Package: anon-apt-sources-list Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.0-1_all.deb Size: 29832 SHA256: 13194843bb1dd021d6828ca69bc2dd19ea0b1af99bca765e7e733db5162528c9 SHA1: 9bde14d2151a63e9735a3b3f4b2b58e45cff3aeb MD5sum: 4b45504bc3b85fe36618164dd2c1b7cc Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.list for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.list for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.3-1 Architecture: all Maintainer: iry Installed-Size: 269 Depends: helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.3-1_all.deb Size: 94428 SHA256: 03072fa49d700bf51cce026a9263ef5e0336df5e573d1ac8645855e7dbfdb206 SHA1: c1fc645494c2240a7f2dfd93ff90ce1fecc70a65 MD5sum: 192d20d79563173de557553b0a0ba8da Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.6-1_all.deb Size: 64264 SHA256: e518c9a544fa2709cb7afca7c992fee2620bc83701067d1daf8ea73ed01f834e SHA1: 3c751e9eef4d32e6831184cdc9bc0ffa894e3849 MD5sum: 426adac983d9f5766354ea7bf0cc824f Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 95 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.6-1_all.deb Size: 35748 SHA256: ec88bbbc6d736a22f32ed10b67c5a43748f72cc313281c5c5eadc3d0f61b9a1e SHA1: efbdc9f0523f081f60c1d00fa1aeeb309d7994ba MD5sum: eeee767edd07c1aa2b6659b301624ac3 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.3-1_all.deb Size: 23728 SHA256: f21b32af2fe5e97e1deb2ec3d5b99643d09a29dd0f417462ce04a9b62d84be75 SHA1: 9fc848712e947b2a75d68a054f885f431f720587 MD5sum: ef3323d6884a5f4a13aebd5ad59b76ee Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_5.8-1_all.deb Size: 26540 SHA256: 9c4a89aed339b626661798ce0b1bacb1c8cfe28d0e7698dc22f239ec22689ec7 SHA1: c910dfe161d3b8a952202faf19a5e7f39326f0bf MD5sum: e9c56317599ccb1358a84617233042bb Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.4-1_all.deb Size: 34436 SHA256: 4becf5a59c42ff08923fe0f0f5b2f4e7ab7596c41b78de2888cb37ff2082d99a SHA1: cadbebdfd93b6cbcb1e484f411a2f213908452ce MD5sum: eaa01cbc2a257e9198dc4bc03a8b0e9d Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_32.2-1_all.deb Size: 78312 SHA256: eedd0913c90d4b771f5570c4f6277b41112eb4cf40d20a5ec78ae8f0605c7cc0 SHA1: b25eef602345c6671aa950a16a23089dc6b45c06 MD5sum: 5a18acdaf12854bbae721a8b625c3fd9 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. . Safe to remove, if you know what you are doing. Package: binaries-freedom Version: 0:3.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.1-1_all.deb Size: 10868 SHA256: 05c0764da4a18b836b30ad1b37466abb36aa6af688a04232239fb3a4e9abff56 SHA1: cc2f8bca65cbb0c4916b530c24c2f93c2835ca0e MD5sum: 28025d7471a44c74a5f505858dd57847 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:3.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 27 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_3.7-1_all.deb Size: 13132 SHA256: d9b939535f52cf774e4e00185ddd9183e778f5ec1767c02230d318a3f1314a61 SHA1: 1fee887eb725b6eb3096f88ccc50d8fa1e79e428 MD5sum: c40283fe4e2ed5107f1d6a7cef8cd22e Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_6.9-1_all.deb Size: 30448 SHA256: 1b56356185ba13d61fd1ad08e6f902c526b1839188559b9234aa4ec999bf0714 SHA1: 0edbbf47a1a95945fdb1e5a4cbec753cae11af16 MD5sum: 3b721aa8de26ee19baaf5e1ed224e612 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:0.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 254 Depends: python3, tb-updater, tb-starter Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_0.9-1_all.deb Size: 56056 SHA256: fa491e842b5ab4b11eddb95abf85d8f2b12b3c845ebc83732c3188eb67b0cdc6 SHA1: df975df558b4e1d1761ada7539c23d1211a2c8a5 MD5sum: 022369cbb9c20a5eed2850891c6d8298 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.4-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 316 Depends: calamares, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.4-1_all.deb Size: 227240 SHA256: a0a1e8820f4053a84795326942a357376bd0093c21cba2298fd19c7333031987 SHA1: 86feeaf06a906b82490f7383665d68831d981035 MD5sum: 56d359f9bb7f4dfa30ab6fbe7ef6d241 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.3-1_all.deb Size: 13292 SHA256: 6ce82af10a7b236361e2e6dfe014ff9bfa4e2dabd34281e377b78b2bfa039221 SHA1: fff22537a21eada2e706375f5276a0d1c888f084 MD5sum: 4f13c1c264668a54e72391520904e70b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2024.05.22 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2024.05.22_all.deb Size: 4372 SHA256: 22eb433ce2e23eb79914b80825b84c30f6aa785a824a971a9a7aff93bc0a5057 SHA1: 2d8e1f35f05c2b62051c83bb6fe0bebce0029335 MD5sum: 058f3b902a815b762f79e7b035705d00 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_4.8-1_all.deb Size: 26460 SHA256: 483b489af3c79b0b491d821a3a82c81da1b7756be9b7af707fad97c234d7f917 SHA1: 45984f16f29c847d5fcf5127527b292d3cf15a49 MD5sum: 67c05844dade146d0c840b82c414f066 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:12.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 175 Depends: python3 Conflicts: whonix-xfce-desktop-config Replaces: whonix-xfce-desktop-config Provides: whonix-xfce-desktop-config Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_12.4-1_all.deb Size: 53336 SHA256: ce2f52ebe71ea70abc78b518ae6070dd13feed8effe80e1b7e6dbfeb28c4b086 SHA1: 9d9d1e9b599f3dc9c2da12fb5ae4e9d32017d700 MD5sum: dd81d3409ad7e9e8cd0443e3cce46d73 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for user 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:12.