Package: anon-apt-sources-list Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.0-1_all.deb Size: 29832 SHA256: 13194843bb1dd021d6828ca69bc2dd19ea0b1af99bca765e7e733db5162528c9 SHA1: 9bde14d2151a63e9735a3b3f4b2b58e45cff3aeb MD5sum: 4b45504bc3b85fe36618164dd2c1b7cc Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.list for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.list for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.3-1 Architecture: all Maintainer: iry Installed-Size: 269 Depends: helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.3-1_all.deb Size: 94428 SHA256: 03072fa49d700bf51cce026a9263ef5e0336df5e573d1ac8645855e7dbfdb206 SHA1: c1fc645494c2240a7f2dfd93ff90ce1fecc70a65 MD5sum: 192d20d79563173de557553b0a0ba8da Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.6-1_all.deb Size: 64264 SHA256: e518c9a544fa2709cb7afca7c992fee2620bc83701067d1daf8ea73ed01f834e SHA1: 3c751e9eef4d32e6831184cdc9bc0ffa894e3849 MD5sum: 426adac983d9f5766354ea7bf0cc824f Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 95 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.6-1_all.deb Size: 35748 SHA256: ec88bbbc6d736a22f32ed10b67c5a43748f72cc313281c5c5eadc3d0f61b9a1e SHA1: efbdc9f0523f081f60c1d00fa1aeeb309d7994ba MD5sum: eeee767edd07c1aa2b6659b301624ac3 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.3-1_all.deb Size: 23728 SHA256: f21b32af2fe5e97e1deb2ec3d5b99643d09a29dd0f417462ce04a9b62d84be75 SHA1: 9fc848712e947b2a75d68a054f885f431f720587 MD5sum: ef3323d6884a5f4a13aebd5ad59b76ee Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_5.8-1_all.deb Size: 26540 SHA256: 9c4a89aed339b626661798ce0b1bacb1c8cfe28d0e7698dc22f239ec22689ec7 SHA1: c910dfe161d3b8a952202faf19a5e7f39326f0bf MD5sum: e9c56317599ccb1358a84617233042bb Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.4-1_all.deb Size: 34436 SHA256: 4becf5a59c42ff08923fe0f0f5b2f4e7ab7596c41b78de2888cb37ff2082d99a SHA1: cadbebdfd93b6cbcb1e484f411a2f213908452ce MD5sum: eaa01cbc2a257e9198dc4bc03a8b0e9d Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_32.3-1_all.deb Size: 78536 SHA256: 46d46439b2de20b8536535ae96d5cfabe031251f5733ca745dfc06dd728163a8 SHA1: ac07faca9f48cd8cbd3359ded965b28db91e0636 MD5sum: 86f30c7075cbd068e3c02bef5c5fc555 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. . Safe to remove, if you know what you are doing. Package: binaries-freedom Version: 0:3.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.1-1_all.deb Size: 10868 SHA256: 05c0764da4a18b836b30ad1b37466abb36aa6af688a04232239fb3a4e9abff56 SHA1: cc2f8bca65cbb0c4916b530c24c2f93c2835ca0e MD5sum: 28025d7471a44c74a5f505858dd57847 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:3.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 27 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_3.7-1_all.deb Size: 13132 SHA256: d9b939535f52cf774e4e00185ddd9183e778f5ec1767c02230d318a3f1314a61 SHA1: 1fee887eb725b6eb3096f88ccc50d8fa1e79e428 MD5sum: c40283fe4e2ed5107f1d6a7cef8cd22e Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_6.9-1_all.deb Size: 30448 SHA256: 1b56356185ba13d61fd1ad08e6f902c526b1839188559b9234aa4ec999bf0714 SHA1: 0edbbf47a1a95945fdb1e5a4cbec753cae11af16 MD5sum: 3b721aa8de26ee19baaf5e1ed224e612 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:0.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 254 Depends: python3, tb-updater, tb-starter Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_0.9-1_all.deb Size: 56056 SHA256: fa491e842b5ab4b11eddb95abf85d8f2b12b3c845ebc83732c3188eb67b0cdc6 SHA1: df975df558b4e1d1761ada7539c23d1211a2c8a5 MD5sum: 022369cbb9c20a5eed2850891c6d8298 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.4-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 316 Depends: calamares, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.4-1_all.deb Size: 227240 SHA256: a0a1e8820f4053a84795326942a357376bd0093c21cba2298fd19c7333031987 SHA1: 86feeaf06a906b82490f7383665d68831d981035 MD5sum: 56d359f9bb7f4dfa30ab6fbe7ef6d241 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.3-1_all.deb Size: 13292 SHA256: 6ce82af10a7b236361e2e6dfe014ff9bfa4e2dabd34281e377b78b2bfa039221 SHA1: fff22537a21eada2e706375f5276a0d1c888f084 MD5sum: 4f13c1c264668a54e72391520904e70b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2024.05.22 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2024.05.22_all.deb Size: 4372 SHA256: 22eb433ce2e23eb79914b80825b84c30f6aa785a824a971a9a7aff93bc0a5057 SHA1: 2d8e1f35f05c2b62051c83bb6fe0bebce0029335 MD5sum: 058f3b902a815b762f79e7b035705d00 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_4.8-1_all.deb Size: 26460 SHA256: 483b489af3c79b0b491d821a3a82c81da1b7756be9b7af707fad97c234d7f917 SHA1: 45984f16f29c847d5fcf5127527b292d3cf15a49 MD5sum: 67c05844dade146d0c840b82c414f066 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if security-misc would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:12.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 175 Depends: python3 Conflicts: whonix-xfce-desktop-config Replaces: whonix-xfce-desktop-config Provides: whonix-xfce-desktop-config Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_12.4-1_all.deb Size: 53336 SHA256: ce2f52ebe71ea70abc78b518ae6070dd13feed8effe80e1b7e6dbfeb28c4b086 SHA1: 9d9d1e9b599f3dc9c2da12fb5ae4e9d32017d700 MD5sum: dd81d3409ad7e9e8cd0443e3cce46d73 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for user 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:12.