Package: anon-apt-sources-list Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.0-1_all.deb Size: 29832 SHA256: 13194843bb1dd021d6828ca69bc2dd19ea0b1af99bca765e7e733db5162528c9 SHA1: 9bde14d2151a63e9735a3b3f4b2b58e45cff3aeb MD5sum: 4b45504bc3b85fe36618164dd2c1b7cc Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.list for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.list for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.1-1 Architecture: all Maintainer: iry Installed-Size: 268 Depends: helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.1-1_all.deb Size: 94232 SHA256: 178afb4450f22b9c5fbc387bcbf49d1ead45e1fc225e619dc23099c2350a05a7 SHA1: 211dd8763a976a8da80b1e918de02e2cd7cf6cca MD5sum: c73305fcee3eb70f0d417263dabd3b15 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.6-1_all.deb Size: 64264 SHA256: e518c9a544fa2709cb7afca7c992fee2620bc83701067d1daf8ea73ed01f834e SHA1: 3c751e9eef4d32e6831184cdc9bc0ffa894e3849 MD5sum: 426adac983d9f5766354ea7bf0cc824f Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 95 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.6-1_all.deb Size: 35748 SHA256: ec88bbbc6d736a22f32ed10b67c5a43748f72cc313281c5c5eadc3d0f61b9a1e SHA1: efbdc9f0523f081f60c1d00fa1aeeb309d7994ba MD5sum: eeee767edd07c1aa2b6659b301624ac3 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.3-1_all.deb Size: 23728 SHA256: f21b32af2fe5e97e1deb2ec3d5b99643d09a29dd0f417462ce04a9b62d84be75 SHA1: 9fc848712e947b2a75d68a054f885f431f720587 MD5sum: ef3323d6884a5f4a13aebd5ad59b76ee Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_5.8-1_all.deb Size: 26540 SHA256: 9c4a89aed339b626661798ce0b1bacb1c8cfe28d0e7698dc22f239ec22689ec7 SHA1: c910dfe161d3b8a952202faf19a5e7f39326f0bf MD5sum: e9c56317599ccb1358a84617233042bb Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.4-1_all.deb Size: 34436 SHA256: 4becf5a59c42ff08923fe0f0f5b2f4e7ab7596c41b78de2888cb37ff2082d99a SHA1: cadbebdfd93b6cbcb1e484f411a2f213908452ce MD5sum: eaa01cbc2a257e9198dc4bc03a8b0e9d Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_31.9-1_all.deb Size: 77840 SHA256: 3dca2091ee0104b9a64513d1b4e48723ae502c79bd550cc35177497153ab3d27 SHA1: ae0bc0f162da1639cafb32935124ed28a8c18289 MD5sum: 71b00b35364d4fd770388dea698178c7 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. . Safe to remove, if you know what you are doing. Package: binaries-freedom Version: 0:3.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.1-1_all.deb Size: 10868 SHA256: 05c0764da4a18b836b30ad1b37466abb36aa6af688a04232239fb3a4e9abff56 SHA1: cc2f8bca65cbb0c4916b530c24c2f93c2835ca0e MD5sum: 28025d7471a44c74a5f505858dd57847 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:3.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 27 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_3.7-1_all.deb Size: 13132 SHA256: d9b939535f52cf774e4e00185ddd9183e778f5ec1767c02230d318a3f1314a61 SHA1: 1fee887eb725b6eb3096f88ccc50d8fa1e79e428 MD5sum: c40283fe4e2ed5107f1d6a7cef8cd22e Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:6.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 86 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_6.8-1_all.deb Size: 30176 SHA256: ce10389095fde52f2a7debb298ae2ec226eadfd00e26454d399820134b0355f7 SHA1: bfe5192f510ccef6ac770c56c3a983d1f0cd445f MD5sum: f5229514b5f3da5ac872449fac1e35ef Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:0.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_0.3-1_all.deb Size: 13208 SHA256: deb7bc840c17f118e70f85f621ce13ea9e83a65ebf856e9a97442068f4d15912 SHA1: 534551945bc77a713362d01a876f02b4e1c5b837 MD5sum: 4055fe19d9a5f450a89ea6ad4ed8d9e6 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.4-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 316 Depends: calamares, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.4-1_all.deb Size: 227240 SHA256: a0a1e8820f4053a84795326942a357376bd0093c21cba2298fd19c7333031987 SHA1: 86feeaf06a906b82490f7383665d68831d981035 MD5sum: 56d359f9bb7f4dfa30ab6fbe7ef6d241 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.3-1_all.deb Size: 13292 SHA256: 6ce82af10a7b236361e2e6dfe014ff9bfa4e2dabd34281e377b78b2bfa039221 SHA1: fff22537a21eada2e706375f5276a0d1c888f084 MD5sum: 4f13c1c264668a54e72391520904e70b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2024.05.22 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2024.05.22_all.deb Size: 4372 SHA256: 22eb433ce2e23eb79914b80825b84c30f6aa785a824a971a9a7aff93bc0a5057 SHA1: 2d8e1f35f05c2b62051c83bb6fe0bebce0029335 MD5sum: 058f3b902a815b762f79e7b035705d00 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_4.6-1_all.deb Size: 25928 SHA256: dcb958b2f134b2aca19b1dd9e14b023296ed2b8f72b41840f4034cf8078b8890 SHA1: bdf08187a621e6b3587f76b50a6194b4cee436fb MD5sum: 577e2c0a8690adb8ea1120b0d15c0efb Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file, that removes `quiet`, `loglevel=0`, `debugfs=off`, and `efi_pstore.pstore_disable=1` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable and adds `debug=vc` to the kernel boot parameter to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:11.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 151 Conflicts: whonix-xfce-desktop-config Replaces: whonix-xfce-desktop-config Provides: whonix-xfce-desktop-config Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_11.6-1_all.deb Size: 48584 SHA256: fbf3bbd877a251d6ae8693a57f9fea6364ea98d00256444b6aa13f8d552a240d SHA1: aa638d958aaff2d46372e99a454e79c380dd67a4 MD5sum: 5298aaf707528bb00b7389982f4e9373 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for user 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:11.