deb Size: 76996 SHA256: 63744747ebc48f617a124e3ff9af18f207dd1c55d4ac4f3998b70072e6f77796 SHA1: bfb3aeabd7b815c5373de37c484a92aba7115720 MD5sum: 920e49806cb730869749ce3a14405b40 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_31.4-1_all.deb Size: 76988 SHA256: ac3719d12adb77299529e6b2cbe1aaf16a91d512c9f4527c1ab4087d610129c7 SHA1: b3cf2af81f6e565b551fe2c8af924e24b5c5106d MD5sum: 6662a08c16bf89992bd9abe767a30d59 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_31.4-1_all.deb Size: 76976 SHA256: 66a9fd1e8f02b7dc73e7e14b66e1c9b621520f1e086f0cc4cd3bf06a8f06ad6c SHA1: 081201b9cf125171e031ec2b8b4fc97bb8ffb4e9 MD5sum: 2d7f21e7db479ab45ad083055f2284b1 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_31.4-1_all.deb Size: 76972 SHA256: b34c11b6c072580e02bb86ac85078e614a90706f22172903442e352f9578d79f SHA1: 8852cad695477981604071be7b9dc0df0ac39ea4 MD5sum: c659fc847ebb3a23cd67392d536fa618 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_31.4-1_all.deb Size: 76976 SHA256: b5884a87ca1411eea12bd108556f8213a73638788ab73f042726200748ab2528 SHA1: 85e23bd7329e4cafee40c76379d4d307abe3f166 MD5sum: cc18cbc848b78be5c13fd11cee99453a Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: genmkfile Version: 3:15.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 153 Depends: make, dpkg-dev, devscripts, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_15.5-1_all.deb Size: 55916 SHA256: db2fbeaca48a1f482b2848cde59244e9fffe29b2f90ba3edb3e82c433bc37eb5 SHA1: 200289206a28283da732c7bdb93f74243127d350 MD5sum: eb804b345cf8b0168f5663d7e1fd591b Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_4.7-1_all.deb Size: 490388 SHA256: acad23267e1eb943b0b341a86fa5001f5ff0ecb699ecae8f3a522ba0aaea674b SHA1: e8fa920ae941cf10af2dff066306436b7da77034 MD5sum: 969da73e160e4aa46078188c07027e4d Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: grub-live-initramfs-tools | grub-live-dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_6.7-1_all.deb Size: 26684 SHA256: 9852b8cbdd8fc51bd9c9237334c55c308f1ea5681a9dede6d22de77b7451abed SHA1: d881b332a77b3f41868407fb07e7734a7b1ad544 MD5sum: 6907b69c9522021b6563b7dedca61952 Description: grub live boot menu entry Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_6.7-1_all.deb Size: 23972 SHA256: fe2a1ab635682f514b346a0f9be413188fb13518e030b63bbc34741dd256be85 SHA1: 800dcfffd0a2de584f45e69903b66f73ab40f6a3 MD5sum: 26b323bb6b5af00685235617392f4116 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: grub-live-initramfs-tools Source: grub-live Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: grub-live, live-boot, live-tools Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-initramfs-tools_6.7-1_all.deb Size: 23996 SHA256: 28deaab200e6d4b57278b6ff828da9d7adc7651516689263476ee3e8a1d44d54 SHA1: 30f74ff4eab40bda988e035219de7f83faca6462 MD5sum: 29d3c349e7f491d520460b87d7d2eeee Description: grub live initramfs-tools dependencies initramfs-tools version metapackage for grub-live . See also grub-live package. Package: hardened-kernel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_4.9-1_all.deb Size: 157816 SHA256: 02c694686512a5f265ec96299a47fa0558f5d817f4a2455dd9a0675b0b63ed36 SHA1: fa06cb8fe47c108d328cb3bde61c2d9eb65400a1 MD5sum: 2b6a8ea70923c396f7f087144ce19037 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:25.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 379 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_25.8-1_all.deb Size: 124856 SHA256: 59fdfa75340061f78213d6ad3ae49a3a16b45d10348e2c3861e6192ff864fc4f SHA1: 3f52b24b10d910c11b0357411a4f006388fcc646 MD5sum: 2a0a3a39c2f61ada66a4459529330c42 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. Package: icon-pack-dist Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2696 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_4.6-1_all.deb Size: 1478596 SHA256: 6bc2bd612bf162b090b6bceee88e1839853aa8d94fffa43624629ffdfcc4ead4 SHA1: e3fefb171d9ffd403c3381471a1e4f5f3962dbfd MD5sum: 60774fe70b7b4ecabc892f919ba16b95 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 70 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_7.2-1_all.deb Size: 29960 SHA256: 576df8dc29982656c5e4a8fb49482ee0ab28a3788c06bba12f86dc4fd7d9cd9f SHA1: 4d15a68aeae6892d06e016604db4b9ed75992de0 MD5sum: e1288e53c1187fde1d7292020548d1e3 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-base-files Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 