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 67 Depends: xfce4-whiskermenu-plugin, xfce4-genmon-plugin, arc-theme, gnome-themes-extra, gnome-themes-extra-data, gtk2-engines-murrine, gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_12.4-1_all.deb Size: 37876 SHA256: 157d2ff8f292d122096fd8273d7791d6a22f97d9816d59f62dac8294e866354a SHA1: 45f97c6ea060556168f7d7802cea0bf75e56f74f MD5sum: e37c3db004259754e4b01b7522ef5e35 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:43.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 354 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_43.2-1_all.deb Size: 134480 SHA256: 60cd0ccde93a5c577a46f0220a44c3d10a9c0c836c70efbb0591c6bc2dbe3f51 SHA1: e737524be5d4246a15f66f3cd7aeea9fedfe584c MD5sum: 15a3199966ea6daddc7b816210dea5ee Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-base-files Version: 3:14.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 632 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_14.1-1_all.deb Size: 184804 SHA256: 3eb4e8ccbd2253ffe334b56b021aa791ab837140f96b8b68a218449fb120cac2 SHA1: 1e02894ed8466066b1396b5358d97bf9f4b9c228 MD5sum: 0b726767cc3fcdddfefee2fe6e1335f3 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dummy-dependency Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: browser-choice, firefox-esr, qubes-core-agent-passwordless-root, tb-default-browser, tb-starter, tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency_32.3-1_all.deb Size: 78568 SHA256: ebc43a08ef86d22cbee0d8f3da8a1da54830611ee1a79f57b19ef2ebd88678be SHA1: f20593631148ff1900f988df17f3a4a9ebdcf1d1 MD5sum: 5d87a77a316a598d2291de8bb1d1ce87 Description: dummy package to satisfy architecture specific dependencies A metapackage, which satisfies the dependency on: . - tb-updater - tb-starter - tb-default-browser - qubes-core-agent-passwordless-root - firefox-esr . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_32.3-1_all.deb Size: 78504 SHA256: 02dae6050578dea6b53a17516a72e627604d5176afab4f73a3c2c3759313b4c7 SHA1: 31b6a8c395486b58e9dcaee5d662c366004bffc3 MD5sum: f40b4b536caaa02b020c73632ea6e8bc Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_32.3-1_all.deb Size: 78492 SHA256: b88ebb2be4fad69d5cf7323aa6a01a4c0534ec6abe23757f20b906ad24a0f14c SHA1: 8c02baac392be16d91e64cc0363af943baa1f688 MD5sum: 61c5c906d0af0005eda3ed2b5b30bea2 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_32.3-1_all.deb Size: 78512 SHA256: 731ca918b9c930f9a2809ead23e5f722d5fe35f88f96ade168ba42e0e74fc814 SHA1: f3238ffe38eb21f7900f229a812e50bf1abddc41 MD5sum: bf445555935a255a8c999165b19dd707 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_32.3-1_all.deb Size: 78508 SHA256: f31aad5f4ef6eeac06f6867b9fcc9cd3aaf584de1d7c55d5a8bd5bb9b573a3fd SHA1: d070a6d4018c10b7cc0670fffc51cb8f612dc057 MD5sum: 7664ec6fa46719f561782da4fd434868 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_32.3-1_all.deb Size: 78480 SHA256: dd466bcfe7a847aa9b37f171287cbca6b515b3cb91c4c3c2d56e2f5e7e8b2661 SHA1: ba052ce8a8dd120a65df8566b3542fa06688c441 MD5sum: 6a5a918303beccec5f14b771771eb0ae Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_32.3-1_all.deb Size: 78496 SHA256: 2f157503105df465edf2ce054a6d95b58037d3a574f32087a8b7e188a5888ce3 SHA1: 2ef7648b52b01955b333fe66116334af0fd37efa MD5sum: dc564bb94735f944a639d46ad8cc174f Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_32.3-1_all.deb Size: 78488 SHA256: 19fe048904c00362f5de19cc8b004afe6490a9368f9810b05969e209e6cd6f3c SHA1: 680432ce16efc9af81e9d177990423e1f031616f MD5sum: d2314107a3b7c5183c51bdc39d4cf6e5 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: genmkfile Version: 3:16.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_16.3-1_all.deb Size: 58836 SHA256: c17c953f164a1fb30535d20d6276438fd51c81c16b26fe9a10c1786e8683b017 SHA1: 12617814f5ecfb4c47db7ba0faf3b03603a43bdf MD5sum: d51454f447757c3e8c664a4a1ed4a426 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_4.8-1_all.deb Size: 490472 SHA256: 433626b1ec4ddf6d6efff49023324588db8bda7e0825eba2b8533a80800ce1c4 SHA1: 5b306c96d5aaaa5446054bc60b1481c9c3448675 MD5sum: fc038cbfc208271efdb597da69de0171 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Depends: grub-live-initramfs-tools | grub-live-dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_9.6-1_all.deb Size: 34724 SHA256: 226f48a3b4fbaddb9438dc1a6a704e3c618df4cd85d4c69729c190ec447db56c SHA1: 787c751463fc458d0c9ad5d2ac376e370ed62073 MD5sum: df7a294ee832354e1166d5f7e09a279b Description: grub live boot menu entry Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_9.6-1_all.deb Size: 29176 SHA256: a193d40b8d6c98c4c0874ddd3f3b2790a80d3a0f44449a6ed34af3480d00dd89 SHA1: d96815cea6b9cb0cca9759b3453f74b388cb8c27 MD5sum: e6217375d02323e0a3e3fdce8dcbba96 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: grub-live-initramfs-tools Source: grub-live Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: grub-live, live-boot, live-tools Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-initramfs-tools_9.6-1_all.deb Size: 29112 SHA256: d184719f92fbdbfaf3f229736107beafaff201e565ef31a875d226cf8dd73197 SHA1: 11072a20163685aceba9f35603d3bf2de4ba1a9d MD5sum: 10764967fb17a62f18b40fad61147386 Description: grub live initramfs-tools dependencies initramfs-tools version metapackage for grub-live . See also grub-live package. Package: hardened-kernel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_4.9-1_all.deb Size: 157816 SHA256: 02c694686512a5f265ec96299a47fa0558f5d817f4a2455dd9a0675b0b63ed36 SHA1: fa06cb8fe47c108d328cb3bde61c2d9eb65400a1 MD5sum: 2b6a8ea70923c396f7f087144ce19037 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:35.