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 64 Depends: xfce4-whiskermenu-plugin, xfce4-genmon-plugin, arc-theme, gnome-themes-extra, gnome-themes-extra-data, gtk2-engines-murrine, gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_11.6-1_all.deb Size: 35300 SHA256: 4a71c1d4c64e68e2c5f7b74c2b0f66d0a7b4dd51faae3dc1bce28ce6cddb0020 SHA1: d8e2104625ebcf715eeb3a47cd0306787f67dd25 MD5sum: 92428ee63e1ce1a3bd7bf38151004326 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:42.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 350 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_42.0-1_all.deb Size: 132124 SHA256: e92fe52d5b15e8c4139b5c1b398651593e54b8fbf91e4ce1e21de60c2f7a103c SHA1: 72c854ec8996c05e02350d752d34c8a5a8b54751 MD5sum: cd82e25c3e9d6d51a8f8109ee7a48af1 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-base-files Version: 3:13.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 626 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, zsh-syntax-highlighting, zsh-autosuggestions Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_13.8-1_all.deb Size: 183836 SHA256: 84783ba29e50006d818ca91425395aba8c01798134ad75a4b3fd213f5ca65a91 SHA1: 235f4fad26fc27d6a5a0a1dab7d3fc430c44a143 MD5sum: 46907af79b87ed4cddeb4fb7d022cd9e Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dummy-dependency Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: firefox-esr, qubes-core-agent-passwordless-root, tb-default-browser, tb-starter, tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency_31.9-1_all.deb Size: 77876 SHA256: dae0e5aab8b1aac5d620462d82503fa80d1125f04c87cce2f3b9e41b7ea04a66 SHA1: 60b9d714b808291ac62a6d879e3dd347ba689dbb MD5sum: 7316cc1090a934ccfdd4e44795b8d816 Description: dummy package to satisfy architecture specific dependencies A metapackage, which satisfies the dependency on: . - tb-updater - tb-starter - tb-default-browser - qubes-core-agent-passwordless-root - firefox-esr . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_31.9-1_all.deb Size: 77804 SHA256: 75c051c2c5319812a88cd0cc6238fb32e6d930cd875f98badb840a76b6c9dd67 SHA1: e2f7dcb1c7c355f815c27b8bd3b8b935550255a6 MD5sum: 63953a644b072341fd28af48ad448fd7 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_31.9-1_all.deb Size: 77792 SHA256: 87d8376b45308dc72559e9ff9d6f2b2515cf60990911639ec4e7612e3f2505a9 SHA1: 1e25250f2084e8f64242e331d351dd4a42efd4b4 MD5sum: 967e33d6dac904c5d35f5d4b9dcdf604 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_31.9-1_all.deb Size: 77812 SHA256: 944b580aada3391ec3d44bf274c7b8c6efb2e2c5d5b5b3be000d9f27b829674b SHA1: b36dc76853014343783b9baac2ffd28980586208 MD5sum: d2936577e4d3f88baf4c415f6fd8043e Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_31.9-1_all.deb Size: 77808 SHA256: e266c804f658a4de41be2d9b26638a7cc72f3ba7dea835fd7c935b10c1a5df09 SHA1: f209cfc042a7395133f3bd74e4b3003921d1dab8 MD5sum: aaafd0946a6c6bda33953bcc203da87d Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_31.9-1_all.deb Size: 77800 SHA256: 18d6bf1153851e0b7198147834a93761a296243e1f5cb2f46d75c9d7808d87f2 SHA1: 5a8bdaaa1b6595873bbbe51151776bc139b39890 MD5sum: bb3cf5da31b3f652bff39dda5dce3a73 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_31.9-1_all.deb Size: 77796 SHA256: 955947e81bba0d14b050736f60bf7eeaf0fb1c5b15fdcea8335386c73b82067c SHA1: e888cb8991b4e245e764cd57cc34e263e01231b7 MD5sum: adb47c7cf7b7244239ebd6cff4843c7f Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_31.9-1_all.deb Size: 77796 SHA256: 4b32a3c855d50d2fce73129001502ab36d223de79c6f055cf9fdfde8e9c41ef9 SHA1: a28121f447230bff5aff27abe37e50aeab302a01 MD5sum: 39fa4f01034e2ce1abcc506e66a581c8 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: genmkfile Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 159 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_16.0-1_all.deb Size: 58252 SHA256: ec50800feace501e56809f8f6d9be7128ac2e84d046fee4041386d7bb91d0c93 SHA1: 35d18ba20e9cd0dd3616d63476926e827b6f2981 MD5sum: 02d7deeb9612b5d29659eac73520b203 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_4.7-1_all.deb Size: 490388 SHA256: acad23267e1eb943b0b341a86fa5001f5ff0ecb699ecae8f3a522ba0aaea674b SHA1: e8fa920ae941cf10af2dff066306436b7da77034 MD5sum: 969da73e160e4aa46078188c07027e4d Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:9.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: grub-live-initramfs-tools | grub-live-dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_9.1-1_all.deb Size: 29728 SHA256: acc132c53145828aef8b57619707010627aace70b452eca63168167533b28cdb SHA1: 99dd23405dd238054fd9192baea75990ebc012ed MD5sum: a439ac6198249cecb6fc5cd70bc7c00e Description: grub live boot menu entry Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:9.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 59 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_9.1-1_all.deb Size: 27472 SHA256: 76acc5cfc8ff434cce9fb22d0ded827520f9abd62f6aa1f557909d5925303578 SHA1: 524abc770fffb3ea01320e7abca41ffdf9f72f0a MD5sum: 510506f5460b9209ce6a23d80a7f0cc3 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: grub-live-initramfs-tools Source: grub-live Version: 3:9.