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 67 Depends: xfce4-whiskermenu-plugin, xfce4-genmon-plugin, arc-theme, gnome-themes-extra, gnome-themes-extra-data, gtk2-engines-murrine, gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_12.4-1_all.deb Size: 37876 SHA256: 157d2ff8f292d122096fd8273d7791d6a22f97d9816d59f62dac8294e866354a SHA1: 45f97c6ea060556168f7d7802cea0bf75e56f74f MD5sum: e37c3db004259754e4b01b7522ef5e35 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:42.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 354 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_42.9-1_all.deb Size: 133948 SHA256: 3e5c0484e6fd5f69a4f46308d91b7bddcc1d24ad9028158593cac8933803d8c1 SHA1: 651fbfe22c11b799df1a0621f71fe118c1cdda64 MD5sum: 40c982ce89e660eb3bab308c71f82c1f Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-base-files Version: 3:14.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 632 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_14.1-1_all.deb Size: 184804 SHA256: 3eb4e8ccbd2253ffe334b56b021aa791ab837140f96b8b68a218449fb120cac2 SHA1: 1e02894ed8466066b1396b5358d97bf9f4b9c228 MD5sum: 0b726767cc3fcdddfefee2fe6e1335f3 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dummy-dependency Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: browser-choice, firefox-esr, qubes-core-agent-passwordless-root, tb-default-browser, tb-starter, tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency_32.2-1_all.deb Size: 78336 SHA256: 9d22013dc8711bd794e07d6c3bf9ad413e726d70f5a0cfed2a7410518f22f0f4 SHA1: 45b6713aa545b1fd0759e43460c9c65075925ecb MD5sum: 1ed2c492d2ba6e5557aa48801e1c4cad Description: dummy package to satisfy architecture specific dependencies A metapackage, which satisfies the dependency on: . - tb-updater - tb-starter - tb-default-browser - qubes-core-agent-passwordless-root - firefox-esr . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_32.2-1_all.deb Size: 78296 SHA256: cf535ddd785fbc0f08cd5e42a5d2271f3cbf0e98c56a88e0b75e2ccd8a10165e SHA1: 93139d0a7a61c1c0b6a7a8d4a12d03e14b4c4ef9 MD5sum: 9c617703e4037a94e1ff19824b29b5cf Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_32.2-1_all.deb Size: 78256 SHA256: 361612e747b8487d8ed09e728c65ed840196beb1b7271433d57b5da91e43b85d SHA1: 857bab387986517e1b8039e39d8a4d6092d9c800 MD5sum: 070cb125b7ad5be22e0f0754425f9688 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_32.2-1_all.deb Size: 78292 SHA256: 8015856d26208b46c57666f63f4f369abf6f0353bf1107d8ca8cd4bb0ed21fa7 SHA1: 78ee041c5d4332df4988640d0e226be24a7dbccf MD5sum: 5c0a8efd01df84d190cf2e9c0261758b Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_32.2-1_all.deb Size: 78296 SHA256: e5e9f3196d22e817c6976b9e92876d92a56c717b1535128c91b706de0ef52f07 SHA1: 098910c5e775680e1c081b1ec588e8073205fd65 MD5sum: 196e92dd386541d0579fce458d880843 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_32.2-1_all.deb Size: 78260 SHA256: bc9c7113d5cb5dcb8a98fe06f154033649d46e0d27c4e3feaef5055b9bfce9be SHA1: a360cc6cf2c908c29d1c365304f52bf865451b49 MD5sum: c12c8cf6960e62a5f156e954a3212540 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_32.2-1_all.deb Size: 78284 SHA256: 669f27e7ef68e306db6b19960d7442f69563de2e253c8e6c440f13424654a993 SHA1: ca9e049207ebb1076e71af1430ca36dacdf8e6a3 MD5sum: 30338c4c5f47306d0cc71ad591a3cb0b Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_32.2-1_all.deb Size: 78268 SHA256: aefff5274e9de81f97ee1805d0795e71402f1199b38f46560c4538619d7f6bd1 SHA1: 39921a3fa440ed4436806fe13fe3bd8216397dbf MD5sum: cdc5ae5198649afafd40c4f7d46ff31c Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: genmkfile Version: 3:16.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_16.3-1_all.deb Size: 58836 SHA256: c17c953f164a1fb30535d20d6276438fd51c81c16b26fe9a10c1786e8683b017 SHA1: 12617814f5ecfb4c47db7ba0faf3b03603a43bdf MD5sum: d51454f447757c3e8c664a4a1ed4a426 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_4.8-1_all.deb Size: 490472 SHA256: 433626b1ec4ddf6d6efff49023324588db8bda7e0825eba2b8533a80800ce1c4 SHA1: 5b306c96d5aaaa5446054bc60b1481c9c3448675 MD5sum: fc038cbfc208271efdb597da69de0171 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:9.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: grub-live-initramfs-tools | grub-live-dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_9.3-1_all.deb Size: 33400 SHA256: 46fdfe696db83baa232cf31d54b6cbaf0d3ce9aed53ca526a4aa5fea06f19b31 SHA1: 28c58504b62edc668e7959e14d040120b966e1b6 MD5sum: 7f19125e5f5ce1571782dc5235b896e5 Description: grub live boot menu entry Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:9.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_9.3-1_all.deb Size: 28224 SHA256: e3f20f7f87587c2f089a7fb2112d0835f47d6eb8e01f3b8282c34b4c1a353441 SHA1: 5f4fc2d6c55b02b7cc2db91f649a0e8990d73b54 MD5sum: 16b8ab51bbd0b083d1dcc49262d27a93 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: grub-live-initramfs-tools Source: grub-live Version: 3:9.