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 589 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Breaks: usability-misc (<< 3:26.3-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:26.3-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_35.0-1_all.deb Size: 180264 SHA256: e3054f2fe10713e898acdb4d205473ee2a56f396e728acd6529d466fb60c5c3d SHA1: 5f6e57a5f3859b6257fae929e193fcebb3f3f982 MD5sum: 38dd61de300a8de8b04bb5283c2c3dd5 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. Package: helper-scripts-tests Source: helper-scripts Version: 3:35.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 123 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_35.0-1_all.deb Size: 90552 SHA256: 434ba63c9718974b911b6aefedff209be97a551e93480c81170249f548703a10 SHA1: afa7420d1f8085bb75f285bc06a3dae8840225ba MD5sum: 3ca709b903bb5b28d94b87269643a110 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2522 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_4.7-1_all.deb Size: 1438316 SHA256: 5c0c4f8cc30fd7029a003b16ec536046482551f83e42993f79aef194a4e07162 SHA1: b312302f5d2726a935369fe3dda399240b075f8a MD5sum: 0a1c0d5a655c4425e240301425042eed Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_7.9-1_all.deb Size: 33432 SHA256: 7ce39a05f9dfa1de775edfe551946a7df417f9adc66a243a579bb51fb2c1eb5c SHA1: 7dd00375f5f9d6c2db53b2573b88631ca7b302fc MD5sum: 62bf9e8deaaef1123e74839f880b9662 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-base-files Version: 3:8.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 442 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++skel++.bashrc Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_8.8-1_all.deb Size: 311188 SHA256: 30d96342b09fef6bf24e33d283fcc2c8f823457a0a944312d8236903d991df17 SHA1: 5d03d46fb6cbd8cf141d5ad3183a75362c502ef4 MD5sum: 19272333ead5e46ed1525efcd8429e94 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /etc/skel/.bashrc, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-cli Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: anon-apt-sources-list, dosfstools, kicksecure-base-files, kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-recommended-cli, lvm2, ntfs-3g, obfs4proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli_32.3-1_all.deb Size: 78484 SHA256: d77df45c289bd5c86a7be5dc054860e3c220ac041467f14f7a5d7aa51467ee32 SHA1: 8fd79a973c77f3712342af94cc8b0eca74c55cf2 MD5sum: 32c13efefc11c565d8a7e5a36696803d Description: Kicksecure command line interface CLI A metapackage, which installs packages, for Kicksecure CLI. . Do not remove. Package: kicksecure-cli-host Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-cli-host-packages-recommended, kicksecure-dependencies-system, non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host_32.3-1_all.deb Size: 78452 SHA256: 4be25160240d1d972190472b167a0efdbabb7170691666e87369603f05a71b35 SHA1: 23bd90836080f3d05f50bcc2c88111cb5b6c2ccc MD5sum: d1036620d09b420e5ca44993311d82f2 Description: Kicksecure Host command line interface CLI A metapackage, which installs packages, for Kicksecure CLI Host. . Do not remove. Package: kicksecure-cli-host-packages-recommended Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-host-packages-recommended_32.3-1_all.deb Size: 78476 SHA256: 692e7a2c7000d8c38e93ae8d6b8e86f3fc22e0c5df1151470405e1f76bf121f4 SHA1: a20f7acc23c56c600b54506a4dc500d3d9fa879b MD5sum: f7c82d629671f58a24cbef8d7066ba69 Description: Recommended Kicksecure Host CLI Packages A metapackage, which installs packages, which are recommended for Kicksecure CLI Host. . Not useful to have inside Qubes. . Safe to remove, if you know what you are doing. Package: kicksecure-cli-vm Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-dependencies-system, kicksecure-network-conf, non-qubes-enhancements-cli, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-cli-vm_32.3-1_all.deb Size: 78516 SHA256: d8fc929dce8c5ac9ab44697846fe5a4f8283e8f47c9f120694df7e818aab8524 SHA1: bc7c308c030b5854e0b4cc6d758a55b8ed1b98be MD5sum: 6d3b88f0d2eef651e116cec7417da5cb Description: Kicksecure command line interface CLI VMs A metapackage, which installs packages, for Kicksecure CLI Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: kicksecure-default-applications-cli Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, magic-wormhole, makepasswd, pwgen Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-default-applications-cli_32.3-1_all.deb Size: 78524 SHA256: a5654d8022c048b5d5537a7841d99bab959a2b00f0297f12ef0c6f7257c8c31f SHA1: 5f584e5762a960eaabbe301c7a2753ae3ef715a2 MD5sum: e75f910189b686bd2be8d890160fa191 Description: Default applications packages for Kicksecure A metapackage, which includes default packages to ensure, Kicksecure useful recommended tools are installed. . Safe to remove, if you know what you are doing. Package: kicksecure-dependencies-cli Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, desktop-config-dist, dialog, dist-base-files, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc, setup-dist, sudo, timesanitycheck, usrmerge Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-cli_32.3-1_all.deb