469 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_8.2-1_all.deb Size: 338708 SHA256: c1ef4a49c11d2236220538f1591045f02a890dae26af6d7c60ef23c7d1785eff SHA1: 1f6830d2f32b5078feb904f57a3116ee058f562d MD5sum: edb5ba4a3c86d05ed79da729ca4d8670 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /etc/skel/.bashrc, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-cli Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: anon-apt-sources-list, dosfstools, kicksecure-base-files, kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-recommended-cli, lvm2, ntfs-3g, obfs4proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli_31.4-1_all.deb Size: 76976 SHA256: 8d7d2fca0f7a0acda10f65e46381f4ca99e355bd5287e755ddd7ab4892b06be9 SHA1: e3ab510b19a82a43f513bdaa9289d651afb5ae72 MD5sum: d5c38fdef4996d15076ded8124b9b258 Description: Kicksecure command line interface CLI A metapackage, which installs packages, for Kicksecure CLI. . Do not remove. Package: kicksecure-cli-host Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-cli-host-packages-recommended, kicksecure-dependencies-system, non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host_31.4-1_all.deb Size: 76948 SHA256: f30721df287564b28afc1f84a2147f2edfb24bfe79396cfd3d69ff8fcc1f11cb SHA1: 3303951afb600a26eef195392a714f813c17acf8 MD5sum: 186f7879c20a6c7b97edfc7b5ee6496e Description: Kicksecure Host command line interface CLI A metapackage, which installs packages, for Kicksecure CLI Host. . Do not remove. Package: kicksecure-cli-host-packages-recommended Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host-packages-recommended_31.4-1_all.deb Size: 76960 SHA256: eac00bfd71f1174b2ede758cb8b7136a7112eacd041ef85eb97bfccbc9eaa507 SHA1: 5c44194a77beabcf0d89aa2e1ff38ae9ac7a479e MD5sum: fd08df325238e7f063532e7abbab0596 Description: Recommended Kicksecure Host CLI Packages A metapackage, which installs packages, which are recommended for Kicksecure CLI Host. . Not useful to have inside Qubes. . Safe to remove, if you know what you are doing. Package: kicksecure-cli-vm Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-dependencies-system, kicksecure-network-conf, non-qubes-enhancements-cli, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-vm_31.4-1_all.deb Size: 76996 SHA256: 48610177233dc8f8ece202cec40b087b01cf7340d7484243a582a265c1aea32c SHA1: 3f39eefca82bb3e31d33ae66e79dadc5359f7202 MD5sum: 92b0a27470bb6cfb014ae7b432fc6fe0 Description: Kicksecure command line interface CLI VMs A metapackage, which installs packages, for Kicksecure CLI Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: kicksecure-default-applications-cli Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, magic-wormhole, makepasswd, pwgen Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-default-applications-cli_31.4-1_all.deb Size: 77024 SHA256: fc9bcfd6ba25093d5870791582f0ed77baaad828e318c97c391f78c1bcdc934a SHA1: 1b42258ccfa983be0c4278d07aa0dc02a2e48841 MD5sum: e723bfc4d3e1e173f72a8ef144e55d71 Description: Default applications packages for Kicksecure A metapackage, which includes default packages to ensure, Kicksecure useful recommended tools are installed. . Safe to remove, if you know what you are doing. Package: kicksecure-dependencies-cli Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, desktop-config-dist, dialog, dist-base-files, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc, setup-dist, sudo, timesanitycheck, usrmerge Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-cli_31.4-1_all.deb Size: 77076 SHA256: 4367592abea9c1a13dafb91d58ee64a857567ccdc06af0d510b89225495a0f60 SHA1: 5827e768cf641aa58e9754fc302f66a1c90f0f97 MD5sum: e236eaae2971103fd65099a8742d67f7 Description: Dependencies for hardened systems CLI A metapackage, which installs command line interface (CLI) packages which should be installed on hardened systems. . Do not remove. Package: kicksecure-dependencies-system Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: dracut | linux-initramfs-tool | initramfs-tools Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-system_31.4-1_all.deb Size: 76960 SHA256: b61dd3181c5c67afe472b34f4610aa4729c2df8c983e88c8b485c2a8772ca395 SHA1: d5e49a815773f062f82526f88e0181965f1203c4 MD5sum: a9471bde7e07b2e68c967cc79e317bf8 Description: System for hardened systems A metapackage, which installs system packages which should be installed on hardened systems. . Currently