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 59 Depends: grub-live, live-boot, live-tools Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-initramfs-tools_9.3-1_all.deb Size: 28164 SHA256: 5b7266527cab11783a7c19b98a7dbe1a1b252e03296642f773de5abfe516f0a7 SHA1: 76ba3dd8ddd37393b4efaf0dd2c2614328479d5d MD5sum: daea1bf7ae939b8e4b187728eb7ee790 Description: grub live initramfs-tools dependencies initramfs-tools version metapackage for grub-live . See also grub-live package. Package: hardened-kernel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_4.9-1_all.deb Size: 157816 SHA256: 02c694686512a5f265ec96299a47fa0558f5d817f4a2455dd9a0675b0b63ed36 SHA1: fa06cb8fe47c108d328cb3bde61c2d9eb65400a1 MD5sum: 2b6a8ea70923c396f7f087144ce19037 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 589 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Breaks: usability-misc (<< 3:26.3-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:26.3-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_34.9-1_all.deb Size: 179840 SHA256: a68a69e73afb34bdd1e567fc9409504ec636858d1cbab0d1b5dfcbddfc0bd16f SHA1: 9a6f430fb11f14d7456401411b8ba560c2bb6f57 MD5sum: c76cd74e0b7cabf5f86fe34d7e125632 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. Package: helper-scripts-tests Source: helper-scripts Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 123 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_34.9-1_all.deb Size: 90212 SHA256: 836fd8e134114421e047b67b5aa6131da8e1f4a5300b72513b29ab152379d2c2 SHA1: ad7ce53e10a719b19f3fe2167c8f2b4aa8ac57ae MD5sum: ad5253a98ecead56a700e8d526af5edf Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2522 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_4.7-1_all.deb Size: 1438316 SHA256: 5c0c4f8cc30fd7029a003b16ec536046482551f83e42993f79aef194a4e07162 SHA1: b312302f5d2726a935369fe3dda399240b075f8a MD5sum: 0a1c0d5a655c4425e240301425042eed Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_7.9-1_all.deb Size: 33432 SHA256: 7ce39a05f9dfa1de775edfe551946a7df417f9adc66a243a579bb51fb2c1eb5c SHA1: 7dd00375f5f9d6c2db53b2573b88631ca7b302fc MD5sum: 62bf9e8deaaef1123e74839f880b9662 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-base-files Version: 3:8.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 442 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_8.8-1_all.deb Size: 311188 SHA256: 30d96342b09fef6bf24e33d283fcc2c8f823457a0a944312d8236903d991df17 SHA1: 5d03d46fb6cbd8cf141d5ad3183a75362c502ef4 MD5sum: 19272333ead5e46ed1525efcd8429e94 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /etc/skel/.bashrc, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-cli Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: anon-apt-sources-list, dosfstools, kicksecure-base-files, kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-recommended-cli, lvm2, ntfs-3g, obfs4proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli_32.2-1_all.deb Size: 78264 SHA256: ec16f7dcca96b3502fd62d33887f88e86be1a71cc53a5b629d42aa17725a65c0 SHA1: bd5712c42481303e623020f345c83ac4b434fb1c MD5sum: 6212303a5bbd4dc3ee21dd6c00bea486 Description: Kicksecure command line interface CLI A metapackage, which installs packages, for Kicksecure CLI. . Do not remove. Package: kicksecure-cli-host Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-cli-host-packages-recommended, kicksecure-dependencies-system, non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host_32.2-1_all.deb Size: 78248 SHA256: 04acedc3d7eca1039d98f79a258853c429217a9e3c570dcf920feffb090c3252 SHA1: 987564e7fc3bc098be0e3e477853ddba6bd6ec3d MD5sum: f6a2f7203171cd80a6f7aa8df8dc11cb Description: Kicksecure Host command line interface CLI A metapackage, which installs packages, for Kicksecure CLI Host. . Do not remove. Package: kicksecure-cli-host-packages-recommended Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host-packages-recommended_32.2-1_all.deb Size: 78244 SHA256: 7cfd15e510cbcd3c4a33f3eb0c0cce80dcdf24af19bde7fafac9d96072873f30 SHA1: 5fa9d0765bf2efdd800345a80abdb13f379a8579 MD5sum: fdc376765f02c7ac7effa25639bb919f Description: Recommended Kicksecure Host CLI Packages A metapackage, which installs packages, which are recommended for Kicksecure CLI Host. . Not useful to have inside Qubes. . Safe to remove, if you know what you are doing. Package: kicksecure-cli-vm Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-dependencies-system, kicksecure-network-conf, non-qubes-enhancements-cli, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-vm_32.2-1_all.deb Size: 78284 SHA256: a1b6b0fa9a65498e4044853cab9a710f67c8dda8e9559c7a53ecb355290e5c81 SHA1: 07cd1d53cc081553e7a12e3bbb6c6d41ed452c8e MD5sum: 4a323eda9be0e613ffe66d5ce2237a7b Description: Kicksecure command line interface CLI VMs A metapackage, which installs packages, for Kicksecure CLI Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: kicksecure-default-applications-cli Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, magic-wormhole, makepasswd, pwgen Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-default-applications-cli_32.2-1_all.deb Size: 78320 SHA256: 7415c3dfbe7ab9a9da8c4301ca7b799bf2d104e28ce8759026b5cd5a4d5d38bf SHA1: ad8ae218109c985cd70ceceee026f4f076fd7a02 MD5sum: 17281e22a0812ab1ed0aaf59a47b5c50 Description: Default applications packages for Kicksecure A metapackage, which includes default packages to ensure, Kicksecure useful recommended tools are installed. . Safe to remove, if you know what you are doing. Package: kicksecure-dependencies-cli Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, desktop-config-dist, dialog, dist-base-files, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc, setup-dist, sudo, timesanitycheck, usrmerge Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-cli_32.2-1_all.deb Size: 78368 SHA256: 65f2d9bf5bd5d9b34af21415f3aced8100e9eb93677b2752a7329b3937954200 SHA1: d912d828748d24c9cf86933ffd0c22bfada7b4b0 MD5sum: f64f8839af012b316af6a26abedb7579 Description: Dependencies for hardened systems CLI A metapackage, which installs command line interface (CLI) packages which should be installed on hardened systems. . Do not remove. Package: kicksecure-dependencies-system Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: dracut | linux-initramfs-tool | initramfs-tools Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-system_32.2-1_all.deb Size: 78252 SHA256: c94601e8f0339105310520254787a0f4ab8d2353fceba181cd059a72ad5c521b SHA1: eed291573bac25c17e7184876d168c2f70da35ab MD5sum: 7ec73226b97760b6b9373708c5187c44 Description: System for hardened systems A metapackage, which installs system packages which should be installed on hardened systems. . Currently only depends on boot process related dependencies. . Do not remove. Package: kicksecure-desktop-applications-recommended Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: browser-choice | dummy-dependency, catfish, electrum | dummy-dependency-electrum, flatpak, gpa, keepassxc, kicksecure-welcome-page, msgcollector-gui, repository-dist-wizard, ristretto, sdwdate-gui, setup-wizard-dist, tumbler, vlc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-recommended_32.2-1_all.deb Size: 78344 SHA256: b9592529f31e4725a0589ff82e4d1dd49d50e4ead01ca016aed2e917897961f5 SHA1: 9507ba5a1b31634f0406f46e197aeeb3d2b9a96b MD5sum: 5fc03321b8f5d694d524ff9b582fc307 Description: Kicksecure Recommended Desktop Applications A metapackage, which installs recommended packages, for graphical user interface (GUI) Kicksecure. . Do not remove. Package: kicksecure-desktop-applications-xfce Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: gvfs, libexo-2-0, lxqt-sudo, mousepad, pkexec, policykit-1-gnome, polkitd, sysmaint-panel, thunar, thunar-archive-plugin, thunar-volman, xarchiver, xfce4-terminal, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-xfce_32.2-1_all.deb Size: 78348 SHA256: 5bf001fcb503ea847e10a8c866d6e2e32b7cfb2890b542c99480c09a7827786f SHA1: 25f97bb66b157b0697c19ca91bcb4b88c9fcdbf9 MD5sum: 5d81b888bce03aa86622ea4ec30b5f32 Description: Recommended applications for hardened Xfce desktop GUI A metapackage, which installs minimal, yet complete enough to contain the very basics, Xfce applications. . Safe to remove. Package: kicksecure-desktop-environment-essential-gui Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: desktop-config-dist, desktop-config-dist-dependencies, gtk2-engines-pixbuf, libgl1-mesa-dri, mesa-vulkan-drivers, upower, x11-xserver-utils, xdg-desktop-portal, xserver-xorg, xserver-xorg-video-fbdev, xserver-xorg-video-vesa, xserver-xorg-video-vmware | dummy-dependency-xorg-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-gui_32.2-1_all.deb Size: 78360 SHA256: dad5b2c51b6068af1660ecc44070851bac3d0ab80ba4ee358d74f63dba68d157 SHA1: 463cfd1250a7e71dce67bc212cbce919ebc6d424 MD5sum: 78461126783bfef458c5b6125a78c88d Description: Desktop Depends GUI A metapackage, which installs dependencies for desktop environments, such as KDE, GNOME, etc. . kicksecure-desktop-environment-essential-xfce depends on this package. Package: kicksecure-desktop-environment-essential-xfce Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: accountsservice, gnome-brave-icon-theme, gnome-keyring, kicksecure-desktop-environment-essential-gui, lightdm, xdg-desktop-portal-gtk, xfce4 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-xfce_32.2-1_all.deb Size: 78312 SHA256: 38102b4b39792c5b484840332073ab8ce80d94532e7068bd97470d2a63acfe97 SHA1: ec4fc4229a811b6a650d8ed574bd72c7b602f706 MD5sum: 7e784185b3ad1699d34dcf49a22a6bf1 Description: Recommended applications for hardened Xfce Desktop Environment A metapackage, which installs minimal, yet complete enough to contain a very basic Xfce Desktop Environment. . Safe to remove. Package: kicksecure-network-conf Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.7-1_all.deb Size: 22680 SHA256: b69e871d4fbaeb04ad2957081b85af78dd4a17440b00db189d3158b38c5a40c3 SHA1: 0806be5a39ebcae7ed7fb3276ba321a44e599e40 MD5sum: 1ed81be23350d0a4810aaccdf90223e0 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 48 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.7-1_all.deb Size: 19300 SHA256: 20d26736f72d17d33f335a9f6cc6bfbc26402221608f3e9f364d0929e7fdd818 SHA1: 7c730b1711deb0b8109704aaa7ac1b60c68b9be9 MD5sum: 87abea7f67bb78ccc33c02d1902c4b8d Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_32.2-1_all.deb Size: 78256 SHA256: f5bd9f0729b968fd1a29f778abefcb0854cbc601d71971a2baec9f82fa9cd7ca SHA1: 57752d6a1c0efc5a691e0079608ee38acc76e32c MD5sum: b7395c28e1caae1f74e6d7145bb250bc Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. . Do not remove. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_32.2-1_all.deb Size: 78260 SHA256: 31af87240cb747d6852c12263ac9161eb13e2622de76e47dac80c96a4733b2b7 SHA1: 76e39ab519a88c2a0fa92276a30b80f375b6329b MD5sum: 1667c93c9f66db55e9fa04c13f7944c7 Description: Default packages for Kicksecure-Qubes CLI A metapackage, which installs packages, for Kicksecure on Qubes without recommended GUI applications. . Do not remove. Package: kicksecure-qubes-gui Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-desktop-applications-recommended, kicksecure-desktop-applications-xfce, kicksecure-qubes-cli, qubes-core-agent-thunar, qubes-gpg-split, qubes-gui-agent-xfce, qubes-img-converter, qubes-pdf-converter, qubesdb-vm, pipewire-qubes | pulseaudio-qubes, pipewire-pulse | pulseaudio-qubes, wireplumber | pipewire-media-session-pulseaudio | pulseaudio-qubes, rtkit | pulseaudio-qubes, dbus-user-session, xfce4-settings Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui_32.2-1_all.deb Size: 78344 SHA256: 1e9e9eaaf57e3ac556b25a586a23d00aef57f81109398544ca1ec1e68d02c555 SHA1: fb3a9d9300dc0e16167097c12e260a0146615387 MD5sum: e03d2e20f72e33f54712dfcf5e21dd0d Description: Default packages for Kicksecure-Qubes GUI A metapackage, which installs packages, for Kicksecure on Qubes including recommended GUI applications. . Do not remove. Package: kicksecure-recommended-cli Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: apparmor-profiles-kicksecure | dummy-dependency-apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto2, libpam-tmpdir, lsof, man-db, mesa-utils, most, nano, net-tools, open-link-confirmation, openvpn, p7zip-full, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unar, unzip, usability-misc, usbutils, vim, xz-utils, zip Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-recommended-cli_32.2-1_all.deb Size: 78572 SHA256: c071acff850d695b07c8254fde8fe6b239112cb88c0cf54430514beeb84fbd27 SHA1: 23861a504dfd492a644b653dfc7ca77b2b44a9e2 MD5sum: c223ce3e96201e569ba51e9e1287c1d4 Description: Recommended packages for Kicksecure A metapackage, which includes recommended packages to ensure, Kicksecure standard tools are available. . Safe to remove, if you know what you are doing. Package: kicksecure-shared-host-xfce Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: ddrescueview, discover, gddrescue, gnome-disk-utility, gnome-system-monitor, gparted, grub-live | grub-live-boot | boot-live, gsmartcontrol, hwinfo, icon-pack-dist, non-qubes-enhancements-gui, laptop-detect, lm-sensors, lshw, non-qubes-audio, nvme-cli, psensor, pv, sdwdate-gui, smart-notifier, smartmontools, xfce4-power-manager, xfce4-screenshooter, xfce4-xkb-plugin, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-shared-host-xfce_32.2-1_all.deb Size: 78484 SHA256: e9358957d56565c59d238c6439d44433f45f7f76da0018a707f52ed0b6f6e536 SHA1: d6d23809a2da2165198fd09b6f0d2332d81597ac MD5sum: 908a0c10386e9b2413ab0fbe09b17adf Description: Kicksecure Shared Host Xfce GUI A metapackage, which installs packages, which are recommended for Kicksecure Xfce Host as well as a Whonix-Host with a graphical user interface (GUI). . Safe to remove, if you know what you are doing. Package: kicksecure-welcome-page Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1012 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.3-1_all.deb Size: 922048 SHA256: 169ca3846c4dddf0f93ec72a6912bbccc4d9d74cc4dd04b44033baf391db51d0 SHA1: 0d1d86dfa77757a3f7aab8796c5e6e0973c6bb30 MD5sum: 9434e99d4e3bafb5a2bb0bff63f099c8 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: kicksecure-xfce Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce_32.2-1_all.deb Size: 78212 SHA256: ba5bac5cb568d2c2b82bb0d66d662562f75b7500d231a738b16e8c945fe1d56f SHA1: fc37e137ad8696928768b23052604ade323a78b6 MD5sum: 490f6f44689caf6569e7ef161609a1c2 Description: Kicksecure Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce. . Do not remove. Package: kicksecure-xfce-host Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli-host, kicksecure-desktop-applications-recommended, kicksecure-network-conf, kicksecure-network-conf-gui, kicksecure-shared-host-xfce, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-host_32.2-1_all.deb Size: 78240 SHA256: 2a68f6a89c83c649d212aff59e671438bcc3e2c19797555c86b8f84139ea2a3c SHA1: 7e577ca725b23177ed004916ec1f623547a65351 MD5sum: 219e8911245b33e37e817cbd04d7aad3 Description: Kicksecure Host Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce Host. . Do not remove. Package: kicksecure-xfce-vm Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: kicksecure-cli-vm, kicksecure-desktop-applications-recommended, kicksecure-network-conf-gui, kicksecure-xfce, non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-vm_32.2-1_all.deb Size: 78316 SHA256: c8f49d4e0a784412ae9d0e20c2ac3eafafdd7f000c7f22a8a05754794498d8bf SHA1: f9c8a0272847a0bb6d67f6d48da69a83fad78c93 MD5sum: 75926109bacf59866939258612b3e0f0 Description: Kicksecure Xfce GUI for VMs A metapackage, which installs packages, for Kicksecure Xfce in Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: legacy-dist Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 128 Depends: helper-scripts, apt-forktracer Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_16.0-1_all.deb Size: 50004 SHA256: 50bca8c753f2415dabd9ae3ba9a017c6aae74829647c03420c2401932787b30f SHA1: 27ab57d8d6cfeb8bf174228fc3db9d6ad82ead22 MD5sum: 972c8c8a7c4d28814412e32210e51e46 Description: Prepare older Build Versions of Whonix for Upgrade Applies