Size: 78600 SHA256: 4aa64fdc8505eb4cd45321be64c66189b10cbffb12835b1301c37a8381a7ffa6 SHA1: 6d172c98766e1aa4de8fb8c04dfbbe16dbb6ab15 MD5sum: b0ab94fddf546d1e38d0132ed3b09f2d Description: Dependencies for hardened systems CLI A metapackage, which installs command line interface (CLI) packages which should be installed on hardened systems. . Do not remove. Package: kicksecure-dependencies-system Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: dracut | linux-initramfs-tool | initramfs-tools Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-dependencies-system_32.3-1_all.deb Size: 78476 SHA256: 13a7ec7dfe0b631d344081d3742a6a42835e9c131e3740d231f184b0b1aa00b3 SHA1: 5ebc18671eaf80bb02a659497d5e0523d8e9df31 MD5sum: d02c2658861724fb06e1ae1d079840c6 Description: System for hardened systems A metapackage, which installs system packages which should be installed on hardened systems. . Currently only depends on boot process related dependencies. . Do not remove. Package: kicksecure-desktop-applications-recommended Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: browser-choice | dummy-dependency, catfish, electrum | dummy-dependency-electrum, flatpak, gpa, keepassxc, kicksecure-welcome-page, msgcollector-gui, repository-dist-wizard, ristretto, sdwdate-gui, setup-wizard-dist, tumbler, vlc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-recommended_32.3-1_all.deb Size: 78576 SHA256: d1512ccc9f3211dd0b704345f14388b5c333a6db30e88270a20590110a12e746 SHA1: d9674a2f4427562ca0dc2825d2daf1a83c0673b3 MD5sum: 624452acc4a5cfbefa75014946f75fef Description: Kicksecure Recommended Desktop Applications A metapackage, which installs recommended packages, for graphical user interface (GUI) Kicksecure. . Do not remove. Package: kicksecure-desktop-applications-xfce Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: gvfs, libexo-2-0, lxqt-sudo, mousepad, pkexec, policykit-1-gnome, polkitd, sysmaint-panel, thunar, thunar-archive-plugin, thunar-volman, xarchiver, xfce4-terminal, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-applications-xfce_32.3-1_all.deb Size: 78576 SHA256: 6721c35becd0ede327bd89491b461e0979782d7a59492294b10e8946a9181148 SHA1: 1ca09586b49e089ad0eaa59aef7e2004e98d413c MD5sum: 8478a8a8cb74612c8b80b91d3a8959ab Description: Recommended applications for hardened Xfce desktop GUI A metapackage, which installs minimal, yet complete enough to contain the very basics, Xfce applications. . Safe to remove. Package: kicksecure-desktop-environment-essential-gui Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: desktop-config-dist, desktop-config-dist-dependencies, gtk2-engines-pixbuf, libgl1-mesa-dri, mesa-vulkan-drivers, upower, x11-xserver-utils, xdg-desktop-portal, xserver-xorg, xserver-xorg-video-fbdev, xserver-xorg-video-vesa, xserver-xorg-video-vmware | dummy-dependency-xorg-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-gui_32.3-1_all.deb Size: 78592 SHA256: 29cf03cb9b505912541f4bbbd2aae7c600faebe354107d77a58d64b539fb99b8 SHA1: 7d39375b202728b195488c8c1cb215c461ec1eae MD5sum: 1d8ee2df64c434bc32af8efc7ec96331 Description: Desktop Depends GUI A metapackage, which installs dependencies for desktop environments, such as KDE, GNOME, etc. . kicksecure-desktop-environment-essential-xfce depends on this package. Package: kicksecure-desktop-environment-essential-xfce Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: accountsservice, gnome-brave-icon-theme, gnome-keyring, kicksecure-desktop-environment-essential-gui, lightdm, xdg-desktop-portal-gtk, xfce4 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-desktop-environment-essential-xfce_32.3-1_all.deb Size: 78540 SHA256: ea74133e166303e3e2905bdf4203b3d17c6f2bc2c7de7768af730760394a0e18 SHA1: 525e990ec1c174fe94c94e9485a93c259c3fccf7 MD5sum: a3d158a18c743c5823aaf576efcefb73 Description: Recommended applications for hardened Xfce Desktop Environment A metapackage, which installs minimal, yet complete enough to contain a very basic Xfce Desktop Environment. . Safe to remove. Package: kicksecure-network-conf Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.7-1_all.deb Size: 22680 SHA256: b69e871d4fbaeb04ad2957081b85af78dd4a17440b00db189d3158b38c5a40c3 SHA1: 0806be5a39ebcae7ed7fb3276ba321a44e599e40 MD5sum: 1ed81be23350d0a4810aaccdf90223e0 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 48 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.7-1_all.deb Size: 19300 SHA256: 20d26736f72d17d33f335a9f6cc6bfbc26402221608f3e9f364d0929e7fdd818 SHA1: 7c730b1711deb0b8109704aaa7ac1b60c68b9be9 MD5sum: 87abea7f67bb78ccc33c02d1902c4b8d Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_32.3-1_all.deb Size: 78476 SHA256: dd56c3c7c418d0d234fe5f2d352187a641dd394a3503fe9380a24a9273b48665 SHA1: c1e08bc9eba1cd20765a59dd2187015b6606e75c MD5sum: 595b2e63bb023681472685fb8d351c10 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. . Do not remove. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-cli, qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_32.3-1_all.deb Size: 78488 SHA256: e9de7839035113eb12210be1e55f3d79e7cce22f1a3ee9457cd94199fbfbfaad SHA1: 9a7f9f0c3986aba0e28b85ad0d2df095e2578d65 MD5sum: 26746bb7e7c2f4e92a3e0eecf49c15c4 Description: Default packages for Kicksecure-Qubes CLI A metapackage, which installs packages, for Kicksecure on Qubes without recommended GUI applications. . Do not remove. Package: kicksecure-qubes-gui Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-desktop-applications-recommended, kicksecure-desktop-applications-xfce, kicksecure-qubes-cli, qubes-core-agent-thunar, qubes-gpg-split, qubes-gui-agent-xfce, qubes-img-converter, qubes-pdf-converter, qubesdb-vm, pipewire-qubes | pulseaudio-qubes, pipewire-pulse | pulseaudio-qubes, wireplumber | pipewire-media-session-pulseaudio | pulseaudio-qubes, rtkit | pulseaudio-qubes, dbus-user-session, xfce4-settings Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui_32.3-1_all.deb Size: 78576 SHA256: 5ffe7598af74991f9c515119eb73ca47b9731fcfe6f2ac58a9f3f683896a956b SHA1: 445d87042199fad279902125fbd5e15650b09db1 MD5sum: b625bc65c9abb4b7543a7704c466364a Description: Default packages for Kicksecure-Qubes GUI A metapackage, which installs packages, for Kicksecure on Qubes including recommended GUI applications. . Do not remove. Package: kicksecure-recommended-cli Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: apparmor-profiles-kicksecure | dummy-dependency-apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto2, libpam-tmpdir, lsof, man-db, mesa-utils, most, nano, net-tools, open-link-confirmation, openvpn, p7zip-full, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unar, unzip, usability-misc, usbutils, vim, xz-utils, zip Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-recommended-cli_32.3-1_all.deb Size: 78792 SHA256: 6593a839abe641116bea5a61cf4cab13599b96193d275ba77765cb0f36515550 SHA1: 4c4a0a69ba1998fac9db69e0febe3849759a98ca MD5sum: bd09e39033b8c8d126cac16775e1a52b Description: Recommended packages for Kicksecure A metapackage, which includes recommended packages to ensure, Kicksecure standard tools are available. . Safe to remove, if you know what you are doing. Package: kicksecure-shared-host-xfce Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: ddrescueview, discover, gddrescue, gnome-disk-utility, gnome-system-monitor, gparted, grub-live | grub-live-boot | boot-live, gsmartcontrol, hwinfo, icon-pack-dist, non-qubes-enhancements-gui, laptop-detect, lm-sensors, lshw, non-qubes-audio, nvme-cli, psensor, pv, sdwdate-gui, smart-notifier, smartmontools, xfce4-power-manager, xfce4-screenshooter, xfce4-xkb-plugin, xscreensaver Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-shared-host-xfce_32.3-1_all.deb Size: 78692 SHA256: 0087efbfb4ed9a929d3bd334020f701b89af634d140683c9da211e932ce57bf4 SHA1: 42ef8281e913abcd18f200f8a8e710b2dc842d5a MD5sum: 57994c8b80fa136f4ea6095fc1f92c0b Description: Kicksecure Shared Host Xfce GUI A metapackage, which installs packages, which are recommended for Kicksecure Xfce Host as well as a Whonix-Host with a graphical user interface (GUI). . Safe to remove, if you know what you are doing. Package: kicksecure-welcome-page Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1012 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.3-1_all.deb Size: 922048 SHA256: 169ca3846c4dddf0f93ec72a6912bbccc4d9d74cc4dd04b44033baf391db51d0 SHA1: 0d1d86dfa77757a3f7aab8796c5e6e0973c6bb30 MD5sum: 9434e99d4e3bafb5a2bb0bff63f099c8 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: kicksecure-xfce Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-cli, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce_32.3-1_all.deb Size: 78428 SHA256: ce43d8b15eae7e1a00499bb9497eea71b3327c1165305fd93b18f407a2773783 SHA1: 95488416a0ebe8917eec8d822db89a2d82a4a6d2 MD5sum: 91b87cc4107e5d3579394575e2395e29 Description: Kicksecure Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce. . Do not remove. Package: kicksecure-xfce-host Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-cli-host, kicksecure-desktop-applications-recommended, kicksecure-network-conf, kicksecure-network-conf-gui, kicksecure-shared-host-xfce, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-host_32.3-1_all.deb Size: 78456 SHA256: 233c2e6fc140d19a01b8d3e7ce4e30f93ad0d3a4195ee5667f186ea2d1b86abd SHA1: 0bc1c338d85ce3fd07e5a1d758051da902e5748a MD5sum: 54ef64c69a01ada03e239e18007ffe35 Description: Kicksecure Host Xfce GUI A metapackage, which installs packages, for Kicksecure Xfce Host. . Do not remove. Package: kicksecure-xfce-vm Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: kicksecure-cli-vm, kicksecure-desktop-applications-recommended, kicksecure-network-conf-gui, kicksecure-xfce, non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-xfce-vm_32.3-1_all.deb Size: 78528 SHA256: d0f250bc61491829d476d090cdf933106ef22730432c7fc55b6a66cc15810ceb SHA1: 0c6383e32985961f14a06c667d52aee83cfc4fcc MD5sum: 341719b9a6bf3e034f9f62d19b0ef57b Description: Kicksecure Xfce GUI for VMs A metapackage, which installs packages, for Kicksecure Xfce in Virtual Machines. . Not suitable for Qubes since it depends on packages not yet compatible with Qubes. . Do not remove. Package: legacy-dist Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 128 Depends: helper-scripts, apt-forktracer Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_16.0-1_all.deb Size: 50004 SHA256: 50bca8c753f2415dabd9ae3ba9a017c6aae74829647c03420c2401932787b30f SHA1: 27ab57d8d6cfeb8bf174228fc3db9d6ad82ead22 MD5sum: 972c8c8a7c4d28814412e32210e51e46 Description: Prepare older Build Versions of Whonix for Upgrade Applies fixes required for upgrading from for example