only depends on boot process related dependencies. . Do not remove. Package: kicksecure-desktop-applications-recommended Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: catfish, electrum | dummy-dependency-electrum, firefox-esr | dummy-dependency, flatpak, gpa, keepassxc, kicksecure-welcome-page, msgcollector-gui, repository-dist-wizard, ristretto, sdwdate-gui, setup-wizard-dist, tumbler, vlc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-recommended_31.4-1_all.deb Size: 77052 SHA256: 72feed7e8cc5caa573b96fa3a9a76a3c7b9fcfe52151d165142bf79323f45508 SHA1: adf499c7d33a087b842609f24bfc0761fea42a0a MD5sum: 82ee3083b2c51bc1b11e4122ca0ae55a Description: Kicksecure Recommended Desktop Applications A metapackage, which installs recommended packages, for graphical user interface (GUI) Kicksecure. . Do not remove. Package: kicksecure-desktop-applications-xfce Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: gvfs, libexo-2-0, lxqt-sudo, mousepad, pkexec, policykit-1-gnome, polkitd, thunar, thunar-archive-plugin, thunar-volman, xarchiver, xfce4-terminal Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-xfce_31.4-1_all.deb Size: 77044 SHA256: 1c8d90f78ebf72b96e659d4acf165840ebeeece454c7113fd45a4e8865fa608a SHA1: d7c1886e84a34bb8f35479d6fab9dfb138d45e91 MD5sum: dfea37539b6173a390f60ed9c4ac2de8 Description: Recommended applications for hardened Xfce desktop GUI A metapackage, which installs minimal, yet complete enough to contain the very basics, Xfce applications. . Safe to remove. Package: kicksecure-desktop-environment-essential-gui Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: desktop-config-dist, desktop-config-dist-dependencies, gtk2-engines-pixbuf, libgl1-mesa-dri, mesa-vulkan-drivers, upower, x11-xserver-utils, xdg-desktop-portal, xserver-xorg, xserver-xorg-video-fbdev, xserver-xorg-video-vesa, xserver-xorg-video-vmware | dummy-dependency-xorg-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-gui_31.4-1_all.deb Size: 77076 SHA256: 0233931dc4a5414296fae8f51813dfaa17a91f396074fc77849eed7d431f1271 SHA1: fd7eb862580b1533c2d26d0bcdde372da467ff71 MD5sum: cc93d7d5fda288e1445835d9d0dd172f Description: Desktop Depends GUI A metapackage, which installs dependencies for desktop environments, such as KDE, GNOME, etc. . kicksecure-desktop-environment-essential-xfce depends on this package. Package: kicksecure-desktop-environment-essential-xfce Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: accountsservice, gnome-brave-icon-theme, gnome-keyring, kicksecure-desktop-environment-essential-gui, lightdm, xdg-desktop-portal-gtk, xfce4 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-xfce_31.4-1_all.deb Size: 77016 SHA256: 5c7133de3e6af0a10a789955c4c2fac1411b97fc69db2a91c1996ccc5fb3849c SHA1: 0cca253677c6e9434c642b52922639f5fb6f586c MD5sum: ef3f5b58bd69af966914a9060533327a Description: Recommended applications for hardened Xfce Desktop Environment A metapackage, which installs minimal, yet complete enough to contain a very basic Xfce Desktop Environment. . Safe to remove. Package: kicksecure-network-conf Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.6-1_all.deb Size: 22420 SHA256: d2b1356b114e47a7d1f82868aa27b336b16d02d60359e3d5c755825b7ba4b2b7 SHA1: b792b3bc76bdf5810fdf2c9adce5927596d979c7 MD5sum: 2a955f094262088a25f500a02a3017ce Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 48 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.6-1_all.deb Size: 19044 SHA256: bdaa5ea51eca62ab1b0449984fbd7fb6068c69f15a8094095c48c8297de2827f SHA1: 96e7f813891683b590534c736001179ed6fd4e51 MD5sum: 844080d84adbf570baefa86721354766 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_31.4-1_all.deb Size: 76960 SHA256: 88001b173c0f8c2f13fdddf0e50396be876cfcdabc386474102996281cb283ac SHA1: bccadd19faf211ce90f8010115e6060dbc8cea3f MD5sum: 3c185cd2b4dfda8a0868c955a1e2ae4f Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. . Do not remove. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_31.4-1_all.deb Size: 76980 SHA256: 50efb626c14cc8c0f457057d7aa2474aba6f02f26b5a738ace567e8a8e0aac90 SHA1: 9de2c6c0b9466ef074db630217d66c8eb4d73478 MD5sum: f808abcf4b97b5c2f5aa9ac0f5d56974 Description: Default packages for Kicksecure-Qubes CLI A metapackage, which installs packages, for Kicksecure on Qubes without recommended GUI applications. . Do not remove. Package: kicksecure-qubes-gui Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-desktop-applications-recommended, kicksecure-desktop-applications-xfce, kicksecure-qubes-cli, qubes-core-agent-thunar, qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubesdb-vm, pipewire-qubes | pulseaudio-qubes, pipewire-pulse | pulseaudio-qubes, wireplumber | pipewire-media-session-pulseaudio | pulseaudio-qubes, rtkit | pulseaudio-qubes, dbus-user-session, xfce4-settings Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui_31.4-1_all.deb Size: 77056 SHA256: 78035f5e8c28266c66bd7aae4d4fc1cbb80d8e64bd8bae7c6220d368f8f852db SHA1: 09a9144616c8092b095881f0030b51110b9797f9 MD5sum: 3c33eb52c257cfe32055191f97cbeae2 Description: Default packages for Kicksecure-Qubes GUI A metapackage, which installs packages, for Kicksecure on Qubes including recommended GUI applications. . Do not remove. Package: kicksecure-recommended-cli Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: apparmor-profiles-kicksecure | dummy-dependency-apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto2, libpam-tmpdir, lsof, man-db, mesa-utils, most, nano, net-tools, open-link-confirmation, openvpn, p7zip-full, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unar, unzip, usability-misc, usbutils, vim, xz-utils, zip Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-recommended-cli_31.4-1_all.deb Size: 77280 SHA256: 79496336277b756219bcd6a881bfb58309decea85f6ea0b1152141a73cc3af2e SHA1: 92408c4dd6885552ca42044d643a859695106656 MD5sum: dc409199bb141f149147fa876922dbc0 Description: Recommended packages for Kicksecure A metapackage, which includes recommended packages to ensure, Kicksecure standard tools are available. . Safe to remove, if you know what you are doing. Package: kicksecure-shared-host-xfce Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: ddrescueview, discover, gddrescue, gnome-disk-utility, gnome-system-monitor, gparted, grub-live | grub-live-boot | boot-live, gsmartcontrol, hwinfo, icon-pack-dist, non-qubes-enhancements-gui, laptop-detect, lm-sensors, lshw, non-qubes-audio, nvme-cli, psensor, pv, sdwdate-gui, smart-notifier, smartmontools, xfce4-power-manager, xfce4-screenshooter, xfce4-xkb-plugin, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-shared-host-xfce_31.4-1_all.deb Size: 77176 SHA256: 94c8f7a6db518e6355f41f569c406c3b2e78c3e4299c2b43067074f3da7ef36a SHA1: 3b20c41277b96d034529c4c6df77458af51456a5 MD5sum: 6d88f845c8de615b4c5c0fb839d2f4cd Description: Kicksecure Shared Host Xfce GUI A metapackage, which installs packages, which are recommended for Kicksecure Xfce Host as well as a Whonix-Host with a graphical user interface (GUI). . Safe to remove, if you know what you are doing. Package: kicksecure-welcome-page Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 989 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_6.9-1_all.deb Size: 902940 SHA256: 92c6eca8492d224933ea4e97521ae906ff709f433990e84b2e5a659229b2bf29 SHA1: 2f0686c914fcb618e142dcec66e7bdeef461ec55 MD5sum: a4d407f44edbc27284c4cacac3ff5dc2 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: kicksecure-xfce Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce_31.4-1_all.deb Size: 76912 SHA256: f405c93d08c286d426b2c8823b81571bb54ba1c88c857b9f1f266e6ed1a4f759 SHA1: 413099de3b412458bd7febbc27e72dc918803bc0 MD5sum: d5ffcf3aeb4bc18d26d340beb3a3c8ec Description: Kicksecure Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce. . Do not remove. Package: kicksecure-xfce-host Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli-host, kicksecure-desktop-applications-recommended, kicksecure-network-conf, kicksecure-network-conf-gui, kicksecure-shared-host-xfce, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-host_31.4-1_all.deb Size: 76944 SHA256: aa6633653e22373f64828ddb6932aa4a4f289d815db4602ed54e950594743356 SHA1: 4adfc93f9e0720a21e8a6356ddf03d21faa5762f MD5sum: 0fa0393e1529fc771f0609477f1a260e Description: Kicksecure Host Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce Host. . Do not remove. Package: kicksecure-xfce-vm Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: kicksecure-cli-vm, kicksecure-desktop-applications-recommended, kicksecure-network-conf-gui, kicksecure-xfce, non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-vm_31.4-1_all.deb Size: 77020 SHA256: 536f5d0fae3ab83e49f25216dd261fd6a902611b7420434a1efa43ab40850389 SHA1: 3e56270344327683b455a4a2ef5b38ad659a521a MD5sum: a10d4beeb54d5ddc250355fe9e50e06f Description: Kicksecure Xfce GUI for VMs A metapackage, which installs packages, for Kicksecure Xfce in Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: legacy-dist Version: 3:15.