Package: anon-apt-sources-list Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.0-1_all.deb Size: 29832 SHA256: 13194843bb1dd021d6828ca69bc2dd19ea0b1af99bca765e7e733db5162528c9 SHA1: 9bde14d2151a63e9735a3b3f4b2b58e45cff3aeb MD5sum: 4b45504bc3b85fe36618164dd2c1b7cc Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.list for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.list for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.0-1 Architecture: all Maintainer: iry Installed-Size: 268 Depends: helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.0-1_all.deb Size: 94120 SHA256: e702e9d57ef1fe4d0537178d8f54bb413a99194b6f1f12e40e15d174a2191484 SHA1: c4e866de11d35e5191bf9de69eded9ad290d30a5 MD5sum: 3ff8828c188a3b694b5d4d5198535d69 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.6-1_all.deb Size: 64264 SHA256: e518c9a544fa2709cb7afca7c992fee2620bc83701067d1daf8ea73ed01f834e SHA1: 3c751e9eef4d32e6831184cdc9bc0ffa894e3849 MD5sum: 426adac983d9f5766354ea7bf0cc824f Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 95 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.5-1_all.deb Size: 35548 SHA256: ce85d3e142cc11ce7af14109a3d26826b0e522d6c089613d4f8da8c6b5f46188 SHA1: 06a4f7623c2a57f47e14dce828dae4b8852dfa45 MD5sum: 51308bceb4d0ff563f94c0df16ee79ec Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.3-1_all.deb Size: 23728 SHA256: f21b32af2fe5e97e1deb2ec3d5b99643d09a29dd0f417462ce04a9b62d84be75 SHA1: 9fc848712e947b2a75d68a054f885f431f720587 MD5sum: ef3323d6884a5f4a13aebd5ad59b76ee Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_5.8-1_all.deb Size: 26540 SHA256: 9c4a89aed339b626661798ce0b1bacb1c8cfe28d0e7698dc22f239ec22689ec7 SHA1: c910dfe161d3b8a952202faf19a5e7f39326f0bf MD5sum: e9c56317599ccb1358a84617233042bb Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.4-1_all.deb Size: 34436 SHA256: 4becf5a59c42ff08923fe0f0f5b2f4e7ab7596c41b78de2888cb37ff2082d99a SHA1: cadbebdfd93b6cbcb1e484f411a2f213908452ce MD5sum: eaa01cbc2a257e9198dc4bc03a8b0e9d Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_31.7-1_all.deb Size: 77528 SHA256: 397bd8a887c1ba90ace0b6b64969ff1c1f3b69b86af157d46af04dbcaabd9b0d SHA1: c0f308cf181acc3a9c4f27efdb267f63414ea86f MD5sum: 5c16e2b541a3731dc54cedfbc318a9c5 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. . Safe to remove, if you know what you are doing. Package: binaries-freedom Version: 0:3.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.1-1_all.deb Size: 10868 SHA256: 05c0764da4a18b836b30ad1b37466abb36aa6af688a04232239fb3a4e9abff56 SHA1: cc2f8bca65cbb0c4916b530c24c2f93c2835ca0e MD5sum: 28025d7471a44c74a5f505858dd57847 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:3.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 27 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_3.7-1_all.deb Size: 13132 SHA256: d9b939535f52cf774e4e00185ddd9183e778f5ec1767c02230d318a3f1314a61 SHA1: 1fee887eb725b6eb3096f88ccc50d8fa1e79e428 MD5sum: c40283fe4e2ed5107f1d6a7cef8cd22e Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 86 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_6.8-1_all.deb Size: 30176 SHA256: ce10389095fde52f2a7debb298ae2ec226eadfd00e26454d399820134b0355f7 SHA1: bfe5192f510ccef6ac770c56c3a983d1f0cd445f MD5sum: f5229514b5f3da5ac872449fac1e35ef Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: calamares-settings-debian Version: 13.1.3-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 316 Depends: calamares, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.3-1_all.deb Size: 227220 SHA256: b0999b32522d6146a29c9af73a4926bbf2141b806148a3622238e37b20b36201 SHA1: af90b5078a0b2df3cbcf4335517c133ac42bffb4 MD5sum: 5933af361f1703a15d122c8ece515a27 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.3-1_all.deb Size: 13292 SHA256: 6ce82af10a7b236361e2e6dfe014ff9bfa4e2dabd34281e377b78b2bfa039221 SHA1: fff22537a21eada2e706375f5276a0d1c888f084 MD5sum: 4f13c1c264668a54e72391520904e70b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2024.05.22 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2024.05.22_all.deb Size: 4372 SHA256: 22eb433ce2e23eb79914b80825b84c30f6aa785a824a971a9a7aff93bc0a5057 SHA1: 2d8e1f35f05c2b62051c83bb6fe0bebce0029335 MD5sum: 058f3b902a815b762f79e7b035705d00 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 102 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_4.3-1_all.deb Size: 25340 SHA256: 43e243421f93bec22b6e226130b6ff07cda7f0dcc59d50ad0f2b0cfa463c6147 SHA1: e5580242b6c0549cc023626521ab0e790c63c940 MD5sum: 515043ae898be385454bffc0c6b7d851 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file, that removes `quiet`, `loglevel=0` and `debugfs=off` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable and adds `debug=vc` to the kernel boot parameter to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc`. . Enables persistent systemd journal log. . Disables `/lib/systemd/coredump.conf.d/disable-coredumps.conf` by package `security-misc` by creating a symlink from `/etc/systemd/coredump.conf.d/disable-coredumps.conf` to `/dev/null`. `debian/debug-misc.links` . Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:10.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 146 Conflicts: whonix-xfce-desktop-config Replaces: whonix-xfce-desktop-config Provides: whonix-xfce-desktop-config Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_10.9-1_all.deb Size: 46832 SHA256: bb8b1e276c5935dc5947a5a524904a5f5d204fb8303dfd83d313e48275fee522 SHA1: 193e5adf04e46944d14bbef2644ef67b9e276c0f MD5sum: 51c43f1f42341851bd4a4fd4ff1eb50f Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for user 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:10.