Whonix 8.x to Whonix 9.x etc. . Upgrades from Whonix 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 143 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.1-1_all.deb Size: 54752 SHA256: 679e06c7190a0b01002af1ad257030cd5606213b0d4883fd56a1af996bd93f70 SHA1: b6e686cddfcd3f10fe336ab5cac09f0fc8642a25 MD5sum: 96b24d5c1b76f72caa2708ef0bf72de7 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 300 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_8.4-1_all.deb Size: 145648 SHA256: b50e69371c4f675583d62818be1fe1f439eaada3c959193e22f99fc43d95cef5 SHA1: 63157d17ed889a6c6333667c908ddf4dade6a5fa MD5sum: 42d8dbb52c55f1dbac245d039f54c85c Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: mediawiki-shell Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_4.2-1_all.deb Size: 42448 SHA256: df3cdddb78b3251c548cc253bf07d058cae1cb502675784c16ecb36f8c71a54c SHA1: ca00bc2e0daa4ec5e80f9fd2371362914da4834e MD5sum: 78158f8c0feb84b2dda6ab3eb8c838c4 Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:14.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_14.4-1_all.deb Size: 67928 SHA256: ca9753248838d2f6044ed6779a7efa027e0d75bb902705ff31988506abf87eae SHA1: ae214cda52ff0e34910cef49b9ac542f10b9ce3d MD5sum: f538d37876853b1736aad37a6ffc1f86 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:14.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: msgcollector, wmctrl, python3-pyqt5, qtwayland5, zenity, libnotify-bin | kde-baseapps-bin, mate-notification-daemon, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_14.4-1_all.deb Size: 46476 SHA256: c22d725dcbe9356a4dc7c5ca2cb578578f1c08f40fee42f5504296872639cadf SHA1: e3a24ce9199dbb5285a87834a865d015ff92a17c MD5sum: d78e9db06ef70531d87ce0fb99804905 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: non-qubes-audio Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: libasound2, pavucontrol, pipewire-audio | pulseaudio, pipewire-pulse | pulseaudio, rtkit | pulseaudio, wireplumber | pipewire-media-session-pulseaudio | pulseaudio Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-audio_32.3-1_all.deb Size: 78572 SHA256: a574c3e9f72be3454fb1a8a6ba71e7eeae8ca8f642514ca34c04c921e98d30c5 SHA1: 8d6607c509d7f48befb7d1446ad4d73553259787 MD5sum: 4dedd18fd966f60b7e5a2d144be3cf82 Description: Recommended packages for Audio Support in non-Qubes A metapackage, which includes recommended packages which are useful to provide audio support. . These are not useful in Qubes, since Qubes already has its own native audio implementation. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-cli Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: acpi-support, console-common, console-setup, cryptsetup, dmsetup, grub-live | grub-live-boot | boot-live, kbd, keyboard-configuration, swap-file-creator, tirdad, udev Replaces: non-qubes-vm-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-cli_32.3-1_all.deb Size: 78640 SHA256: 751ac40fb8484101bc368f1602fcb1a2a7df493402e400e5bb5dc06b0686d00b SHA1: 944ab7a04c945b48361a00cbbbbfadf6f98d9cad MD5sum: 724739bb3bb02370691867aa4781cde8 Description: Recommended packages for terminal based machines (CLI) A metapackage, which includes recommended packages which are useful within CLI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: non-qubes-enhancements-gui Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: non-qubes-enhancements-cli, rads, trayer Replaces: non-qubes-vm-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/non-qubes-enhancements-gui_32.3-1_all.deb Size: 78552 SHA256: f160ed7cd3642607b26be44ab53cda3b2e9d8cc0f7e61dea4e573971d8a0cd6b SHA1: 3c48b4f48638b95f2ccd9c5bbb05717ef7eaffae MD5sum: 08ef6ad59cdc483cfa6e69a324b8ec30 Description: Recommended packages for graphical systems (GUI) A metapackage, which includes recommended packages which are useful within GUI based non-Qubes machines. . These are not useful in Qubes, since Qubes already has native implementations for those. . Safe to remove, if you know what you are doing. Package: open-link-confirmation Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 98 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater, tb-default-browser Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_7.2-1_all.deb Size: 32436 SHA256: c9ca1edb3ae8c289ec5dc9bf702e7bb010d1f844e6b0050b94555ef25e948468 SHA1: 73614efb48adea42b9f8e7379daa79536890cf07 MD5sum: e715afd4629b941ab5156ad7df7bc622 Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: orca-screen-reader-support Source: kicksecure-meta-packages Version: 3:32.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Pre-Depends: legacy-dist Depends: gstreamer1.0-plugins-good, libatk-adaptor, libgail-common, non-qubes-audio, orca, python3-gst-1.0, sound-icons, speech-dispatcher-espeak-ng, xbrlapi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/orca-screen-reader-support_32.3-1_all.deb Size: 78548 SHA256: c5a3d7b7b1f40684e8af795b39189dfb12146a5a3cedb8e781a2ea0fb50acd3c SHA1: 0ecbc595d83ef3142ad1b7456cf4b4acf007e071 MD5sum: 23dae1835193cd8d337a59351a861994 Description: dependencies for the orca screen reader A metapackage, which includes depencency packages for the orca screen reader. . Safe to remove if its removal does not remove another metapackage, which is not safe to remove. Package: privleap Version: 3:3.