Package: anon-apt-sources-list Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 77 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.5-1_all.deb Size: 30652 SHA256: 220a6d8646abc6594bacdefdb06ed05eb0522af1a415df304ba3905728e8be85 SHA1: b6e14f0086e49a37795e91d9f5cff1a8b86931cc MD5sum: c4d94aa23c594a872c1bfcd5855c939a Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.2-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.2-1_all.deb Size: 95320 SHA256: 8e2be5f079858c0066f35db9a2c4bff6db6aa385e5a3fdf5c7b33546a0976110 SHA1: 66e2bdedd20867075d710f9aca7c6b31c00d9ca7 MD5sum: 54996913ab338b4337b01b753881aa36 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.0-1_all.deb Size: 65116 SHA256: 695d04d4b51dd372f4ad88156f11ca64f8676c0f1e0ffaca40b154e1684edfca SHA1: 3f742b7f1f8b9e810018f2c66a36deba5034353d MD5sum: 5d014b9bcfba550aaef3a6da1df384a5 Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 96 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.0-1_all.deb Size: 36124 SHA256: 34e33eb6a47c7bd2b026f77877b37e3584dd3f991a5de0ea845302fdf99e597c SHA1: c0f37265317fbc32104b195b68d042ae2042d2b0 MD5sum: 7e0c6537761cf89fc63b608627b73292 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.5-1_all.deb Size: 23912 SHA256: cde89ba8fb7e6965feeb7d72c9dedc6f6c602268122981343fb2c906b9702f0e SHA1: c3e19c274b3dea735cd3b598e11db50fc597cb59 MD5sum: b0b3af0563aa9d6afbf41fabb2ecaf69 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.1-1_all.deb Size: 27056 SHA256: 6b3734055d7123cdc291377d0beecbef74a84085af5b9dc0e9b13b8886d6df79 SHA1: 543793f64ec43200ae051cf2b292f772411deec1 MD5sum: e7b01d88386fbffff39511f7db4ee9cc Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.7-1_all.deb Size: 34852 SHA256: 8d34f303bcf7018e35bdeb17cb7c2e2e993b6eae8b683a914fc990f198c61b4f SHA1: 034631d4720819dcab967050af72446f72ded803 MD5sum: 0c8650b06d1805c0470f1666c84888a8 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_35.8-1_all.deb Size: 84556 SHA256: 88dc535aee3d655c869542f206ba875f952eabcd1a50ddf802227a92e8964c36 SHA1: c3cfe3d5c91f8d606abcf871cdd82821ea38ce83 MD5sum: ef1e477c8d2fac83fe7fef7672be55d2 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.3-1_all.deb Size: 11256 SHA256: 4f15f98eeded72e6f3fb11e8ac35ff178daf199e9d1e40c2e345d743d2cdffb8 SHA1: 44fd15e99f54a64915e3077725e22d2211d6518d MD5sum: 1bfff5aa44643bc8e79203beedadfce8 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.4-1_all.deb Size: 15372 SHA256: b6b6959444cf1c6aec49eb4bfafc5c1cc8c0dbb7c1ddf0441e0a10ed683ef649 SHA1: 5b0d60aa31a26ebc8c48830ff749ffe9e9b3f827 MD5sum: 41c7554dfa6b94d745ec04b432ec8af1 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_7.7-1_all.deb Size: 31500 SHA256: d20227067b627c0f755ed55cfaa2d09793a4767ff74011002d5c7a4c04c920c8 SHA1: 18addbe5021dcadab2f5adcd3e9c25bdaedcc506 MD5sum: 7224b3afc8c6065d411a2d8e9e95230d Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 279 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.3-1_all.deb Size: 61216 SHA256: 9c0f440cae75c76a824d32732bc2f78e9be3956bbabb3fd7a1db582d87a1fe5f SHA1: 135d8472842d00e0954f79cc0ce9948815464d99 MD5sum: 88e7e1110ecdbdd2f4c9a5a6e6a344c8 