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 63 Depends: xfce4-whiskermenu-plugin, xfce4-genmon-plugin, arc-theme, gnome-themes-extra, gnome-themes-extra-data, gtk2-engines-murrine, gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_10.9-1_all.deb Size: 34132 SHA256: 04c6abaff53759bba23094a95f80652b0c5fe0bccc2c5a1a1a8de06817bb33b3 SHA1: bb5093ab45529c1de8b1c5f922acfc2b100ff970 MD5sum: 9eff78409f61a510ac0eeb9c7ebf25fe Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:39.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 338 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_39.3-1_all.deb Size: 126260 SHA256: e85795f2ebe51dd7c20125fcaa118b54eab702949c2fa19daa54cb090b95c38f SHA1: 1b77256f975998b7f258d964c2db0e0c06f2834a MD5sum: 8b1c56fc37e0863e32d67c59b69bcd18 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-base-files Version: 3:12.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 408 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, zsh-syntax-highlighting, zsh-autosuggestions Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_12.9-1_all.deb Size: 124424 SHA256: 7483a54e2005fdf9b8b0d3c58c333881bd7cdd51a00514e0a08b0f6b8259b73b SHA1: 8ee28207490a774dff88d03c917384705b529e7b MD5sum: 5c255cdb4d71dca29cb30d43665c5c37 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dummy-dependency Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: firefox-esr, qubes-core-agent-passwordless-root, tb-default-browser, tb-starter, tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency_31.7-1_all.deb Size: 77548 SHA256: 09922b3bd493c0d0c100c2fd59bc05bb9eef969edb25f483685b61339c5b9fff SHA1: 93420ac9f085f10865cc045a2592ad65046da755 MD5sum: 11e1c9a5fe67d237e0d9f4ca9fea7b67 Description: dummy package to satisfy architecture specific dependencies A metapackage, which satisfies the dependency on: . - tb-updater - tb-starter - tb-default-browser - qubes-core-agent-passwordless-root - firefox-esr . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_31.7-1_all.deb Size: 77492 SHA256: 5ce63bf0b37dc41cea9e4cde107601360210831801f4cf7fd882b4b4debd2e9c SHA1: 05e7ff169ddc23997a6ef52e8fff0c754d774178 MD5sum: f3a5995a53b3f35a328e82285645bd62 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_31.7-1_all.deb Size: 77468 SHA256: d9983f66dcc34606ef9f73ec0dd069f18d38fd89d704e3eeb99e11d108c4260f SHA1: a2f6a4b2b53aad9d232b11fb5ed5eabfcc183bb5 MD5sum: a0f30facff61164eaf466c70b706dc4a Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_31.7-1_all.deb Size: 77504 SHA256: 91ff9996baeb24811c9c023875bca7979b0add7e68a7b3db6a79df7ee4d4849c SHA1: ec670673ccc5e6b119940f40d014fe9d17ba92b4 MD5sum: ff95e7d7b7f7e8547f7f20abf9ac92ba Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_31.7-1_all.deb Size: 77496 SHA256: 11869d3dd5cb11501863a0b868610480a3686285c5b7f552d9f8efa57602bcf3 SHA1: f108ed8834a460f6cb79a524d0b3c762e946ed03 MD5sum: 3de3a376e3cc286aec6d93fbf0a3020e Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_31.7-1_all.deb Size: 77472 SHA256: 51c1db2b8084d805db1871acc18a5a4f4da56afd1749a4edce3afcf704d36f13 SHA1: 8b6e15ff00ebfa1f4fc27548ca7652b0920f50db MD5sum: a4f2ada61348352d629bd2c8919bd749 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_31.7-1_all.deb Size: 77476 SHA256: e018d51ec8e838dd81d5997df709881ccb557ac567515516f17d0dbcab2a4304 SHA1: 615e3598519205f56c41801fddc478051f13fad5 MD5sum: 4745c5f0cc64707c3f8703e322193d6e Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_31.7-1_all.deb Size: 77472 SHA256: cec2b327549590b5ab76c432450a6b36fb5ec46aa99c6901192db7da34523979 SHA1: e90a1a6cd3ceff7c6edd5f1ca66772badc0f16c2 MD5sum: df595b98e761f225dfc7d47b5c2ccc01 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: genmkfile Version: 3:15.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 153 Depends: make, dpkg-dev, devscripts, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_15.5-1_all.deb Size: 55916 SHA256: db2fbeaca48a1f482b2848cde59244e9fffe29b2f90ba3edb3e82c433bc37eb5 SHA1: 200289206a28283da732c7bdb93f74243127d350 MD5sum: eb804b345cf8b0168f5663d7e1fd591b Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_4.7-1_all.deb Size: 490388 SHA256: acad23267e1eb943b0b341a86fa5001f5ff0ecb699ecae8f3a522ba0aaea674b SHA1: e8fa920ae941cf10af2dff066306436b7da77034 MD5sum: 969da73e160e4aa46078188c07027e4d Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: grub-live-initramfs-tools | grub-live-dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_6.9-1_all.deb Size: 27204 SHA256: 5191bc4226b620b468e570ce8a047215efe6b2162c57b4a1d273042f4407a896 SHA1: b345e133160668538e568035a6cb9c06dbc20f57 MD5sum: 514bb6bd551084ba04b578992089face Description: grub live boot menu entry Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_6.9-1_all.deb Size: 24364 SHA256: 455b1a7584a4aa42a775d8a7f1e8e44435390090e76d8fe60b7f7c9aa312858e SHA1: 4771a6e11223c2db24544604a91c8fbbaf778e84 MD5sum: 861bff6add1fa6ff1efa57654189b9b1 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: grub-live-initramfs-tools Source: grub-live Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: grub-live, live-boot, live-tools Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-initramfs-tools_6.9-1_all.deb Size: 24392 SHA256: 93985c510d0b5171abaee9bb715d0c76015a689a6fa81f974dda8fa8b7781b51 SHA1: b78b4da97688b04f71b3f71142abe7cbe328aa0c MD5sum: a5ed3f7ca73aaf689450b061def33b4d Description: grub live initramfs-tools dependencies initramfs-tools version metapackage for grub-live . See also grub-live package. Package: hardened-kernel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_4.9-1_all.deb Size: 157816 SHA256: 02c694686512a5f265ec96299a47fa0558f5d817f4a2455dd9a0675b0b63ed36 SHA1: fa06cb8fe47c108d328cb3bde61c2d9eb65400a1 MD5sum: 2b6a8ea70923c396f7f087144ce19037 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:29.