fixes required for upgrading from for example Whonix 8.x to Whonix 9.x etc. . Upgrades from Whonix 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 143 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.1-1_all.deb Size: 54752 SHA256: 679e06c7190a0b01002af1ad257030cd5606213b0d4883fd56a1af996bd93f70 SHA1: b6e686cddfcd3f10fe336ab5cac09f0fc8642a25 MD5sum: 96b24d5c1b76f72caa2708ef0bf72de7 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 300 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_8.4-1_all.deb Size: 145648 SHA256: b50e69371c4f675583d62818be1fe1f439eaada3c959193e22f99fc43d95cef5 SHA1: 63157d17ed889a6c6333667c908ddf4dade6a5fa MD5sum: 42d8dbb52c55f1dbac245d039f54c85c Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: mediawiki-shell Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_4.2-1_all.deb Size: 42448 SHA256: df3cdddb78b3251c548cc253bf07d058cae1cb502675784c16ecb36f8c71a54c SHA1: ca00bc2e0daa4ec5e80f9fd2371362914da4834e MD5sum: 78158f8c0feb84b2dda6ab3eb8c838c4 Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:14.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_14.4-1_all.deb Size: 67928 SHA256: ca9753248838d2f6044ed6779a7efa027e0d75bb902705ff31988506abf87eae SHA1: ae214cda52ff0e34910cef49b9ac542f10b9ce3d MD5sum: f538d37876853b1736aad37a6ffc1f86 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:14.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: msgcollector, wmctrl, python3-pyqt5, qtwayland5, zenity, libnotify-bin | kde-baseapps-bin, mate-notification-daemon, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_14.4-1_all.deb Size: 46476 SHA256: c22d725dcbe9356a4dc7c5ca2cb578578f1c08f40fee42f5504296872639cadf SHA1: e3a24ce9199dbb5285a87834a865d015ff92a17c MD5sum: d78e9db06ef70531d87ce0fb99804905 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: non-qubes-audio Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: libasound2, pavucontrol, pipewire-audio | pulseaudio, pipewire-pulse | pulseaudio, rtkit | pulseaudio, wireplumber | pipewire-media-session-pulseaudio | pulseaudio Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-audio_32.2-1_all.deb Size: 78356 SHA256: ac976870f21dd12bad4342f6e34b6f9171fb21904e440a728fc5b7388110e653 SHA1: ca39e900862029bc6566916f5b5808257bdf8252 MD5sum: 129f6682579ef0344b2775484f8a79cf Description: Recommended packages for Audio Support in non-Qubes A metapackage, which includes recommended packages which are useful to provide audio support. . These are not useful in Qubes, since Qubes already has its own native audio implementation. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-cli Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: acpi-support, console-common, console-setup, cryptsetup, dmsetup, grub-live | grub-live-boot | boot-live, kbd, keyboard-configuration, swap-file-creator, tirdad, udev Replaces: non-qubes-vm-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-cli_32.2-1_all.deb Size: 78400 SHA256: c42387371c59ed5f44b3df3ad38e05336c57c811013665a974123bfd11abc948 SHA1: d60fcc1612a222cb0b5d5a7d704a730bf117f015 MD5sum: 0e2042e19b58cf7f657cc00cb8233cee Description: Recommended packages for terminal based machines (CLI) A metapackage, which includes recommended packages which are useful within CLI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-gui Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: non-qubes-enhancements-cli, rads, trayer Replaces: non-qubes-vm-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-gui_32.2-1_all.deb Size: 78324 SHA256: ec22a4929a5bccdfd9addbac8859c93bd24c446f1d3e0d5c70e4e4e072f3dba9 SHA1: 5ef8732f852fd8ad8736c5d68e2eb7f1950dfba1 MD5sum: a4312721633388bf164d5a78c41eabee Description: Recommended packages for graphical systems (GUI) A metapackage, which includes recommended packages which are useful within GUI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: open-link-confirmation Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 98 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater, tb-default-browser Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_7.2-1_all.deb Size: 32436 SHA256: c9ca1edb3ae8c289ec5dc9bf702e7bb010d1f844e6b0050b94555ef25e948468 SHA1: 73614efb48adea42b9f8e7379daa79536890cf07 MD5sum: e715afd4629b941ab5156ad7df7bc622 Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: orca-screen-reader-support Source: kicksecure-meta-packages Version: 3:32.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Pre-Depends: legacy-dist Depends: gstreamer1.0-plugins-good, libatk-adaptor, libgail-common, non-qubes-audio, orca, python3-gst-1.0, sound-icons, speech-dispatcher-espeak-ng, xbrlapi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/orca-screen-reader-support_32.2-1_all.deb Size: 78324 SHA256: 53ba9f2ec276c1c17bd040830f96777cce9220d4d406f60874533ff8d984b022 SHA1: bc62a6d5c8e0b0f9e1b38592c7fd81cc04c99cb7 MD5sum: b10ebb42db737316ca3ed6aa136e366e Description: dependencies for the orca screen reader A metapackage, which includes depencency packages for the orca screen reader. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: privleap Version: 3:3.