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.7-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.7-1_all.deb Size: 129348 SHA256: 5dd9fc074112120361f680d154137d2ba8903e5a3e82b8da6da999f4a4a1721f SHA1: ebbc3f9de752c82940f829c4380d7ca28819f4e4 MD5sum: d3d540c5c601972131aa08588a339967 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.7-1_all.deb Size: 13908 SHA256: 185ec283e8b9742605175a53101da145dcd0b6956db55d54d82723b8fe48e8f9 SHA1: 2d91780bd5275d5565603b1d6d0e4eb5e53d1906 MD5sum: 4a3ba279be5d15c5a0c3ea8f3f1ee62b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.6-1_all.deb Size: 28028 SHA256: 86ccc6f4587c024fcb561d1022bfba8c4a2c8265d102cc150cc525f42e8c514a SHA1: 8fe5cbeaf54658fef31464737aeeb4eb2e9c21c9 MD5sum: 9d3e2cbdd3a2ec7cf683530f9b0d36c4 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:16.8-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 304 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_16.8-1_all.deb Size: 91976 SHA256: 92c72e98c17c8f202c54538b6490cb23bbe3103c127c645d0ee3b14bb2836a87 SHA1: a7906b40eca3343c4a921ef34c0966726923594a MD5sum: 8a40d75f82007fb265d233c0ee4bab3d Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:16.8-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 75 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_16.8-1_all.deb Size: 45696 SHA256: 9b4c032368f1417e42b266fed20ee3adb95cc9d96dc68fdef23858952ec56d0b SHA1: e696161bc39fa970f8b7e063bfdf63522c14560c MD5sum: afe57d3fe384107093a925929704b936 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:50.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 421 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_50.8-1_all.deb Size: 155552 SHA256: 52e9e2d164042f356b30a77595e6719cd32e5ec48b6036ee8f39908577b30ace SHA1: 05c85f758ef929a160548fad4c7e0a3261f72c59 MD5sum: cee5475808b0343b3b7f62c93983a88e Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: nvme-cli, tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_35.8-1_all.deb Size: 84500 SHA256: 1a2873f03a91e2f18e52d15ec6a1c0d70169198dc100d559c77d6012524182bf SHA1: d13b2f642d49954cf3d0cc43e38761e6961e5851 MD5sum: 52552c13d5d40a16bee786dba686590d Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_35.8-1_all.deb Size: 84508 SHA256: e88a568287240d3ad253925b571c236ba79921aa52c2b46670e4fe2807a0801d SHA1: 83f378b6ecf5462887cd745cd19c4281e5de3c83 MD5sum: add60a16b3790f3ed7f489687063dd15 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 686 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.4-1_all.deb Size: 193012 SHA256: 90d59d191ff14630d86002cece188ff89a3b2e82eabe5a9702e915ec3bc7a42d SHA1: f5d74cdacdc715a4fe36b657f58829ce0e02a1a2 MD5sum: 00809d98d2f5ac7d237b40501e508528 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, gpg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_35.8-1_all.deb Size: 85076 SHA256: 26096bf699e3167a77d8a26375862a90df0beb1943de024febeee3a49c18e90c SHA1: 94a56ae964b4076155c9d8d5fa3c063516c32d7e MD5sum: d3786b66717f85398cb4fbe7718c62f4 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_35.8-1_all.deb Size: 84684 SHA256: 5d230f4684eb4bedf4904536a31692c5dbf3cda00de8a11e23a265f2f9bfe7ce SHA1: 42311e50c1d2c9c6063f99678b909970436aa8cb