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 58 Depends: grub-live, live-boot, live-tools Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-initramfs-tools_9.1-1_all.deb Size: 27408 SHA256: 94d5c8dc219bb0693661fff7fe1deb7588ec58368e501b41e528d206f96c0b8f SHA1: f48c3c61f009bf3d3b167fdd7fd462aec5ed0eef MD5sum: c747469a6f320f3c8c97d995df216a27 Description: grub live initramfs-tools dependencies initramfs-tools version metapackage for grub-live . See also grub-live package. Package: hardened-kernel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_4.9-1_all.deb Size: 157816 SHA256: 02c694686512a5f265ec96299a47fa0558f5d817f4a2455dd9a0675b0b63ed36 SHA1: fa06cb8fe47c108d328cb3bde61c2d9eb65400a1 MD5sum: 2b6a8ea70923c396f7f087144ce19037 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:32.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 551 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Breaks: usability-misc (<< 3:26.3-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:26.3-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_32.9-1_all.deb Size: 170616 SHA256: d293b58c055390cf1f36876d744e03ece91922e5c743bbc58fba39a40b82b310 SHA1: e7a734b3b575f0db56097c0eaf5a8a568a8c5831 MD5sum: 98e13df2f386933780bca037e2eb78df Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. Package: helper-scripts-tests Source: helper-scripts Version: 3:32.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_32.9-1_all.deb Size: 85664 SHA256: b09885314e695f4bfabed6eafe94e87cfe73ad590434df4598f73b2958bd539a SHA1: db16e3504c505e74bb9206da5f39d1e01aaedc88 MD5sum: 11b48d7e3f107c927ff80f85cd073fa3 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2522 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_4.7-1_all.deb Size: 1438316 SHA256: 5c0c4f8cc30fd7029a003b16ec536046482551f83e42993f79aef194a4e07162 SHA1: b312302f5d2726a935369fe3dda399240b075f8a MD5sum: 0a1c0d5a655c4425e240301425042eed Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_7.9-1_all.deb Size: 33432 SHA256: 7ce39a05f9dfa1de775edfe551946a7df417f9adc66a243a579bb51fb2c1eb5c SHA1: 7dd00375f5f9d6c2db53b2573b88631ca7b302fc MD5sum: 62bf9e8deaaef1123e74839f880b9662 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-base-files Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 442 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_8.4-1_all.deb Size: 310536 SHA256: 3b464f1413ba293b99052ad94edd53f2defa0c472c65a775167bd19a137a3e60 SHA1: de0bf071138f84ff419f53e75e3ba4bb5fdbf6ed MD5sum: af790079157b5089e532aed26563b671 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /etc/skel/.bashrc, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-cli Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: anon-apt-sources-list, dosfstools, kicksecure-base-files, kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-recommended-cli, lvm2, ntfs-3g, obfs4proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli_31.9-1_all.deb Size: 77792 SHA256: e23701090555eb402763c6b370ea42088f6aada34ae20a21aab34f17e8f0ce49 SHA1: ca9002e25e456c29913a3657ff958d03a533d84a MD5sum: 811d5643eb1f06ca89a80057904c3361 Description: Kicksecure command line interface CLI A metapackage, which installs packages, for Kicksecure CLI. . Do not remove. Package: kicksecure-cli-host Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-cli-host-packages-recommended, kicksecure-dependencies-system, non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host_31.9-1_all.deb Size: 77752 SHA256: 7010a90f0a167bb202e51d252cebb2b242502d8dcaa0a9dd19154bdf3e3ae99b SHA1: b4f2cb1cba48dcb23475c7648c6bb75ef7b014fa MD5sum: aaa859fcad751ebfab53ff8eaff047e2 Description: Kicksecure Host command line interface CLI A metapackage, which installs packages, for Kicksecure CLI Host. . Do not remove. Package: kicksecure-cli-host-packages-recommended Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host-packages-recommended_31.9-1_all.deb Size: 77768 SHA256: 148dfe528fff8d7ba86021fa2d9b7cbf78076397886d761d6acdfce3f40c60b5 SHA1: e55e271f954b5e80fd87602dfad10425d821971e MD5sum: 62f509b9cef9c1f7a838a44e0964126c Description: Recommended Kicksecure Host CLI Packages A metapackage, which installs packages, which are recommended for Kicksecure CLI Host. . Not useful to have inside Qubes. . Safe to remove, if you know what you are doing. Package: kicksecure-cli-vm Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-dependencies-system, kicksecure-network-conf, non-qubes-enhancements-cli, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-vm_31.9-1_all.deb Size: 77820 SHA256: 5a6383e00e966447b18707f616770fe15df33e948836d56038dc63bd3e6434d2 SHA1: 881b6a60a846d3daf8775ae13cd461ae430142f1 MD5sum: e223664223bdfacfd3e2325aa245350e Description: Kicksecure command line interface CLI VMs A metapackage, which installs packages, for Kicksecure CLI Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: kicksecure-default-applications-cli Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, magic-wormhole, makepasswd, pwgen Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-default-applications-cli_31.9-1_all.deb Size: 77824 SHA256: 810091a91ccfa4e8395dd9a38523fa4c13d27b6bbd61ff72f8993813d204c7f0 SHA1: 3849c733006e786caf8113e413a944b797410d41 MD5sum: 47b151d815b602c4664d9441cce9302d Description: Default applications packages for Kicksecure A metapackage, which includes default packages to ensure, Kicksecure useful recommended tools are installed. . Safe to remove, if you know what you are doing. Package: kicksecure-dependencies-cli Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, desktop-config-dist, dialog, dist-base-files, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc, setup-dist, sudo, timesanitycheck, usrmerge Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-cli_31.9-1_all.deb Size: 77892 SHA256: 7fd9d46c1db54c4f30dedfa27561098076b24ffea58b7ed7b493579c5fba627d SHA1: 7a7926fc45273166345c38693864d8cab4bf7407 MD5sum: c8a89fdd3ef82f5dc90c7237364fca82 Description: Dependencies for hardened systems CLI A metapackage, which installs command line interface (CLI) packages which should be installed on hardened systems. . Do not remove. Package: kicksecure-dependencies-system Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: dracut | linux-initramfs-tool | initramfs-tools Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-system_31.9-1_all.deb Size: 77784 SHA256: d8ae580405f091b44f82f66ec47e83896a91faebdc42937995b35b0fa9461232 SHA1: 77110c297d67a08a0122822f6117253f87a00c5e MD5sum: 5f4305939d6cd20638109bb0d14ba646 Description: System for hardened systems A metapackage, which installs system packages which should be installed on hardened systems. . Currently only depends on boot process related dependencies. . Do not remove. Package: kicksecure-desktop-applications-recommended Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: catfish, electrum | dummy-dependency-electrum, firefox-esr | dummy-dependency, flatpak, gpa, keepassxc, kicksecure-welcome-page, msgcollector-gui, repository-dist-wizard, ristretto, sdwdate-gui, setup-wizard-dist, tumbler, vlc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-recommended_31.9-1_all.deb Size: 77868 SHA256: d2f99869f949ef1d2e7f6c31002afd476e813c9b77d7428dd75a7fc2cb9b558f SHA1: 2fc6653a691ef6b61b537525c185438bc3fe0e61 MD5sum: 749e211a5f73adea8225303e1297bdbd Description: Kicksecure Recommended Desktop Applications A metapackage, which installs recommended packages, for graphical user interface (GUI) Kicksecure. . Do not remove. Package: kicksecure-desktop-applications-xfce Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: gvfs, libexo-2-0, lxqt-sudo, mousepad, pkexec, policykit-1-gnome, polkitd, sysmaint-panel, thunar, thunar-archive-plugin, thunar-volman, xarchiver, xfce4-terminal Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-xfce_31.9-1_all.deb Size: 77860 SHA256: aa347e1a68f3b1cfc9d32401b494eb72d0619bbaf480507b70ffffe0f360f33a SHA1: c3b1d6248818b8f4a5a5a8e477b930b436bc7cae MD5sum: 0b97eddff68694b8633139b44bc84839 Description: Recommended applications for hardened Xfce desktop GUI A metapackage, which installs minimal, yet complete enough to contain the very basics, Xfce applications. . Safe to remove. Package: kicksecure-desktop-environment-essential-gui Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: desktop-config-dist, desktop-config-dist-dependencies, gtk2-engines-pixbuf, libgl1-mesa-dri, mesa-vulkan-drivers, upower, x11-xserver-utils, xdg-desktop-portal, xserver-xorg, xserver-xorg-video-fbdev, xserver-xorg-video-vesa, xserver-xorg-video-vmware | dummy-dependency-xorg-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-gui_31.9-1_all.deb Size: 77880 SHA256: c58c0f2c7f98f4c1c245b0b57324dc9c60a27c68127fb0bb5f03d5ad5ac5ac2e SHA1: 06023bbe5cb3ca7cc951cfe4b37fb9a59f27b3da MD5sum: 5e07c05400ff77c406d2e8dcf9109d6a Description: Desktop Depends GUI A metapackage, which installs dependencies for desktop environments, such as KDE, GNOME, etc. . kicksecure-desktop-environment-essential-xfce depends on this package. Package: kicksecure-desktop-environment-essential-xfce Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: accountsservice, gnome-brave-icon-theme, gnome-keyring, kicksecure-desktop-environment-essential-gui, lightdm, xdg-desktop-portal-gtk, xfce4 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-xfce_31.9-1_all.deb Size: 77840 SHA256: feb2bfb08d3a030593c7cecb679362e880cc437686b4b06f6427950165288450 SHA1: 3aa3db3c06b44fad1b9bfee5573e466d140362ef MD5sum: da7d0a925af4d0cc73a6fd1bd2039786 Description: Recommended applications for hardened Xfce Desktop Environment A metapackage, which installs minimal, yet complete enough to contain a very basic Xfce Desktop Environment. . Safe to remove. Package: kicksecure-network-conf Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.7-1_all.deb Size: 22680 SHA256: b69e871d4fbaeb04ad2957081b85af78dd4a17440b00db189d3158b38c5a40c3 SHA1: 0806be5a39ebcae7ed7fb3276ba321a44e599e40 MD5sum: 1ed81be23350d0a4810aaccdf90223e0 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 48 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.7-1_all.deb Size: 19300 SHA256: 20d26736f72d17d33f335a9f6cc6bfbc26402221608f3e9f364d0929e7fdd818 SHA1: 7c730b1711deb0b8109704aaa7ac1b60c68b9be9 MD5sum: 87abea7f67bb78ccc33c02d1902c4b8d Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_31.9-1_all.deb Size: 77780 SHA256: 259244cac67d4450341f68c64441d113cb5d210cbcee45c8765afe1c351604e3 SHA1: f07d3b233139ec9dd13a2111730169ad7c3a0dde MD5sum: 8e8ef77905409cac68984d28c70012ca Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. . Do not remove. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_31.9-1_all.deb Size: 77796 SHA256: 9c17345aa995e6bde1b9f7cc91425f7dd9417807e35982161042b42ac901178f SHA1: 39756852a0e9d70a13c2288fd5ded8aed67c34a9 MD5sum: b1def6c3a09344c9cf98b7658e0280b9 Description: Default packages for Kicksecure-Qubes CLI A metapackage, which installs packages, for Kicksecure on Qubes without recommended GUI applications. . Do not remove. Package: kicksecure-qubes-gui Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-desktop-applications-recommended, kicksecure-desktop-applications-xfce, kicksecure-qubes-cli, qubes-core-agent-thunar, qubes-gpg-split, qubes-gui-agent-xfce, qubes-img-converter, qubes-pdf-converter, qubesdb-vm, pipewire-qubes | pulseaudio-qubes, pipewire-pulse | pulseaudio-qubes, wireplumber | pipewire-media-session-pulseaudio | pulseaudio-qubes, rtkit | pulseaudio-qubes, dbus-user-session, xfce4-settings Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui_31.9-1_all.deb Size: 77884 SHA256: b324c0f9fcfa25d60bae05168c3f9ee47feb6bba7c0b1024d6208f63b997026a SHA1: c62edb3856905f0779de0962edf6586356acf197 MD5sum: 6e2b64d71c02e9d35089835ea3af9c7c Description: Default packages for Kicksecure-Qubes GUI A metapackage, which installs packages, for Kicksecure on Qubes including recommended GUI applications. . Do not remove. Package: kicksecure-recommended-cli Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profiles-kicksecure | dummy-dependency-apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto2, libpam-tmpdir, lsof, man-db, mesa-utils, most, nano, net-tools, open-link-confirmation, openvpn, p7zip-full, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unar, unzip, usability-misc, usbutils, vim, xz-utils, zip Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-recommended-cli_31.9-1_all.deb Size: 78100 SHA256: d2b70b3ef6b3a8322b6ea8b6ed9c2a4b5406eee4f348975cf7cc5e4bc2e9ea01 SHA1: 651bf3ae07b1821b48b4180257b1c212681a312f MD5sum: 758c798bf61ce3320a85c7ca0dfa974b Description: Recommended packages for Kicksecure A metapackage, which includes recommended packages to ensure, Kicksecure standard tools are available. . Safe to remove, if you know what you are doing. Package: kicksecure-shared-host-xfce Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: ddrescueview, discover, gddrescue, gnome-disk-utility, gnome-system-monitor, gparted, grub-live | grub-live-boot | boot-live, gsmartcontrol, hwinfo, icon-pack-dist, non-qubes-enhancements-gui, laptop-detect, lm-sensors, lshw, non-qubes-audio, nvme-cli, psensor, pv, sdwdate-gui, smart-notifier, smartmontools, xfce4-power-manager, xfce4-screenshooter, xfce4-xkb-plugin, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-shared-host-xfce_31.9-1_all.deb Size: 78000 SHA256: 614ce91619be1960396a28360661a1a6112e1b512fd495ff880c52672da9ad37 SHA1: d317313f33ae118e9a17a5001058bc3982be8f05 MD5sum: f105b9d492fe66d486413dc2fe3d47a5 Description: Kicksecure Shared Host Xfce GUI A metapackage, which installs packages, which are recommended for Kicksecure Xfce Host as well as a Whonix-Host with a graphical user interface (GUI). . Safe to remove, if you know what you are doing. Package: kicksecure-welcome-page Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1012 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.2-1_all.deb Size: 921876 SHA256: 54a68a0da4c9e812c9ede0ea558fbfc786a2afc5e72096fd111ca33ac2f8ca95 SHA1: 2a82d5dda8f1f64563612578682721ae3ce5dab1 MD5sum: e356e05ea04bc633513f356e313845c9 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: kicksecure-xfce Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce_31.9-1_all.deb Size: 77732 SHA256: 4bf079bd4b4c1e5753f75639525bbf4fd0a44fd391e2ea9a17124aca5be377c3 SHA1: d805c1b1c2f4edd8015c1f0854282474a5e10531 MD5sum: 1146bd7e16dd05d47cf932e3682910aa Description: Kicksecure Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce. . Do not remove. Package: kicksecure-xfce-host Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli-host, kicksecure-desktop-applications-recommended, kicksecure-network-conf, kicksecure-network-conf-gui, kicksecure-shared-host-xfce, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-host_31.9-1_all.deb Size: 77764 SHA256: 1089f9456da432a0133adc41e72856126c4583aaaac324dac5e4e73e14d8d279 SHA1: efd3e67e90d00f5639988ec05bce2e695f123ba9 MD5sum: 23ec766e6eb947edb987432214bfc5cc Description: Kicksecure Host Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce Host. . Do not remove. Package: kicksecure-xfce-vm Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli-vm, kicksecure-desktop-applications-recommended, kicksecure-network-conf-gui, kicksecure-xfce, non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-vm_31.9-1_all.deb Size: 77832 SHA256: fb8e4e15b4e88e8f10426640842becd73276d631742a375975376d342e0dc28a SHA1: 8156b01ba535d28ea6a625d59850436da9c8ce5b MD5sum: deb515f32264186c0addbad6655082bd Description: Kicksecure Xfce GUI for VMs A metapackage, which installs packages, for Kicksecure Xfce in Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: legacy-dist Version: 3:15.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 128 Depends: helper-scripts, apt-forktracer Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_15.9-1_all.deb Size: 49864 SHA256: bc116b2c5f40aea37f33a4b73a60ac587c411bc4110414978d06214ad2fdf32a SHA1: 92281eb006534db1a689b1de3f90da2b30604a78 MD5sum: cde358e6549a8f8f417e674dd3fc48cc Description: Prepare older Build Versions of Whonix for Upgrade Applies fixes required for upgrading from for example Whonix 8.x to Whonix 9.x etc. . Upgrades from Whonix 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 143 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.0-1_all.deb Size: 54644 SHA256: 21ca366889aca2d9aa3e973d594e0376889535cbed7d8510f8ebea6719041cb6 SHA1: afc61ee1414a4516eb7809e3d153406a502b6afd MD5sum: a5153aaa54c252d413e0853aa867c555 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 296 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_8.2-1_all.deb Size: 145160 SHA256: 86cc6d7fcec3d324763c09d5c2defac83e80735ee11878464145388e87de178f SHA1: f5bcb9d0f5d1dd785e173f8c0f3128281301efa5 MD5sum: 39f3fdc949c2ac2cb4037c42563c0dd3 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: mediawiki-shell Version: 3:3.