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 211 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_3.8-1_all.deb Size: 52140 SHA256: 25dbe293a2fd4749e5decf162f2dfe32752de69b73961f995eabdcd5900d07dc SHA1: 37010be569e792dcb6833dc1869848dd1684326b MD5sum: 404053562190ab79c3c9e3e09e6ca76d Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_7.5-1_all.deb Size: 35136 SHA256: 96ee8efb52a916cf598711a3698fe1b0fdf36ba5fedb9098fddfdbebdbc53ec6 SHA1: d216241d9c29673c8b84e6e7210752d4239cca15 MD5sum: d77f32e2917820ab638f094995304bfe Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:3.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: helper-scripts, dracut, secure-delete, kexec-tools Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_3.6-1_all.deb Size: 26088 SHA256: 0e6d0d7a9414eccbfe14baa9a7beee2568b848641304a4883ba1c82c023839a4 SHA1: b546225545059853242fca37acd938a84a9337b6 MD5sum: 4d5bc9fb4c0e21bae27e571be9c7c4c4 Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs. Package: repository-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 211 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_12.3-1_all.deb Size: 108324 SHA256: 1129f92fda24e4fe564e17f13cd5af0377cc1ec4721345823b2e70ab147a38c9 SHA1: cf19694afb07456655589d2765a85801b53d6028 MD5sum: d61b696dc4629b4ede01fc88a7064605 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.list`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_12.3-1_all.deb Size: 39920 SHA256: 95ad20566a07ad0daa5557acc2c3f3628fa8cb0d87462dae5a87b5632e7a8a03 SHA1: f8bf0e8a10e7f0b94053b7a27132806f382a3102 MD5sum: aefeb66ec376a822510d87d7ef5a79f6 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.1-1_all.deb Size: 19368 SHA256: f82e5f117389874a7498a8be5fc9b305aa62246c2d85c1deebaf6c9b6dc1530f SHA1: 4b6dce9efc4fe8fc890240c7cef83c1c1cce8433 MD5sum: a91710e2f183be2520a56b769208bf8f Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_6.9-1_all.deb Size: 48672 SHA256: af4d1202ae6f0e8a1509d13bf117f648b3f40dc213aefe6ab1cf9c60027df230 SHA1: 5436d457ca176fcad738a39245245c7196ac0c32 MD5sum: 90dfd286aa5445290eec454346f9f9c8 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:25.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 346 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, python3:any Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_25.7-1_all.deb Size: 150260 SHA256: 478d8ceb027beea993e21309703af88d53a03a40898ee8a252f7da2653ec9b83 SHA1: 1591f45939f046f1c0fca9362ac49a88fb1996fa MD5sum: b4e2176e30ebdb5861f7100749038996 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:11.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 246 Depends: sudo, privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_11.4-1_all.deb Size: 92404 SHA256: 90adc987653d4588e49d25d147a9e42d28994759fd6241075e78ffe438f7169a SHA1: 657226b88abc37451ab48428b45f9842f01ee55b MD5sum: 2a2d8bef3175f8fbe8b8f04664ad06dd Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc Version: 3:46.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 668 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Replaces: anon-gpg-tweaks, swappiness-lowest, tcp-timestamps-disable Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc_46.6-1_all.deb Size: 231244 SHA256: 5a4f9c50ea6bfcab0ee7977db4c05c82345e15feb962dfc48ae4181ae94a029b SHA1: 2c27cab5c5c7077c089e90a65b031fa29d5fb9c3 MD5sum: 20695d502d711b9dea3f0d7c07fdb932 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.3-1_all.deb Size: 17728 SHA256: 25f78cf6e5bf314dadbac853573fa9e4c947ed7ceedd4ed621fa1ba662fa0a5d SHA1: 658ef9690ee68adfe433b68b8e925af6e37708c2 MD5sum: 0e1faa1d42e561bbed5e2ac3763a7392 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 136 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.4-1_all.deb Size: 46764 SHA256: bbc0d08909dd11ecf44d0e9deb5b923d03a7e94eb3c15e63eb86f8b43e471744 SHA1: 62ef882f6540fb8ab2a4f6dff40f64f575fe8922 MD5sum: cdcd9bfa1b5f8362aa2043747127b21a Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:12.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 138 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_12.6-1_all.deb Size: 59432 SHA256: b984251393d35bddf7711f9664f23d020a6b2de0aa885edabffe7adfb7b369c4 SHA1: 090f4dc6a1733867664f375526d96becdaf23524 MD5sum: 5344c53a3d7c85d0ede28991021940e3 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 85 Depends: helper-scripts, cryptsetup-bin, bc Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.2-1_all.deb Size: 32664 SHA256: dd5c32b70d78a78b653283ed041e12c32694498870911903fe98a9244c693949 SHA1: ee68de10645aafe1b948d765fa26b18b7d67f64d MD5sum: f719399e004da081f39e47c4096efe56 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm, security-misc, usability-misc Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_3.0-1_all.deb Size: 27868 SHA256: 425e79c93ece46a2819cfe718e66f79dd460d47a96fa531df60802df46fd72b3 SHA1: b74de40a587ef3daf37db0c5d13e3e717b31e84e MD5sum: a89527dbb249c7dfe2ef13138b662697 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:41.