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 211 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_3.8-1_all.deb Size: 52140 SHA256: 25dbe293a2fd4749e5decf162f2dfe32752de69b73961f995eabdcd5900d07dc SHA1: 37010be569e792dcb6833dc1869848dd1684326b MD5sum: 404053562190ab79c3c9e3e09e6ca76d Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_7.5-1_all.deb Size: 35136 SHA256: 96ee8efb52a916cf598711a3698fe1b0fdf36ba5fedb9098fddfdbebdbc53ec6 SHA1: d216241d9c29673c8b84e6e7210752d4239cca15 MD5sum: d77f32e2917820ab638f094995304bfe Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:3.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: helper-scripts, dracut, secure-delete, kexec-tools Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_3.6-1_all.deb Size: 26088 SHA256: 0e6d0d7a9414eccbfe14baa9a7beee2568b848641304a4883ba1c82c023839a4 SHA1: b546225545059853242fca37acd938a84a9337b6 MD5sum: 4d5bc9fb4c0e21bae27e571be9c7c4c4 Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs. Package: repository-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 211 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_12.3-1_all.deb Size: 108324 SHA256: 1129f92fda24e4fe564e17f13cd5af0377cc1ec4721345823b2e70ab147a38c9 SHA1: cf19694afb07456655589d2765a85801b53d6028 MD5sum: d61b696dc4629b4ede01fc88a7064605 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.list`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_12.3-1_all.deb Size: 39920 SHA256: 95ad20566a07ad0daa5557acc2c3f3628fa8cb0d87462dae5a87b5632e7a8a03 SHA1: f8bf0e8a10e7f0b94053b7a27132806f382a3102 MD5sum: aefeb66ec376a822510d87d7ef5a79f6 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.1-1_all.deb Size: 19368 SHA256: f82e5f117389874a7498a8be5fc9b305aa62246c2d85c1deebaf6c9b6dc1530f SHA1: 4b6dce9efc4fe8fc890240c7cef83c1c1cce8433 MD5sum: a91710e2f183be2520a56b769208bf8f Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_6.9-1_all.deb Size: 48672 SHA256: af4d1202ae6f0e8a1509d13bf117f648b3f40dc213aefe6ab1cf9c60027df230 SHA1: 5436d457ca176fcad738a39245245c7196ac0c32 MD5sum: 90dfd286aa5445290eec454346f9f9c8 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:25.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 346 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, python3:any Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_25.8-1_all.deb Size: 150248 SHA256: 4d4fa89fcfec25fd5720364ec9d05c6c5b0ca974e73ce87aa59fe3b6eacd5b2c SHA1: ea364a457a8004d59b3476fdbf721691ec9abe70 MD5sum: 1461b8af58f13bb434ad865b58dc81c8 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:11.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 246 Depends: sudo, privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_11.4-1_all.deb Size: 92404 SHA256: 90adc987653d4588e49d25d147a9e42d28994759fd6241075e78ffe438f7169a SHA1: 657226b88abc37451ab48428b45f9842f01ee55b MD5sum: 2a2d8bef3175f8fbe8b8f04664ad06dd Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc Version: 3:47.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 677 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Replaces: anon-gpg-tweaks, swappiness-lowest, tcp-timestamps-disable Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc_47.0-1_all.deb Size: 233300 SHA256: a2d98dd05ce95f977787cb030c05ee36c4fff52a6b0755a40e5aa5be8fea8ec7 SHA1: 491dfa1aa595035e584acd3f67eeca3d9a422309 MD5sum: 61626ea6170bc7c77419e35e8c54ac8a Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.3-1_all.deb Size: 17728 SHA256: 25f78cf6e5bf314dadbac853573fa9e4c947ed7ceedd4ed621fa1ba662fa0a5d SHA1: 658ef9690ee68adfe433b68b8e925af6e37708c2 MD5sum: 0e1faa1d42e561bbed5e2ac3763a7392 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 136 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.4-1_all.deb Size: 46764 SHA256: bbc0d08909dd11ecf44d0e9deb5b923d03a7e94eb3c15e63eb86f8b43e471744 SHA1: 62ef882f6540fb8ab2a4f6dff40f64f575fe8922 MD5sum: cdcd9bfa1b5f8362aa2043747127b21a Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:12.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 138 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_12.6-1_all.deb Size: 59432 SHA256: b984251393d35bddf7711f9664f23d020a6b2de0aa885edabffe7adfb7b369c4 SHA1: 090f4dc6a1733867664f375526d96becdaf23524 MD5sum: 5344c53a3d7c85d0ede28991021940e3 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 85 Depends: helper-scripts, cryptsetup-bin, bc Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.2-1_all.deb Size: 32664 SHA256: dd5c32b70d78a78b653283ed041e12c32694498870911903fe98a9244c693949 SHA1: ee68de10645aafe1b948d765fa26b18b7d67f64d MD5sum: f719399e004da081f39e47c4096efe56 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm, security-misc, usability-misc Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_3.0-1_all.deb Size: 27868 SHA256: 425e79c93ece46a2819cfe718e66f79dd460d47a96fa531df60802df46fd72b3 SHA1: b74de40a587ef3daf37db0c5d13e3e717b31e84e MD5sum: a89527dbb249c7dfe2ef13138b662697 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:41.