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 127 Depends: helper-scripts, apt-forktracer, deborphan Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_15.7-1_all.deb Size: 49060 SHA256: cb099c01f6578911e650c4a03471421cbb8e6235cea047abed28957e201491fb SHA1: 19a56199c8f3efcc9927c38739c53924ead2e12d MD5sum: f23330fb0bfcd191277a9f4d94fc3063 Description: Prepare older Build Versions of Whonix for Upgrade Applies fixes required for upgrading from for example Whonix 8.x to Whonix 9.x etc. . Upgrades from Whonix 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:10.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_10.7-1_all.deb Size: 54116 SHA256: 4b0f4930e5ca48f0d4178509a6259cd1a40b9b1489a1605aad8f6609f10757b2 SHA1: 276b169984659a24e9cf4706cba10a07bed5ac55 MD5sum: 1113ce361a32dfe8deebbe271dc49563 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 293 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_7.6-1_all.deb Size: 143724 SHA256: b8c3472cd97d94d35183a29953a262898a17040e114e2633cfd10ec2786fc38b SHA1: 36411038c94fedff747c9210bea868dbdbfcd35e MD5sum: a6ed31101049f36bc6a9284848712b1b Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: mediawiki-shell Version: 3:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: helper-scripts, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_3.5-1_all.deb Size: 41116 SHA256: 386e490f8862ce03c35b4148cd95fa32c8f16493648b19128db19b93d673ae3a SHA1: ba3a89f59e0b8db1f6cf3fb9c10dceceafb273c5 MD5sum: 751cfcaa1a38face51b731f597c03c1d Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:13.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 217 Depends: python3, inotify-tools, procps, safe-rm, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_13.6-1_all.deb Size: 66116 SHA256: 5499ea0f4b5571190fb6b703d83551711c0f1ef63d7ed97d5ff183c9f2c91794 SHA1: 0ca3287529e6290ded9303418b799af7044afca7 MD5sum: 6d98d4f725951d59d2fc84fa173b53e1 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:13.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: msgcollector, wmctrl, python3-pyqt5, qtwayland5, zenity, libnotify-bin | kde-baseapps-bin, mate-notification-daemon, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_13.6-1_all.deb Size: 44660 SHA256: d222bc6a1cec0b6722b5210249c5d1cb4376d42d860bff7f5521d2fd747373aa SHA1: bcc31ea5c00699fd8e2d0962e77c522b7944ce20 MD5sum: 1a67f02625759423649c7e5d64e613ba Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: non-qubes-audio Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: libasound2, pavucontrol, pipewire-audio | pulseaudio, pipewire-pulse | pulseaudio, rtkit | pulseaudio, wireplumber | pipewire-media-session-pulseaudio | pulseaudio Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-audio_31.4-1_all.deb Size: 77056 SHA256: 91a4788b1ca0923ec66f5a51ec1b7865f84761c403b6cfa9b2ee33e30734ffd6 SHA1: ab1e2feed449536e9ac2346cdd952df6612cd743 MD5sum: 8dc77a7f4772aaf634680c2a12b7a4de Description: Recommended packages for Audio Support in non-Qubes A metapackage, which includes recommended packages which are useful to provide audio support. . These are not useful in Qubes, since Qubes already has its own native audio implementation. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-cli Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: acpi-support, console-common, console-setup, cryptsetup, dmsetup, grub-live | grub-live-boot | boot-live, kbd, keyboard-configuration, libzulucrypt-plugins, swap-file-creator, tirdad, udev, zulucrypt-cli Replaces: non-qubes-vm-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-cli_31.4-1_all.deb Size: 77128 SHA256: 9466c47f28bfe1870d9ed8cc744a54995300a789f6aec54fa46c72261164e9d3 SHA1: 4ed9bbacfb559f5227f7ffa42ecb97e4a37e7fc2 MD5sum: 3cd2fc64d5bd22307c1e914b9ab886a7 Description: Recommended packages for terminal based machines (CLI) A metapackage, which includes recommended packages which are useful within CLI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-gui Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: non-qubes-enhancements-cli, rads, zulucrypt-gui Replaces: non-qubes-vm-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-gui_31.4-1_all.deb Size: 77036 SHA256: c0dbcab3c97f8279bb7542bb93031176dfcee2b3616db31fc4e9d660988a4880 SHA1: 4ca7d2b37da0e420b2dc0c98322d106d9557dba1 MD5sum: 675141657f74a213dffb30f365f140c5 Description: Recommended packages for graphical systems (GUI) A metapackage, which includes recommended packages which are useful within GUI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: open-link-confirmation Version: 3:6.