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 485 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Breaks: usability-misc (<< 3:26.3-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:26.3-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_29.8-1_all.deb Size: 153432 SHA256: 94e249c419c29577cffb695939763088511023ec7c8cbe0d30caa27dd17f8464 SHA1: c92e9fa8ac7ac854fa87fb20a35606285953162c MD5sum: 259d7b17da4ca63f763b7ec3f5840a31 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. Package: helper-scripts-tests Source: helper-scripts Version: 3:29.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-base (>= 6.4-4), ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_29.8-1_all.deb Size: 78396 SHA256: 6434e0e08d27942aed28f8383e4bb751791969c6c505d54ab6a0fdd2e0a4cadb SHA1: 2261a9c8ec523c0556ecf208b3cd79f2c81c4510 MD5sum: ef01a8a3b21bcd6dfcd94f10c41618c9 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2696 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_4.6-1_all.deb Size: 1478596 SHA256: 6bc2bd612bf162b090b6bceee88e1839853aa8d94fffa43624629ffdfcc4ead4 SHA1: e3fefb171d9ffd403c3381471a1e4f5f3962dbfd MD5sum: 60774fe70b7b4ecabc892f919ba16b95 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_7.5-1_all.deb Size: 30992 SHA256: fed0783e02dd3bec287c4f868db0091dc8b1c19cd4dee9e38ae3c9dc58889d55 SHA1: b349b59a48d50fbcc9236f26c258c6d68166f43e MD5sum: 2b3513be53b20fd14086fe7ecf065098 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-base-files Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 469 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_8.2-1_all.deb Size: 338708 SHA256: c1ef4a49c11d2236220538f1591045f02a890dae26af6d7c60ef23c7d1785eff SHA1: 1f6830d2f32b5078feb904f57a3116ee058f562d MD5sum: edb5ba4a3c86d05ed79da729ca4d8670 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /etc/skel/.bashrc, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-cli Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: anon-apt-sources-list, dosfstools, kicksecure-base-files, kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-recommended-cli, lvm2, ntfs-3g, obfs4proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli_31.7-1_all.deb Size: 77468 SHA256: b1c9274a45d192816efe8b5eff8fab6cae49d18cb5a1fc6444e2b57658079b52 SHA1: 6921440966e9d6ac8634c595a70a06aa0b1afb32 MD5sum: eb60f835afda63ee437b7ddab14a46f7 Description: Kicksecure command line interface CLI A metapackage, which installs packages, for Kicksecure CLI. . Do not remove. Package: kicksecure-cli-host Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-cli-host-packages-recommended, kicksecure-dependencies-system, non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host_31.7-1_all.deb Size: 77440 SHA256: 655310e89cf64fba8a229aee7ef32aa9f5d352616304d3f6a6e29b0a66e66a2e SHA1: fa97c7a472e63046c7942c1e024bf005b8c67c91 MD5sum: 5de8628c70cb5f38753bdf45f00beced Description: Kicksecure Host command line interface CLI A metapackage, which installs packages, for Kicksecure CLI Host. . Do not remove. Package: kicksecure-cli-host-packages-recommended Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host-packages-recommended_31.7-1_all.deb Size: 77468 SHA256: a4c76f7fa00ccb1736f86eec6c4eba03bb0903eb6a055a31b386c7f73783c939 SHA1: b3fc04b18249a78ce4d54500dc9c36821529e01d MD5sum: daa54b3954a53cbf550a2da49cfa8766 Description: Recommended Kicksecure Host CLI Packages A metapackage, which installs packages, which are recommended for Kicksecure CLI Host. . Not useful to have inside Qubes. . Safe to remove, if you know what you are doing. Package: kicksecure-cli-vm Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-dependencies-system, kicksecure-network-conf, non-qubes-enhancements-cli, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-vm_31.7-1_all.deb Size: 77508 SHA256: 0704af5ed93eb15ea567238203ce9c3ff7f6cb346a2f94da96acaff4fdf8a124 SHA1: 146bc99b73cb682b8ee6b8ecbefa023758ad63f4 MD5sum: ef6f7444665c4d1f3f4b87912202fc59 Description: Kicksecure command line interface CLI VMs A metapackage, which installs packages, for Kicksecure CLI Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: kicksecure-default-applications-cli Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, magic-wormhole, makepasswd, pwgen Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-default-applications-cli_31.7-1_all.deb Size: 77524 SHA256: 34cbf6e049f4d97d198842dbb5827a8844866cbabdff680042b0ffd0d7fbaae7 SHA1: 94329894bc9162fe6c98482f81b9a5e7f4223b85 MD5sum: 306f13c1d7e7d8d72a4f91523ad06703 Description: Default applications packages for Kicksecure A metapackage, which includes default packages to ensure, Kicksecure useful recommended tools are installed. . Safe to remove, if you know what you are doing. Package: kicksecure-dependencies-cli Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, desktop-config-dist, dialog, dist-base-files, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc, setup-dist, sudo, timesanitycheck, usrmerge Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-cli_31.7-1_all.deb