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 142 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_3.9-1_all.deb Size: 41800 SHA256: 4ebb157e48e32c82eac34832dafe126fdd070cc69d031e7878a0c2b70f4c30dd SHA1: 5c5b36dee098d61ae1edae9513195a4648159082 MD5sum: a987c9db14171368c9bba88d51d73d95 Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:13.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 215 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_13.8-1_all.deb Size: 66304 SHA256: f13e46906afb261bfa35f19a2b25cd387e1ea64923eb82311235fe37c4d4b45f SHA1: add679214b815eee692ebf2ad089e7e9c116dd27 MD5sum: 3e48e835b16ddd2b3fbe5c2ae6277f6f Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:13.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: msgcollector, wmctrl, python3-pyqt5, qtwayland5, zenity, libnotify-bin | kde-baseapps-bin, mate-notification-daemon, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_13.8-1_all.deb Size: 45356 SHA256: 9f96556ef0969997fc3d4762102e36a39ca9f7d67b071ea8fd8635540133d9ca SHA1: 21cc705d5589bb49554cabac8600eda09649a4c2 MD5sum: 0ce5c6e85fbeb5c3482dbf62e9777ad0 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: non-qubes-audio Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: libasound2, pavucontrol, pipewire-audio | pulseaudio, pipewire-pulse | pulseaudio, rtkit | pulseaudio, wireplumber | pipewire-media-session-pulseaudio | pulseaudio Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-audio_31.9-1_all.deb Size: 77872 SHA256: 429cd4d429a60591ae0ffa4360f8187a3eafd885ced051724cb08e7fca8f6c68 SHA1: af0a6995bb4659ed1720fe0b75530f5150d8f383 MD5sum: cb505a45c4cf832b1ae2126102c3e434 Description: Recommended packages for Audio Support in non-Qubes A metapackage, which includes recommended packages which are useful to provide audio support. . These are not useful in Qubes, since Qubes already has its own native audio implementation. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-cli Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: acpi-support, console-common, console-setup, cryptsetup, dmsetup, grub-live | grub-live-boot | boot-live, kbd, keyboard-configuration, libzulucrypt-plugins, swap-file-creator, tirdad, udev, zulucrypt-cli Replaces: non-qubes-vm-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-cli_31.9-1_all.deb Size: 77956 SHA256: f79f6dca0ced535e8e1ce0ec9b100aea05c9f0d7ca3fb0c7677e5e3bb45f42f1 SHA1: 0f3b07b3b50b81c4917ddb800b0f0480a39807d3 MD5sum: c18e0614562a2239c52ce8a98e6ad5ff Description: Recommended packages for terminal based machines (CLI) A metapackage, which includes recommended packages which are useful within CLI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-gui Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: non-qubes-enhancements-cli, rads, trayer, zulucrypt-gui Replaces: non-qubes-vm-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-gui_31.9-1_all.deb Size: 77856 SHA256: 68d8d39ca3fbc76057c5527251bf995d2b6f4817bab0cd6c4e438a063da04827 SHA1: fc95c40f9139b269105aaab66e46fb96aa6c132c MD5sum: 8c0731f13129b50da61db0d6ac569285 Description: Recommended packages for graphical systems (GUI) A metapackage, which includes recommended packages which are useful within GUI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: open-link-confirmation Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater, tb-default-browser Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_6.7-1_all.deb Size: 31420 SHA256: b44d012ffec61c4a894f9fd4e263cb57c690b1032f76b0f3533c581197850091 SHA1: d1f778964a5f41979d265bfa349cf37b1f42dcee MD5sum: 548328620a5e25197dcf0ad60f4684d5 Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: orca-screen-reader-support Source: kicksecure-meta-packages Version: 3:31.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: gstreamer1.0-plugins-good, libatk-adaptor, libgail-common, non-qubes-audio, orca, python3-gst-1.0, sound-icons, speech-dispatcher-espeak-ng, xbrlapi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/orca-screen-reader-support_31.9-1_all.deb Size: 77852 SHA256: 1d988efa48c19e26f2de56a5df6c865f918177ca6170d3fa8f81d8fcdd152db1 SHA1: 67661e5c11a870cc946c40648aad2a3ae0036a38 MD5sum: ec1aef1ead88a6386384896f5cd3fbfe Description: dependencies for the orca screen reader A metapackage, which includes depencency packages for the orca screen reader. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: privleap Version: 3:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 210 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_3.5-1_all.deb Size: 51528 SHA256: add974c75122b5d0b183207f171506efec688f40023d948b4fd5fd9d08af4a93 SHA1: 633379243c47f7896e21bd0758443f1b79cd3525 MD5sum: b30e19a99ad13efb1b3dbead6bf927ee Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_7.5-1_all.deb Size: 35136 SHA256: 96ee8efb52a916cf598711a3698fe1b0fdf36ba5fedb9098fddfdbebdbc53ec6 SHA1: d216241d9c29673c8b84e6e7210752d4239cca15 MD5sum: d77f32e2917820ab638f094995304bfe Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: helper-scripts, dracut, secure-delete, kexec-tools Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_3.5-1_all.deb Size: 25664 SHA256: ed0791c26cff4f97fb1bb90719bdb768d764669d6dd00865f063b8c0a768850f SHA1: 7296519846bc81b29c217137c3d40ff6718e8aa5 MD5sum: 93ec1b9f8fe602170026582b943c2bf4 Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs. Package: repository-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 211 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_12.3-1_all.deb Size: 108324 SHA256: 1129f92fda24e4fe564e17f13cd5af0377cc1ec4721345823b2e70ab147a38c9 SHA1: cf19694afb07456655589d2765a85801b53d6028 MD5sum: d61b696dc4629b4ede01fc88a7064605 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.list`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_12.3-1_all.deb Size: 39920 SHA256: 95ad20566a07ad0daa5557acc2c3f3628fa8cb0d87462dae5a87b5632e7a8a03 SHA1: f8bf0e8a10e7f0b94053b7a27132806f382a3102 MD5sum: aefeb66ec376a822510d87d7ef5a79f6 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.1-1_all.deb Size: 19368 SHA256: f82e5f117389874a7498a8be5fc9b305aa62246c2d85c1deebaf6c9b6dc1530f SHA1: 4b6dce9efc4fe8fc890240c7cef83c1c1cce8433 MD5sum: a91710e2f183be2520a56b769208bf8f Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_6.9-1_all.deb Size: 48672 SHA256: af4d1202ae6f0e8a1509d13bf117f648b3f40dc213aefe6ab1cf9c60027df230 SHA1: 5436d457ca176fcad738a39245245c7196ac0c32 MD5sum: 90dfd286aa5445290eec454346f9f9c8 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:25.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 343 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, python3:any Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_25.0-1_all.deb Size: 148944 SHA256: e7c442aa4f3ef776bbe0d6e6ed3d9152ff51a20793864ede86575cca1aa692a0 SHA1: 6e838017b216e4c6d8b8ca1310a395bcd05d1844 MD5sum: 21f39d5a4369bdca5133f14b2cd3a9bd Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 246 Depends: sudo, privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_11.3-1_all.deb Size: 92248 SHA256: a71a08a9fe27d07e66089f6abe8a77f76821e7c804aaf6f02a44c5a944d5db0d SHA1: 20c1e4a7815815702ce7cce495a2485919c9f4ed MD5sum: 2e4478082a30815cfed73bc3dbeded9a Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc Version: 3:45.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 604 Depends: adduser, apparmor-profile-dist, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Replaces: anon-gpg-tweaks, swappiness-lowest, tcp-timestamps-disable Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc_45.2-1_all.deb Size: 214520 SHA256: 49ae22b3f8a742acf13838a9f97aca1e4f9a96f52add97892f92114f6f732e57 SHA1: 0bcd789e878803fc2ada46c266aa0c71f4d7fc2c MD5sum: cfd5a74d828575c04bcc01a7abcf52d5 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.3-1_all.deb Size: 17728 SHA256: 25f78cf6e5bf314dadbac853573fa9e4c947ed7ceedd4ed621fa1ba662fa0a5d SHA1: 658ef9690ee68adfe433b68b8e925af6e37708c2 MD5sum: 0e1faa1d42e561bbed5e2ac3763a7392 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 136 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.2-1_all.deb Size: 46504 SHA256: 24866f95ad34a339519635fda743ab8991620901d85e69592bb4ec555dde8ade SHA1: 030bd3a7ad1173dc4d6aa2666b3f203ddb356e76 MD5sum: 3d3cb4dc7ef04c4666d9c08390f7539e Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:12.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 137 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_12.5-1_all.deb Size: 59124 SHA256: 1d2ea3b869517226f5a9b9668a4536e52ebc49fa68b101602fca750421c8831a SHA1: 5ec5c43cf6efef3c6afc1bdec1704ca6a2cbeda3 MD5sum: 2b00540aabeea4007a2b186658414c5e Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 85 Depends: helper-scripts, cryptsetup-bin, bc Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.2-1_all.deb Size: 32664 SHA256: dd5c32b70d78a78b653283ed041e12c32694498870911903fe98a9244c693949 SHA1: ee68de10645aafe1b948d765fa26b18b7d67f64d MD5sum: f719399e004da081f39e47c4096efe56 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:2.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm, security-misc, usability-misc Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_2.5-1_all.deb Size: 27108 SHA256: 4c028c87fb32710ec88eb2b78134f52a49d975ee00446d26dafb6f5be11445b5 SHA1: fa75a900e736f5845d6ce4586f7a3211d9ceb745 MD5sum: a1d2ea95ffdff25451ea9bcfe48e6457 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:39.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 522 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, privleap, systemd, adduser, security-misc, spectre-meltdown-checker, apparmor-profile-dist Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_39.2-1_all.deb Size: 167020 SHA256: 7e8623ef52d65a18fd7b78532e3a869027692831efecc8a6d794b091a6aeb667 SHA1: 2513dd29e77fcb850ff2cbe468916dd5fd2cd5c1 MD5sum: 544f220db3f86633672439defa529374 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: tb-starter Recommends: tb-updater, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-default-browser Priority: optional Section: misc Filename: pool/main/t/tb-default-browser/tb-default-browser_5.2-1_all.deb Size: 24268 SHA256: a76be738df1ad4700920b243b2b2a12674338589c52b35ae0312b4bdc14e3a5b SHA1: 759592fbd2dfdb458c557f284020020e986fcc88 MD5sum: e22943b7dbed8d1e6fbc92615564fd5c Description: Configures system to use /usr/bin/torbrowser as default browser Sets /usr/bin/x-www-browser to /usr/bin/torbrowser. . Sets /usr/bin/gnome-www-browser to /usr/bin/torbrowser. . Sets BROWSER environment variable to /usr/bin/x-www-browser by using /etc/profile.d/ and /etc/X11/Xsession.d/ hooks. . Registers of MIME type handlers to 'torbrowser'. . Sets KDE's default browser to x-www-browser. This only takes effect for newly created user accounts. Not for existing user accounts. This is most useful to help Linux distribution maintainers setting divergent defaults. . See also: The Default Browser on Linux Debacle http://blog.codef00.com/2011/02/18/the-default-browser-on-linux-debacle/ . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-starter Version: 3:17.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Depends: msgcollector, privleap Recommends: tb-updater, tb-default-browser, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_17.5-1_all.deb Size: 66796 SHA256: 13e305eb11a206cc133c455047599b4142b47ea0b0980c3757ca15573c08fcff SHA1: 39b9b9a3f1926033dada73c46ba393aaf09c0669 MD5sum: 6dd249a9f8d15882528fd1242afc3695 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:38.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 520 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: tb-default-browser, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_38.0-1_all.deb Size: 240404 SHA256: a44faec1a27f4363e808f007fd9c417f0902026f6db48cd08143ecca3e8ecc9d SHA1: ef08dbd6839c610a55b24c25408d99ed1bee4550 MD5sum: 960cd0fbec2767621f78a0d008cf90b1 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter, tb-default-browser and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_7.0-1_all.deb Size: 26928 SHA256: 27fd55851783c846cdea545038377cf3c1d16a5254d34d8cf636e8a821fa716a SHA1: de0ba02d6c798f45fc55d877331a7432d7a53ab4 MD5sum: 580ba7a1d24f3c8eb998bc76b18cc1e9 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor Version: 0.4.8.13-2~d12.bookworm+1 Architecture: i386 Maintainer: Peter Palfrader Installed-Size: 6318 Depends: libc6 (>= 2.34), libcap2 (>= 1:2.10), libevent-2.1-7 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libseccomp2 (>= 0.0.0~20120605), libssl3 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.2), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.8.13-2~d12.bookworm+1_i386.deb Size: 2139888 SHA256: 0b19b07400753c04ef1213c64285d55f017405563595f39db231ab8de3ee9bb0 SHA1: cc8d038f469831603ce9b616ed36d5f0cfacef65 MD5sum: c5adb240ccff125abdd6220fca56c846 Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:7.4-1 Architecture: all Maintainer: troubadour Installed-Size: 181 Depends: anon-connection-wizard, helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.4-1_all.deb Size: 70440 SHA256: 91e826cb791e1d34f36c81272d1b250cced62eb5628186c082108455c69b1f50 SHA1: a44bc5afab9eb3235700799eec57e6527bad7718 MD5sum: 6e2578814f92cb3ef40dbdc1cbb4059e Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:5.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_5.9-1_all.deb Size: 29100 SHA256: 9ff8d8aad396089cab3e19726637ac4e7480304e5181871cc50831186590b7cf SHA1: 8997f77728adb38a0583db2c143966209de9390a MD5sum: 8eba570056d5f04473eff417e443fae2 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.15-1~d12.bookworm+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 19739 Depends: tor (>= 0.4.8.15-1~d12.bookworm+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.15-1~d12.bookworm+1_all.deb Size: 2398228 SHA256: 71a62d880f26812d37c2ba1b94271524ed50b6764327028b1d8b7f06f7b55481 SHA1: 7ed4629b730850710027bb6fadce5a902adb65a0 MD5sum: cf9d46c26227a9431821b637c653c690 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:27.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 676 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:28.5-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_27.6-1_all.deb Size: 225760 SHA256: 9b37e9e1a9a4fc114c118746bca22d8b1acc173b9255e9df4baf467e21d764ab SHA1: 597df6802c7182f26b7ffdc30ab84d9575cf8a25 MD5sum: d9bd11a1662b2a40377a9ca624364c34 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . xfce4-terminal: . * Disables automatic scroll on output when manually scrolled up to make reading output such as "sudo journalctl -f" easier. Automatic scroll on output still happening in default when not manually scrolling up beforehand first. . * Enables unlimited scrollback by default to avoid output from being truncated. . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. Package: user-sysmaint-split Version: 3:6.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 151 Pre-Depends: helper-scripts Depends: security-misc, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_6.4-1_all.deb Size: 40028 SHA256: 0654bb93148e4fc5d356012dec958d8bab579d5455a105f0d71fae3f531ff904 SHA1: 8092730cfff5aac74dac39c84fec8a7877acb4e1 MD5sum: e0a70108905cbe7653d4ba689b201064 Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 134 Depends: sudo, adduser, p7zip-full Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_11.3-1_all.deb Size: 41452 SHA256: fd54506e45b5874279710176f80f507b162277abd4b59d7ad1d0d1bc729dbb96 SHA1: c5d3071a227b547a75691ac97af4755c24042f4b MD5sum: a19f70c19a3b0455412dd8a1dd8cc5f2 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Disables screen locker when running in VMs because that is not useful either. . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`