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 87 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater, tb-default-browser Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_6.5-1_all.deb Size: 30216 SHA256: 6ca5bb82fe46b4b50427bf6cb3440cf67a960c903eee05692ee1402dd6943ba6 SHA1: 382482b4b7e83b02ed4e48b79da747b5a9171535 MD5sum: ace08999a2553f318e8dca21b2dbdee0 Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: orca-screen-reader-support Source: kicksecure-meta-packages Version: 3:31.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Pre-Depends: legacy-dist Depends: gstreamer1.0-plugins-good, libatk-adaptor, libgail-common, non-qubes-audio, orca, python3-gst-1.0, sound-icons, speech-dispatcher-espeak-ng, xbrlapi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/orca-screen-reader-support_31.4-1_all.deb Size: 77024 SHA256: ae1d2eb5e2d3fe185cc173589b669bf67ea5718c8f49bd470e9c4d01c8bb773d SHA1: cd7393705d01e4bfb08f84010260fb78eeab0338 MD5sum: 981a517c1a50b0b22936e80d99c5b21e Description: dependencies for the orca screen reader A metapackage, which includes depencency packages for the orca screen reader. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: privleap Version: 3:0.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 138 Depends: python3 Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_0.5-1_all.deb Size: 28060 SHA256: 9e71bd28a2dfc9dba8f28185335fb2c44fda2737a5316f211abbd75ade033034 SHA1: 70113196da6116b5816d37773e36be4c9d65339e MD5sum: 8fcee6dca52830b8935108ebd44d479b Description: Limited privilege escalation framework WARNING: Not yet stable. . Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. Does not require a SUID executable. Package: rads Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_7.5-1_all.deb Size: 35136 SHA256: 96ee8efb52a916cf598711a3698fe1b0fdf36ba5fedb9098fddfdbebdbc53ec6 SHA1: d216241d9c29673c8b84e6e7210752d4239cca15 MD5sum: d77f32e2917820ab638f094995304bfe Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 101 Depends: helper-scripts, dracut, kexec-tools Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_3.0-1_all.deb Size: 24520 SHA256: f8b8b048f7ef354857282de64ebc144138a721693a5942d98d751ee80a8d39c5 SHA1: e741bcc1b2c3396ebe0f13a8c3a84d02f5aa819b MD5sum: 81e738e12675752a2574d6fd121212ad Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs. Package: repository-dist Version: 3:11.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 198 Depends: helper-scripts, lsb-release, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_11.5-1_all.deb Size: 104220 SHA256: acdb4a3fcd357f21da9c43544506e495291b1f3767fbdf306bca0561ba380530 SHA1: 25eda18455d5f7c8f83cf63628acc5cbe23563f2 MD5sum: a2e77422752d867ce78533296630acf7 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.list`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:11.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 70 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_11.5-1_all.deb Size: 37120 SHA256: 41f557d98c439bf37f0e8846a03a1eb306953905ffc81ca92b45962d890c15e7 SHA1: 2b90cb734e6e91170d56a3153c027ada7f157469 MD5sum: 9adbddbd8f95da0aef577cfd72da96bb Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.1-1_all.deb Size: 19368 SHA256: f82e5f117389874a7498a8be5fc9b305aa62246c2d85c1deebaf6c9b6dc1530f SHA1: 4b6dce9efc4fe8fc890240c7cef83c1c1cce8433 MD5sum: a91710e2f183be2520a56b769208bf8f Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_6.8-1_all.deb Size: 48552 SHA256: 463d731c0679aa4b4b127036a147fc9bee66cbc4ec70357498acc34cece49f62 SHA1: 989f2b39f83e3e776c874f32084ad44852a29f0d MD5sum: a6b2ba06e60479ca05d11ccd12ecd7c4 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:24.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 339 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, python3:any Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_24.3-1_all.deb Size: 147600 SHA256: c51946c3a839e746377b992b679201cf02a00c9b388a00078e41ca4bba98884b SHA1: aacd9962d90f158f346840904a67ddda01b09792 MD5sum: 2ab2df8a4a1e2074e7920fbd46b18be6 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:10.