Size: 77592 SHA256: 229754a5442273e6ec52a840c13fd26bb395775975ee95eabef2deb1d3e106a9 SHA1: d74347cf75b4f83214c3d872d19f11c7e3f3a3e5 MD5sum: d88c6fcf7f5729271b65b9631a702f1f Description: Dependencies for hardened systems CLI A metapackage, which installs command line interface (CLI) packages which should be installed on hardened systems. . Do not remove. Package: kicksecure-dependencies-system Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: dracut | linux-initramfs-tool | initramfs-tools Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-system_31.7-1_all.deb Size: 77468 SHA256: d0b366d43c54f2216de59b773b599b6a1d7f12d522cb374d1ccc10f657ec254b SHA1: d8f37b4805f1795b4b7acc9298f2d1540e24d56c MD5sum: ddeb80280c2e2fb04f7caab80bf28065 Description: System for hardened systems A metapackage, which installs system packages which should be installed on hardened systems. . Currently only depends on boot process related dependencies. . Do not remove. Package: kicksecure-desktop-applications-recommended Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: catfish, electrum | dummy-dependency-electrum, firefox-esr | dummy-dependency, flatpak, gpa, keepassxc, kicksecure-welcome-page, msgcollector-gui, repository-dist-wizard, ristretto, sdwdate-gui, setup-wizard-dist, tumbler, vlc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-recommended_31.7-1_all.deb Size: 77564 SHA256: ae0b6fc22df0b85df65d7e5c0a7205b89eda02354e819b3384330711119429e8 SHA1: a1927dab57e8e554b237ce311fb6dfb14eed06ef MD5sum: 416c2866dd64a1c0733210bb1147e5c1 Description: Kicksecure Recommended Desktop Applications A metapackage, which installs recommended packages, for graphical user interface (GUI) Kicksecure. . Do not remove. Package: kicksecure-desktop-applications-xfce Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: gvfs, libexo-2-0, lxqt-sudo, mousepad, pkexec, policykit-1-gnome, polkitd, sysmaint-panel, thunar, thunar-archive-plugin, thunar-volman, xarchiver, xfce4-terminal Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-xfce_31.7-1_all.deb Size: 77560 SHA256: 3ea6219035434c6fa9a4650c4dc63d86f4a92021f2471a9b3d70c74c44eb13ea SHA1: bec8b39455bcd03af2916c59322bdce609fb23d6 MD5sum: 6dc2aa37529c61d9de4e0fa13c46f457 Description: Recommended applications for hardened Xfce desktop GUI A metapackage, which installs minimal, yet complete enough to contain the very basics, Xfce applications. . Safe to remove. Package: kicksecure-desktop-environment-essential-gui Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: desktop-config-dist, desktop-config-dist-dependencies, gtk2-engines-pixbuf, libgl1-mesa-dri, mesa-vulkan-drivers, upower, x11-xserver-utils, xdg-desktop-portal, xserver-xorg, xserver-xorg-video-fbdev, xserver-xorg-video-vesa, xserver-xorg-video-vmware | dummy-dependency-xorg-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-gui_31.7-1_all.deb Size: 77580 SHA256: 62f14fb0f607c19b23966ac3a1a704d150d10fc847a94bbe97bee97b32739ee3 SHA1: 9aee2e5351f5d60475f43679ef1b9298c23ba5ec MD5sum: bde0cffd15cbeb89ef2e3dc3400aa850 Description: Desktop Depends GUI A metapackage, which installs dependencies for desktop environments, such as KDE, GNOME, etc. . kicksecure-desktop-environment-essential-xfce depends on this package. Package: kicksecure-desktop-environment-essential-xfce Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: accountsservice, gnome-brave-icon-theme, gnome-keyring, kicksecure-desktop-environment-essential-gui, lightdm, xdg-desktop-portal-gtk, xfce4, xfce4-notifyd Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-xfce_31.7-1_all.deb Size: 77532 SHA256: 8f602d5cc75c9f4365e92bea60e66a766df34c13a186cc5062229b13fbf55d9e SHA1: dedf85855e517764ce5fc85bc6165b60c8082171 MD5sum: fcc5fab6dae4a2fb343f120c9ee65824 Description: Recommended applications for hardened Xfce Desktop Environment A metapackage, which installs minimal, yet complete enough to contain a very basic Xfce Desktop Environment. . Safe to remove. Package: kicksecure-network-conf Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.6-1_all.deb Size: 22420 SHA256: d2b1356b114e47a7d1f82868aa27b336b16d02d60359e3d5c755825b7ba4b2b7 SHA1: b792b3bc76bdf5810fdf2c9adce5927596d979c7 MD5sum: 2a955f094262088a25f500a02a3017ce Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 48 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.6-1_all.deb Size: 19044 SHA256: bdaa5ea51eca62ab1b0449984fbd7fb6068c69f15a8094095c48c8297de2827f SHA1: 96e7f813891683b590534c736001179ed6fd4e51 MD5sum: 844080d84adbf570baefa86721354766 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_31.7-1_all.deb Size: 77476 SHA256: 2fb6eeda2f05c8e938ac2e8e69f85c0431cdc3e6b0d6764f6ac2aa0564082bca SHA1: d758ff4a7a5a9990f1a2488224f2f845a8ac3edf MD5sum: e76290505a756a11c4d63d64331222a5 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. . Do not remove. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_31.7-1_all.deb Size: 77484 SHA256: 2f9616f85995cd013ff1046fea2af62b06d2a9e26fd0bf7bd4ac17a689275bc2 SHA1: 213b202d3bb792efbce63de03a20bd57893acf70 MD5sum: c5b5a265d3594b734c3ac167eec475a6 Description: Default packages for Kicksecure-Qubes CLI A metapackage, which installs packages, for Kicksecure on Qubes without recommended GUI applications. . Do not remove. Package: kicksecure-qubes-gui Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-desktop-applications-recommended, kicksecure-desktop-applications-xfce, kicksecure-qubes-cli, qubes-core-agent-thunar, qubes-gpg-split, qubes-gui-agent-xfce, qubes-img-converter, qubes-pdf-converter, qubesdb-vm, pipewire-qubes | pulseaudio-qubes, pipewire-pulse | pulseaudio-qubes, wireplumber | pipewire-media-session-pulseaudio | pulseaudio-qubes, rtkit | pulseaudio-qubes, dbus-user-session, xfce4-settings Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui_31.7-1_all.deb Size: 77572 SHA256: 6729b4dd3d7dce0352ef396ef6225d03e3bd9ebde768d652ecb27c76cd5d6da8 SHA1: 7b03b4c0a6a15cde9c051629a0d5b8e7e77c9181 MD5sum: 1b0273300b2a592832bf7ff81331b8b4 Description: Default packages for Kicksecure-Qubes GUI A metapackage, which installs packages, for Kicksecure on Qubes including recommended GUI applications. . Do not remove. Package: kicksecure-recommended-cli Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profiles-kicksecure | dummy-dependency-apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto2, libpam-tmpdir, lsof, man-db, mesa-utils, most, nano, net-tools, open-link-confirmation, openvpn, p7zip-full, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unar, unzip, usability-misc, usbutils, vim, xz-utils, zip Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-recommended-cli_31.7-1_all.deb Size: 77780 SHA256: d9b24c98bf40acd74cc64e91a1716e3ffc8fea3766085923680787590a933f02 SHA1: 4d9dc0a1210529b90213b4796b806f18f43f788f MD5sum: 2439a7f607b87940b3ae4dfa67782a37 Description: Recommended packages for Kicksecure A metapackage, which includes recommended packages to ensure, Kicksecure standard tools are available. . Safe to remove, if you know what you are doing. Package: kicksecure-shared-host-xfce Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: ddrescueview, discover, gddrescue, gnome-disk-utility, gnome-system-monitor, gparted, grub-live | grub-live-boot | boot-live, gsmartcontrol, hwinfo, icon-pack-dist, non-qubes-enhancements-gui, laptop-detect, lm-sensors, lshw, non-qubes-audio, nvme-cli, psensor, pv, sdwdate-gui, smart-notifier, smartmontools, xfce4-power-manager, xfce4-screenshooter, xfce4-xkb-plugin, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-shared-host-xfce_31.7-1_all.deb Size: 77684 SHA256: 35518328f972cbaa682fa2a184ef075dc539dab2d046cc15a3061a736b2973fd SHA1: c904a6ffa161131073390d5f3608fcacf09e24d7 MD5sum: 54b6c87674124d55d7f7a82d821a02a8 Description: Kicksecure Shared Host Xfce GUI A metapackage, which installs packages, which are recommended for Kicksecure Xfce Host as well as a Whonix-Host with a graphical user interface (GUI). . Safe to remove, if you know what you are doing. Package: kicksecure-welcome-page Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 989 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_6.9-1_all.deb Size: 902940 SHA256: 92c6eca8492d224933ea4e97521ae906ff709f433990e84b2e5a659229b2bf29 SHA1: 2f0686c914fcb618e142dcec66e7bdeef461ec55 MD5sum: a4d407f44edbc27284c4cacac3ff5dc2 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: kicksecure-xfce Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce_31.7-1_all.deb Size: 77416 SHA256: 00bb7758c5261cffddec9ba73024f16634895957172f9caaeb63c50983ae3478 SHA1: b6eaab676ad60fae8fa022e78eeb72e7ff02cc03 MD5sum: 6d35ef1bce2a900af1516f8dce9c8d8d Description: Kicksecure Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce. . Do not remove. Package: kicksecure-xfce-host Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli-host, kicksecure-desktop-applications-recommended, kicksecure-network-conf, kicksecure-network-conf-gui, kicksecure-shared-host-xfce, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-host_31.7-1_all.deb Size: 77448 SHA256: 6e2644aa4718c5e6f2bb0f41dea3ea1d81ec5447d9b7cb36199a4aef1fd9314f SHA1: 9c47f6dcb0d05dd0d2b58a2a2a21946194615669 MD5sum: 523d73227b23bfa25ea80598719b1923 Description: Kicksecure Host Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce Host. . Do not remove. Package: kicksecure-xfce-vm Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli-vm, kicksecure-desktop-applications-recommended, kicksecure-network-conf-gui, kicksecure-xfce, non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-vm_31.7-1_all.deb Size: 77520 SHA256: 6e08b46d2479cf3d50c39c64bff9477728e88f8c7158d8883bc95770256ac19a SHA1: 12b80b6cb28c975f64bd0fc09ddebf379af9652a MD5sum: 19d67741bd217c61e1ec0cc237f98f4e Description: Kicksecure Xfce GUI for VMs A metapackage, which installs packages, for Kicksecure Xfce in Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: legacy-dist Version: 3:15.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 127 Depends: helper-scripts, apt-forktracer, deborphan Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_15.8-1_all.deb Size: 49236 SHA256: c46e5cf53d59f22ae1d6bfb9249c530677a0f523a41d26094d5f51d05cc784ce SHA1: af6d9987c3e73172a0b95abad4aa82435b70ad5e MD5sum: 9b16b23d91ae44ee9a01e0cd2016c6db Description: Prepare older Build Versions of Whonix for Upgrade Applies fixes required for upgrading from for example Whonix 8.x to Whonix 9.x etc. . Upgrades from Whonix 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:10.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 143 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_10.9-1_all.deb Size: 54564 SHA256: 1960d470bf29f22df27a8bcc85927bc5624cbe61921d46d61e19b2083151e4b7 SHA1: be47f0144f09a95d7d04c6ffc6aec58e450b248d MD5sum: b90a093ddf602d03a7e12e909b5d242b Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 296 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_7.8-1_all.deb Size: 144276 SHA256: 742bfe0a03f571dd0904868532ebc009449e69df2df7e13b4ba68a180b944b8f SHA1: 4fa618a7fe848ceabf6ac9ba6a4539bf7f0687ca MD5sum: e0d19162dded90d5536ba37606f2995d Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: mediawiki-shell Version: 3:3.