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 546 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, privleap, systemd, adduser, security-misc, spectre-meltdown-checker, apparmor-profile-dist Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_41.0-1_all.deb Size: 174440 SHA256: c39f350a450f5fbf792a2840e860d514cb2359ae6398ae1820780dc5391bfc37 SHA1: b5602297d9164ea692ac4766f8afd3e3cc955a4b MD5sum: c803de265cacfbca692fbbfab74de76a Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: tb-starter Recommends: tb-updater, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-default-browser Priority: optional Section: misc Filename: pool/main/t/tb-default-browser/tb-default-browser_5.3-1_all.deb Size: 24448 SHA256: 07db390480d5279e155f07fa15bdcc8aea4c0d492cfcfc21792973891042d762 SHA1: 022a8e8642d951dee6d516f0dc13cfdc2fdb926d MD5sum: 1bcdd470b12928a922ab30d5b25ab11b Description: Configures system to use /usr/bin/torbrowser as default browser Sets /usr/bin/x-www-browser to /usr/bin/torbrowser. . Sets /usr/bin/gnome-www-browser to /usr/bin/torbrowser. . Sets BROWSER environment variable to /usr/bin/x-www-browser by using /etc/profile.d/ and /etc/X11/Xsession.d/ hooks. . Registers of MIME type handlers to 'torbrowser'. . Sets KDE's default browser to x-www-browser. This only takes effect for newly created user accounts. Not for existing user accounts. This is most useful to help Linux distribution maintainers setting divergent defaults. . See also: The Default Browser on Linux Debacle http://blog.codef00.com/2011/02/18/the-default-browser-on-linux-debacle/ . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-starter Version: 3:17.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Depends: msgcollector, privleap Recommends: tb-updater, tb-default-browser, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_17.7-1_all.deb Size: 67096 SHA256: 3926280ca2a90ee817c127bc18782d1427662d6fd477e4754594d4cb4d19799a SHA1: e68f02d5ce2bb28fc5185101b8e137f6e0de521f MD5sum: b2ba91661530cd8a50b4e72116662bc6 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:39.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 522 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: tb-default-browser, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_39.3-1_all.deb Size: 242280 SHA256: 17d768c07d19861b42313407f2d56102f95b5814ff44fbd291f4ac4f649e7552 SHA1: 7e565acfb56dd15d3651bc3a73244d4778d62591 MD5sum: a561b50b643c06a2f17bfbbbd690bf7c Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter, tb-default-browser and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_7.1-1_all.deb Size: 27032 SHA256: a8725726e9e4e98c1a5ae7e42ff4cbdd4416b76ca37b8be748767d8fc2d9c7f8 SHA1: 7b64d7249f984674f82b9851a0684cf66853eade MD5sum: 6a1f725e4f32a981f5bbb0a60d54378b Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:7.5-1 Architecture: all Maintainer: troubadour Installed-Size: 181 Depends: anon-connection-wizard, helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.5-1_all.deb Size: 70740 SHA256: 8058358d12a91b2bb2fca029267aaf6bd579f0f4684209e1fd34b975ff9ef396 SHA1: 597c273965cfc6a229be3249079cc3ab96ec245b MD5sum: 68dda5c46de9b687614e47b7279102cb Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:5.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_5.9-1_all.deb Size: 29100 SHA256: 9ff8d8aad396089cab3e19726637ac4e7480304e5181871cc50831186590b7cf SHA1: 8997f77728adb38a0583db2c143966209de9390a MD5sum: 8eba570056d5f04473eff417e443fae2 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.15-1~d12.bookworm+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 19739 Depends: tor (>= 0.4.8.15-1~d12.bookworm+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.15-1~d12.bookworm+1_all.deb Size: 2398228 SHA256: 71a62d880f26812d37c2ba1b94271524ed50b6764327028b1d8b7f06f7b55481 SHA1: 7ed4629b730850710027bb6fadce5a902adb65a0 MD5sum: cf9d46c26227a9431821b637c653c690 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:28.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 688 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:28.5-1), dconf-gsettings-backend | gsettings-backend Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_28.9-1_all.deb Size: 229772 SHA256: 3bfb62fc91032f39733a495e2ba68dfa6304a96ec494c68d40aa06c12b13040e SHA1: 2a797ba01e097e5b6454077e0699420cefeca89a MD5sum: 453662e97761c68dc573a6a13b446771 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . xfce4-terminal: . * Disables automatic scroll on output when manually scrolled up to make reading output such as "sudo journalctl -f" easier. Automatic scroll on output still happening in default when not manually scrolling up beforehand first. . * Enables unlimited scrollback by default to avoid output from being truncated. . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. Package: user-sysmaint-split Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Pre-Depends: helper-scripts Depends: security-misc, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_7.3-1_all.deb Size: 42876 SHA256: 82005e17ade62f15bbf6d4e0905e2ffb465317edf081611de702f20a6e36925f SHA1: 5006cad4df95c58ab3e049d6475e64da4053da53 MD5sum: 6329aa7ab9e0826ec2d6e6804bbd2fa6 Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 171 Depends: sudo, adduser, p7zip-full, helper-scripts Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_12.2-1_all.deb Size: 50080 SHA256: b3178aa36b54f4e40f85b0dfec0fc5c75a1493f293d9f0917644014e9522f574 SHA1: a79d20c0d4e1b3ad627b24654cbacdeaf41d123a MD5sum: 74dc211c11f87f7c96e1512f6c513e06 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Optional: Disables screen locker when running in VMs because that is not useful either. This feature can be enabled in file: `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`