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 240 Depends: sudo, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_10.5-1_all.deb Size: 90532 SHA256: 7ef0a7d74eeabbb031812ee1a8412284ddebf0cece29930831249a77472743af SHA1: e79e0f40e02e72f7d8914c7227a7d30cc1efc60c MD5sum: e7ded09361cb49d8e4f03924c89838c9 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc Version: 3:43.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 599 Depends: adduser, apparmor-profile-dist, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Replaces: anon-gpg-tweaks, swappiness-lowest, tcp-timestamps-disable Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc_43.9-1_all.deb Size: 211124 SHA256: bab7fc46e52428d02533e93e180b15b049bb300b690d5f1a8f6a5be6f51ce85d SHA1: 01948827fb70ceca45382f1ea9fc9437b15b55f8 MD5sum: dbf5d5d8f2f38a6f60fa4cd65055ce4b Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.3-1_all.deb Size: 17728 SHA256: 25f78cf6e5bf314dadbac853573fa9e4c947ed7ceedd4ed621fa1ba662fa0a5d SHA1: 658ef9690ee68adfe433b68b8e925af6e37708c2 MD5sum: 0e1faa1d42e561bbed5e2ac3763a7392 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:10.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 138 Depends: helper-scripts, dialog, sudo, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_10.5-1_all.deb Size: 46044 SHA256: 7db90a0ca400880600704982a600d259be7ae765ef8f24dadad6db7722a0b76e SHA1: 7a7069318da08fbaf3d30156495f7bd4e9437156 MD5sum: c42cd8940c35ac14b1b961ba8b6fa1c5 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: setup-dist, python3-yaml, python3-distutils, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_11.3-1_all.deb Size: 55772 SHA256: df8771d9e6875046d9832d0b480ccd86f96a1554ed0a58440f4cfd72f55a3d35 SHA1: ca32f89738ef44712e2a3d53b24841b78e4c9b3e MD5sum: 504a77336cec751430172b2cf7fc686a Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: helper-scripts, cryptsetup-bin, bc Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_7.8-1_all.deb Size: 31848 SHA256: c5c74ae6c2130a4ffe056043ce07fb1cc3ac901abfea235dcaa78e082db456bc SHA1: 70a1ee8630cc11014d5f599cbb60511d278601e4 MD5sum: 10d4ef0f5e61a8c6f8eb910ceab8fc21 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:0.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: helper-scripts, lightdm, pkexec, python3, python3-pyqt5, safe-rm, usability-misc Homepage: https://www.kicksecure.com/wiki/Sys_Maint_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_0.6-1_all.deb Size: 19544 SHA256: d2cabecd4d74db014247592ac45acfe2f85166e7b0c35959f7230266e58587d0 SHA1: bd1c7a56a5d2244c0f21688734a76c0fecb08888 MD5sum: bb72a124bb57fe31d6f42540255ee2d7 Description: System Maintenance Panel WARNING: Not yet stable. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:31.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 434 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, systemd, adduser, security-misc, spectre-meltdown-checker, apparmor-profile-dist Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_31.5-1_all.deb Size: 140184 SHA256: f72c5780dcbc9d7657dbad80b4c2fc0042c5d17f4c71eeeee63eb627be47be56 SHA1: 11a0405aea3d614ec30a8027c31aca5e4a11daa6 MD5sum: e94534017d296cc418dc4f2e89465dea Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: tb-starter Recommends: tb-updater, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-default-browser Priority: optional Section: misc Filename: pool/main/t/tb-default-browser/tb-default-browser_5.2-1_all.deb Size: 24268 SHA256: a76be738df1ad4700920b243b2b2a12674338589c52b35ae0312b4bdc14e3a5b SHA1: 759592fbd2dfdb458c557f284020020e986fcc88 MD5sum: e22943b7dbed8d1e6fbc92615564fd5c Description: Configures system to use /usr/bin/torbrowser as default browser Sets /usr/bin/x-www-browser to /usr/bin/torbrowser. . Sets /usr/bin/gnome-www-browser to /usr/bin/torbrowser. . Sets BROWSER environment variable to /usr/bin/x-www-browser by using /etc/profile.d/ and /etc/X11/Xsession.d/ hooks. . Registers of MIME type handlers to 'torbrowser'. . Sets KDE's default browser to x-www-browser. This only takes effect for newly created user accounts. Not for existing user accounts. This is most useful to help Linux distribution maintainers setting divergent defaults. . See also: The Default Browser on Linux Debacle http://blog.codef00.com/2011/02/18/the-default-browser-on-linux-debacle/ . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-starter Version: 3:17.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 165 Depends: msgcollector Recommends: tb-updater, tb-default-browser, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_17.1-1_all.deb Size: 65580 SHA256: ca7636876ab2195debdb2bd610b716f0b85909dfcceedead3f99dfbbb7c9cac7 SHA1: 896eefea1f1bf4e3bd69ed92819657f083a27d80 MD5sum: 22b6e9b60cc07af92cc582342393ab40 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:36.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 513 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: tb-default-browser, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_36.0-1_all.deb Size: 237716 SHA256: 581eb139e6af53bf77220a0d8222cbf848d06e4c1312aad338c0035bf0b96560 SHA1: 05baa3cfe8e473acba97057ae23e88da3a3fc61c MD5sum: 04043fcb9231bcf71396684191ba2ba1 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter, tb-default-browser and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_6.8-1_all.deb Size: 26756 SHA256: 61dbcd51924a95c67deb0bde0ef8fd9f829fdc0fb230aacadd958ee83bb5cb88 SHA1: 9d8b3628434d6431419e4e9f0fd57f80491c901b MD5sum: 6bfaaa82cf9541f461d114325194f3f5 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:7.0-1 Architecture: all Maintainer: troubadour Installed-Size: 179 Depends: anon-connection-wizard, helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.0-1_all.deb Size: 68724 SHA256: 094848773fe26dc464a8f355bdaf37cb8ff74765eb89e8152ba7fab95ee206b6 SHA1: ea6c7f7a73fc8668420c89229cb0321dbe4c26ba MD5sum: 523ab47123fd8892d718e242248c6524 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: tor, netcat-openbsd, xxd Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_5.6-1_all.deb Size: 26776 SHA256: 7f21f6bff1bc4d44a2f4738cf330058fcc18f070dee6ccb42d20e4959d9369ae SHA1: 4eb0e2bb9cc08f97925fda28721d0e0627b48295 MD5sum: 0e713ea37137873f27e8e7c982c5df59 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.13-2~d12.bookworm+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 19566 Depends: tor (>= 0.4.8.13-2~d12.bookworm+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.13-2~d12.bookworm+1_all.deb Size: 2415852 SHA256: 8402c2171b54cfc3919803471a06b25871e64b639295bf6ecde8b8c1d25a0dfc SHA1: bd973168ef5d4db605ee665cb7c806ea1e4acee3 MD5sum: 7d1b3bab1ffa3d1c8654559d96880c9d Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:24.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 659 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_24.1-1_all.deb Size: 218772 SHA256: b845c57948be7bcf0973084d6b0de93c5277634986413953badcb754b948ca19 SHA1: 65f6d9ea815c1fa01f0dcb75884d85f997a5116b MD5sum: 67f59ba7742a7dccca992ba72d5d2389 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds user "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets user "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . xfce4-terminal: . * Disables automatic scroll on output when manually scrolled up to make reading output such as "sudo journalctl -f" easier. Automatic scroll on output still happening in default when not manually scrolling up beforehand first. . * Enables unlimited scrollback by default to avoid output from being truncated. . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. Package: user-sysmaint-split Version: 3:2.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 117 Depends: security-misc, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_2.9-1_all.deb Size: 27828 SHA256: 2a3cca458ff5cafb7ae5dda22344c8a4b88427e2bd9bca63bfac6ceca8216382 SHA1: aebfa62160fbb5f94ea7956e18d6e44ed3691f81 MD5sum: f89fb0558f1ceecc39fb5ec43968b94f Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry "PERSISTENT mode SYSMAINT (For system maintenance tasks.)" . Makes Privilege Escalation Tools (such as sudo, su, pkexec) inaccessible to limited user accounts such as user "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 136 Depends: sudo, adduser, p7zip-full Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_11.0-1_all.deb Size: 40952 SHA256: 5cf54e7b8edd2e2dc2ad58751fe860765d82d76316207aa2ae77cc6a2711a028 SHA1: 07c3d541bb0719c280fd282f471ec9713288608d MD5sum: 1afad6e48b1aa298fee4696094c8afe4 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Disables screen locker when running in VMs because that is not useful either. . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds user "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`