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: helper-scripts, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_3.6-1_all.deb Size: 41240 SHA256: d7b2fc24dd76dfb3bc57e4efaf2ec64044f204ff1c6709363d93153d730fd911 SHA1: 284eafc72cb3c93990fa286a1f6fe6717796de8e MD5sum: 61db034f66da49a3ea1408b16c7d862e Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:13.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 215 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_13.7-1_all.deb Size: 66200 SHA256: 135c09b01275a309237b41bab80c9ee28eccca029ee78fcac710d2718c03e02b SHA1: 4e8cd61a610045fdd61d4a9d63a90a0a7c0d843e MD5sum: dfe8b2a0efb211e5179349cf72b5defe Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:13.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: msgcollector, wmctrl, python3-pyqt5, qtwayland5, zenity, libnotify-bin | kde-baseapps-bin, mate-notification-daemon, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_13.7-1_all.deb Size: 45260 SHA256: 932baf652564da7d491c2ea37fa2298a19a7f3cc085e77f36aaec7c9b0fe6b58 SHA1: c8696cef2491cd7af40c339ae190966ab25ff248 MD5sum: abdbd30f2ab8263833c9675e4556f056 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: non-qubes-audio Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: libasound2, pavucontrol, pipewire-audio | pulseaudio, pipewire-pulse | pulseaudio, rtkit | pulseaudio, wireplumber | pipewire-media-session-pulseaudio | pulseaudio Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-audio_31.7-1_all.deb Size: 77556 SHA256: aedc69a226d268d2c577302dccc77c12ec18e45b90e56174bf7ca0b85e6ab042 SHA1: 652d3ca780183b33d3337ddffe207a522f390999 MD5sum: 547546d275d023823b8b91bbb2fd9a19 Description: Recommended packages for Audio Support in non-Qubes A metapackage, which includes recommended packages which are useful to provide audio support. . These are not useful in Qubes, since Qubes already has its own native audio implementation. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-cli Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: acpi-support, console-common, console-setup, cryptsetup, dmsetup, grub-live | grub-live-boot | boot-live, kbd, keyboard-configuration, libzulucrypt-plugins, swap-file-creator, tirdad, udev, zulucrypt-cli Replaces: non-qubes-vm-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-cli_31.7-1_all.deb Size: 77628 SHA256: 524c02b0d38978f7d6957690fad246f46fec42769ef9e9a5b9f139a4f5b66261 SHA1: 46994437452b599c8dd4465dc4dc1cdff8b20fed MD5sum: 46f2ab9b2065136a3c2ad2edcbc5a450 Description: Recommended packages for terminal based machines (CLI) A metapackage, which includes recommended packages which are useful within CLI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-gui Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: non-qubes-enhancements-cli, rads, zulucrypt-gui Replaces: non-qubes-vm-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-gui_31.7-1_all.deb Size: 77548 SHA256: d92fa680597917dff0c671f02f28fd94869f7374513318b9a2b2b7727ba0899c SHA1: 46f1048b7d58418a093e803e036dec386d81639a MD5sum: 9bc0246e4f7404c2d961eeb294f950fb Description: Recommended packages for graphical systems (GUI) A metapackage, which includes recommended packages which are useful within GUI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: open-link-confirmation Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater, tb-default-browser Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_6.6-1_all.deb Size: 31212 SHA256: c3c25d09daaefd2b6ccbfef3444c16ba2261c861cbe52b61476581cce1f3f52b SHA1: a2d31026d219fa9b9f605b6d99f033639cbf89c0 MD5sum: 41acd34a2047c31ee9d7efb310cbbd4a Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: orca-screen-reader-support Source: kicksecure-meta-packages Version: 3:31.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: gstreamer1.0-plugins-good, libatk-adaptor, libgail-common, non-qubes-audio, orca, python3-gst-1.0, sound-icons, speech-dispatcher-espeak-ng, xbrlapi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/orca-screen-reader-support_31.7-1_all.deb Size: 77532 SHA256: daf89857d6e1639ea58db029f2658664d25481e81f043618a85a51a2586f3306 SHA1: b53a6aa99ab3c9175bd8e057e68dfe7a0e108b42 MD5sum: a21b09ac3a66dac0dca3011dda1d7199 Description: dependencies for the orca screen reader A metapackage, which includes depencency packages for the orca screen reader. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: privleap Version: 3:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 200 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_3.0-1_all.deb Size: 49804 SHA256: 095af2baf9621e981e00676eddd4b509b1dc11b2fbaee37e2495ad383f1f23ec SHA1: ef410df7cd1d56e9d9cfd6451c53cbd86f439878 MD5sum: 2d8f17e1e695c7a7be753bde762fec2b Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_7.5-1_all.deb Size: 35136 SHA256: 96ee8efb52a916cf598711a3698fe1b0fdf36ba5fedb9098fddfdbebdbc53ec6 SHA1: d216241d9c29673c8b84e6e7210752d4239cca15 MD5sum: d77f32e2917820ab638f094995304bfe Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 101 Depends: helper-scripts, dracut, kexec-tools Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_3.0-1_all.deb Size: 24520 SHA256: f8b8b048f7ef354857282de64ebc144138a721693a5942d98d751ee80a8d39c5 SHA1: e741bcc1b2c3396ebe0f13a8c3a84d02f5aa819b MD5sum: 81e738e12675752a2574d6fd121212ad Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs. Package: repository-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 203 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_11.9-1_all.deb Size: 105776 SHA256: 24fe529088e8dc03c4c2dcbf677914d6ec62f266b2c501dfc00244247133122e SHA1: a561927d2a12552c3328334afdc4a4f49af3d941 MD5sum: c97d8d934851773526ca76719580e174 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.list`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 72 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_11.9-1_all.deb Size: 38588 SHA256: 298d8dafbb7a60f7f435b929ac16ff170aa5ad8cea72936d71e8f6b3a31b9de8 SHA1: baa207d537000c353b97d4dce416d25fc94e26d9 MD5sum: 746ffdb5416093a19e3e782fc10fdfc9 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.1-1_all.deb Size: 19368 SHA256: f82e5f117389874a7498a8be5fc9b305aa62246c2d85c1deebaf6c9b6dc1530f SHA1: 4b6dce9efc4fe8fc890240c7cef83c1c1cce8433 MD5sum: a91710e2f183be2520a56b769208bf8f Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_6.9-1_all.deb Size: 48672 SHA256: af4d1202ae6f0e8a1509d13bf117f648b3f40dc213aefe6ab1cf9c60027df230 SHA1: 5436d457ca176fcad738a39245245c7196ac0c32 MD5sum: 90dfd286aa5445290eec454346f9f9c8 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:24.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 343 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, python3:any Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_24.8-1_all.deb Size: 148676 SHA256: b7bc6943bc18395833d21c263c88cbd0fca442a38b504e2c4e7f15b8b09854cb SHA1: 2de06a9aa63e0c950d43860e5e628e6ea184e7e6 MD5sum: 24578e174566537fc0469b1ac88bd59f Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 246 Depends: sudo, privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_11.0-1_all.deb Size: 91948 SHA256: c21032cfd0ee87e2738f28b8490cbd640c57c7987b825a427cd79fad63c25ff8 SHA1: 8ace9a99bfd865494c0aebaa7f7dbd41452638c5 MD5sum: 4d2d46b20d954e3206140a38a34a10b1 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc Version: 3:44.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 600 Depends: adduser, apparmor-profile-dist, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Replaces: anon-gpg-tweaks, swappiness-lowest, tcp-timestamps-disable Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc_44.4-1_all.deb Size: 212512 SHA256: 0f15b6af4ce8581f23af8dd531c4f09cf0f630bad07e7c7a65655d8326643c98 SHA1: 8ed15342091e448cd0ace24abfc6facd459157dc MD5sum: 3ed3e1d064e23cbf22f6f7d324b5e68a Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.3-1_all.deb Size: 17728 SHA256: 25f78cf6e5bf314dadbac853573fa9e4c947ed7ceedd4ed621fa1ba662fa0a5d SHA1: 658ef9690ee68adfe433b68b8e925af6e37708c2 MD5sum: 0e1faa1d42e561bbed5e2ac3763a7392 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 136 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.1-1_all.deb Size: 46384 SHA256: f60aa072db01543617c66518df68b8453316f2f6083c983adea8d1f954c2ed50 SHA1: eadb490d3a2e7ddde34fa5f0f364ced1e9b04640 MD5sum: 4e4bba6d7c045f54cd02d3ee4d54f3e1 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:12.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 135 Depends: setup-dist, python3-yaml, python3-distutils, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_12.1-1_all.deb Size: 57848 SHA256: a78c80c90f37505e7eddc81a8853fdcf48a1296bc20e994b8fa12bdfa0a638cb SHA1: f9d14633db0c0db2dbb3598d17cdc5055a5d8afd MD5sum: 1687189cd625f77f2a5ba86144061fe1 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 85 Depends: helper-scripts, cryptsetup-bin, bc Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.1-1_all.deb Size: 32568 SHA256: db050aa8cd076742d8b906b2ecc40a51e64c081d812b940e2322b794544cc6f0 SHA1: 73c78939091e4ae57266025815494b54c1fcabfb MD5sum: 7dfc80e2274505f122b3cd72d601f687 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:1.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 100 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm, security-misc, usability-misc Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_1.4-1_all.deb Size: 22628 SHA256: 5ec632619fb1fcb04748a5483b4fa3072880830a3b567cecb3a2dc3fd4212fff SHA1: 838ca7948f4a87537c26063d34c41f0526d7deba MD5sum: d646372390fcf8def03fd85f33666673 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:35.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 489 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, privleap, systemd, adduser, security-misc, spectre-meltdown-checker, apparmor-profile-dist Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_35.6-1_all.deb Size: 157448 SHA256: 92abbeaa2c7c77847837de256a60640f6ac1ba7baa1b411865599e27bb4d93d9 SHA1: 76f4120c8c35de84fd07ee389036f47d17fa6286 MD5sum: 641f8359f335c9c333c57c1d815b33f0 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: tb-starter Recommends: tb-updater, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-default-browser Priority: optional Section: misc Filename: pool/main/t/tb-default-browser/tb-default-browser_5.2-1_all.deb Size: 24268 SHA256: a76be738df1ad4700920b243b2b2a12674338589c52b35ae0312b4bdc14e3a5b SHA1: 759592fbd2dfdb458c557f284020020e986fcc88 MD5sum: e22943b7dbed8d1e6fbc92615564fd5c Description: Configures system to use /usr/bin/torbrowser as default browser Sets /usr/bin/x-www-browser to /usr/bin/torbrowser. . Sets /usr/bin/gnome-www-browser to /usr/bin/torbrowser. . Sets BROWSER environment variable to /usr/bin/x-www-browser by using /etc/profile.d/ and /etc/X11/Xsession.d/ hooks. . Registers of MIME type handlers to 'torbrowser'. . Sets KDE's default browser to x-www-browser. This only takes effect for newly created user accounts. Not for existing user accounts. This is most useful to help Linux distribution maintainers setting divergent defaults. . See also: The Default Browser on Linux Debacle http://blog.codef00.com/2011/02/18/the-default-browser-on-linux-debacle/ . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-starter Version: 3:17.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Depends: msgcollector, privleap Recommends: tb-updater, tb-default-browser, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_17.4-1_all.deb Size: 66580 SHA256: 3f9de47a23f850241946b28e8ff7d34572643c5286c69a469fa54237bccb24ee SHA1: 671369ca438fc8b8e68465bb870a033b8dfde140 MD5sum: 3f922fc572a7eb87f3a5a6a94f320ae7 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:37.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 519 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: tb-default-browser, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_37.5-1_all.deb Size: 240088 SHA256: ba5d14179d19dbfcb12f126c1b2d9bf51262ca8e3b6365a104c229377df28e3b SHA1: a8e6db3eb6003cf4379dc09c805624671e17aeaa MD5sum: fe8a357b91205062ca4a545ad6f6c4f0 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter, tb-default-browser and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_6.9-1_all.deb Size: 26868 SHA256: 0dd3f0bb0169880ddc12c311dedb4b658e42ff488672919f0cf829713c912bd1 SHA1: 0f5edb4bfe16722bffccacc0bd191d3d31d546d1 MD5sum: 9928c84ea29c78551395d8145da37c73 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor Version: 0.4.8.15-1~d12.bookworm+1 Architecture: arm64 Maintainer: Peter Palfrader Installed-Size: 5699 Depends: libc6 (>= 2.34), libcap2 (>= 1:2.10), libevent-2.1-7 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libssl3 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.2), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.8.15-1~d12.bookworm+1_arm64.deb Size: 1961716 SHA256: 01b23db7eab7ac223b75ddbf9628304787e5877848d0b5cda609b17aecffb945 SHA1: 36803851e6cdba980f58afc9dbfc29c450796e8b MD5sum: b7809423ec54b234b17fc19f1ebc9e2d Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:7.2-1 Architecture: all Maintainer: troubadour Installed-Size: 179 Depends: anon-connection-wizard, helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.2-1_all.deb Size: 69012 SHA256: 452dfbfe20d2fb3294080545f737c99d79c4577f1a582c6574d099cc9c7b93a6 SHA1: 415a2e4ce95276e1663eb7516415e14098141690 MD5sum: 8b7c1624edd4505b5189ce78db156fa2 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: tor, netcat-openbsd, xxd Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_5.6-1_all.deb Size: 26776 SHA256: 7f21f6bff1bc4d44a2f4738cf330058fcc18f070dee6ccb42d20e4959d9369ae SHA1: 4eb0e2bb9cc08f97925fda28721d0e0627b48295 MD5sum: 0e713ea37137873f27e8e7c982c5df59 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.15-1~d12.bookworm+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 19739 Depends: tor (>= 0.4.8.15-1~d12.bookworm+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.15-1~d12.bookworm+1_all.deb Size: 2398228 SHA256: 71a62d880f26812d37c2ba1b94271524ed50b6764327028b1d8b7f06f7b55481 SHA1: 7ed4629b730850710027bb6fadce5a902adb65a0 MD5sum: cf9d46c26227a9431821b637c653c690 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:26.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 670 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:28.5-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_26.7-1_all.deb Size: 223576 SHA256: 14ba0375210a0e094514581ac8f9d90899533cc3d1256090c2d527111a6c797f SHA1: 52ccead715fd16f684f171689ba9b29838387b64 MD5sum: 0e6a3f41eb1b0092f5b29e47f885dd26 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds user "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets user "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . xfce4-terminal: . * Disables automatic scroll on output when manually scrolled up to make reading output such as "sudo journalctl -f" easier. Automatic scroll on output still happening in default when not manually scrolling up beforehand first. . * Enables unlimited scrollback by default to avoid output from being truncated. . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. Package: user-sysmaint-split Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 139 Pre-Depends: helper-scripts Depends: security-misc, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_4.3-1_all.deb Size: 33740 SHA256: 83cf7c4329d2b10985e753a547958c3845022cb5ae0c6da428b6339dc769c8eb SHA1: 066f5795e1bb0e40ee8c92810a8ab5c6447a3f8a MD5sum: a88af784e8f58a28744dd23176de6086 Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry "PERSISTENT mode SYSMAINT (For system maintenance tasks.)" . Makes Privilege Escalation Tools (such as sudo, su, pkexec) inaccessible to limited user accounts such as user "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:11.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 134 Depends: sudo, adduser, p7zip-full Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_11.2-1_all.deb Size: 41392 SHA256: 3e3a36e2e6b7fc7d159e1ff47dbba0a58e15a49d29effbceb38b1e5c3ddf7104 SHA1: e72a2fc98618735258ba5610da6854f6fd5f24bc MD5sum: 02eb220e24e0bddb41439624129bd16b Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Disables screen locker when running in VMs because that is not useful either. . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds user "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`