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 548 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, privleap, systemd, adduser, security-misc, spectre-meltdown-checker, apparmor-profile-dist Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_41.2-1_all.deb Size: 174944 SHA256: d950aa8390b975adedfc445db51422fadc3c0cc7eccfc808d75912cdd025a295 SHA1: 5694847061ca426fea4cdaf7d3d73c55e34d793b MD5sum: 86cf806114d182a0d8d4c87490d4d126 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: tb-starter Recommends: tb-updater, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-default-browser Priority: optional Section: misc Filename: pool/main/t/tb-default-browser/tb-default-browser_5.3-1_all.deb Size: 24448 SHA256: 07db390480d5279e155f07fa15bdcc8aea4c0d492cfcfc21792973891042d762 SHA1: 022a8e8642d951dee6d516f0dc13cfdc2fdb926d MD5sum: 1bcdd470b12928a922ab30d5b25ab11b Description: Configures system to use /usr/bin/torbrowser as default browser Sets /usr/bin/x-www-browser to /usr/bin/torbrowser. . Sets /usr/bin/gnome-www-browser to /usr/bin/torbrowser. . Sets BROWSER environment variable to /usr/bin/x-www-browser by using /etc/profile.d/ and /etc/X11/Xsession.d/ hooks. . Registers of MIME type handlers to 'torbrowser'. . Sets KDE's default browser to x-www-browser. This only takes effect for newly created user accounts. Not for existing user accounts. This is most useful to help Linux distribution maintainers setting divergent defaults. . See also: The Default Browser on Linux Debacle http://blog.codef00.com/2011/02/18/the-default-browser-on-linux-debacle/ . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-starter Version: 3:17.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Depends: msgcollector, privleap Recommends: tb-updater, tb-default-browser, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_17.7-1_all.deb Size: 67096 SHA256: 3926280ca2a90ee817c127bc18782d1427662d6fd477e4754594d4cb4d19799a SHA1: e68f02d5ce2bb28fc5185101b8e137f6e0de521f MD5sum: b2ba91661530cd8a50b4e72116662bc6 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:39.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 522 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: tb-default-browser, open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_39.4-1_all.deb Size: 242544 SHA256: 604f5665495bfbf143c37537160b67eb0376465ebf1d540e34b42e78a1d8dd7f SHA1: e5e33b54aa1bf45a069bc73ebcc02c33be270539 MD5sum: eb740ac0e66ad055152dd97630a0e9f4 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter, tb-default-browser and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_7.1-1_all.deb Size: 27032 SHA256: a8725726e9e4e98c1a5ae7e42ff4cbdd4416b76ca37b8be748767d8fc2d9c7f8 SHA1: 7b64d7249f984674f82b9851a0684cf66853eade MD5sum: 6a1f725e4f32a981f5bbb0a60d54378b Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:7.5-1 Architecture: all Maintainer: troubadour Installed-Size: 181 Depends: anon-connection-wizard, helper-scripts, pkexec, policykit-1-gnome | polkit-1-auth-agent, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.5-1_all.deb Size: 70740 SHA256: 8058358d12a91b2bb2fca029267aaf6bd579f0f4684209e1fd34b975ff9ef396 SHA1: 597c273965cfc6a229be3249079cc3ab96ec245b MD5sum: 68dda5c46de9b687614e47b7279102cb Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:5.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_5.9-1_all.deb Size: 29100 SHA256: 9ff8d8aad396089cab3e19726637ac4e7480304e5181871cc50831186590b7cf SHA1: 8997f77728adb38a0583db2c143966209de9390a MD5sum: 8eba570056d5f04473eff417e443fae2 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.15-1~d12.bookworm+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 19739 Depends: tor (>= 0.4.8.15-1~d12.bookworm+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.15-1~d12.bookworm+1_all.deb Size: 2398228 SHA256: 71a62d880f26812d37c2ba1b94271524ed50b6764327028b1d8b7f06f7b55481 SHA1: 7ed4629b730850710027bb6fadce5a902adb65a0 MD5sum: cf9d46c26227a9431821b637c653c690 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:28.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 688 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:28.5-1), dconf-gsettings-backend | gsettings-backend Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_28.9-1_all.deb Size: 229772 SHA256: 3bfb62fc91032f39733a495e2ba68dfa6304a96ec494c68d40aa06c12b13040e SHA1: 2a797ba01e097e5b6454077e0699420cefeca89a MD5sum: 453662e97761c68dc573a6a13b446771 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . xfce4-terminal: . * Disables automatic scroll on output when manually scrolled up to make reading output such as "sudo journalctl -f" easier. Automatic scroll on output still happening in default when not manually scrolling up beforehand first. . * Enables unlimited scrollback by default to avoid output from being truncated. . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. Package: user-sysmaint-split Version: 3:7.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Pre-Depends: helper-scripts Depends: security-misc, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_7.4-1_all.deb Size: 43068 SHA256: 50d1145e6a239b32a5e45bb0a9139df937f4cc8d7f3e510d8541a6ed213cb095 SHA1: 685518df2c53f86bdb7785a6c889991365efe5e7 MD5sum: 7479be8bde2960255e358e320c25fb6e Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 171 Depends: sudo, adduser, p7zip-full, helper-scripts Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_12.2-1_all.deb Size: 50080 SHA256: b3178aa36b54f4e40f85b0dfec0fc5c75a1493f293d9f0917644014e9522f574 SHA1: a79d20c0d4e1b3ad627b24654cbacdeaf41d123a MD5sum: 74dc211c11f87f7c96e1512f6c513e06 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Optional: Disables screen locker when running in VMs because that is not useful either. This feature can be enabled in file: `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`