MD5sum: 0df417ab6c52155bfbb45c437976a0aa Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_35.8-1_all.deb Size: 84864 SHA256: 8399a479b7850bdc3c477ae999a10e821d1af120b3acf1edb986cf1c17af20e5 SHA1: e547f4486692caa43815026527d089f16d7e8f50 MD5sum: f73da5298f35a1115039556a707a54a4 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_35.8-1_all.deb Size: 84460 SHA256: be592910d53ea5dc4e5bae7fd661b44cfaf74bc9d6c6d4133d5ec50f135a6c9a SHA1: 6c6655bfdff1c6b118b49fb3235436e24d8e66a2 MD5sum: 5f8bd6addcf309a882dd64684210e7a5 Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, tirdad, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_35.8-1_all.deb Size: 84624 SHA256: e156a2886423bf75f0ff7a88a1b59f71a0d61534d03e2e6f3e9c9040bbac6b30 SHA1: bbe6f31d6785eaa219f19cef56241aef473a6fa2 MD5sum: 9ad39e678a9be14b46593b3988ae96a5 Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_35.8-1_all.deb Size: 84592 SHA256: f834fd1197abcac758549e3b5641b0c1a8b99c705ee0b26a9cb81cfb04fa36ea SHA1: daee3d180ffa5f16e7d55caf6dd8d9f7d2382a13 MD5sum: 4906554acd279ee3992f1b23e1e0ed9a Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_35.8-1_all.deb Size: 84648 SHA256: 08e11407c23a679ed9210a363b8d154f0936ce7c491c87ccd004251aaaf36d79 SHA1: b67a67e773d262d74ddfdbb9576767aba3c4aba4 MD5sum: f3b62b43710649312c2330b7bc830804 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_35.8-1_all.deb Size: 84556 SHA256: f6d07313276dcd43e5d72158b88e736b09fec9321e87c2d2d73563cbd208e006 SHA1: 8cc3391bead2173fc6bdfacf300ca6602884ebed MD5sum: f4514b1a5748e71aaadedc99f0d22609 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_35.8-1_all.deb Size: 84560 SHA256: ee7de85f44ddded6c613589f13b9296f3cc1c47f5b7d2013ca4024753e569e52 SHA1: bad0abce8e61e623ba0d2d1345af36d24f3b3ec1 MD5sum: 94f5b3f03e5dce0a842dec49e7201bd0 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_35.8-1_all.deb Size: 84496 SHA256: 82be4b62ff28a94bdc8433f815a3c44a267bb1054ebcfef777aa3fea517b680a SHA1: 985dc2ca8c4811ee956d77c68d82acf8f0578687 MD5sum: f486c33ab102d4b7ed45f6eb8f596b60 Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_35.8-1_all.deb Size: 84472 SHA256: b1278f335d8ae7bda3f0df5ec5a136803aecf657c52c6b18fb9faeb564898fe9 SHA1: 0bb2b6e5299799135e4e4aa667ff71df7ba679e0 MD5sum: 4251e8a94fff2fe9b629892c3eb384fe Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_35.8-1_all.deb Size: 84532 SHA256: c1e8abbb646c62c3719b9edcf05d8199ff82264547fbbb3e8c60eea9f007c8c4 SHA1: dabf2901a43333e4403ba183fd952b8b1e969dcc MD5sum: 838ab72064b6111ec823d5fab6fbe949 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_35.8-1_all.deb Size: 84508 SHA256: 88795b3819ed22ea92391ba57e7ed8fdfa1d13b81950636b3f30a03ade0af2c1 SHA1: ab6c6672cdef4cd3b5636032e549816b1b13dd09 MD5sum: 1e786e9dd2d78fbae2360bf7bcd9169d Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_35.8-1_all.deb Size: 84540 SHA256: fe31cbdad25d59b69eb2ce289974a1f45cbb579b47c70e4155a7925ac57c2001 SHA1: b9c255ddfc7d663972257b157521fb4328078c51 MD5sum: 86ba1cbe52ab843a4b903fbfa5312bcd Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_35.8-1_all.deb Size: 84540 SHA256: 21e3f719a006e5b312a6a11945b3e42cec8361f5c5ef9e3d82524d2a18aa4c9c SHA1: bc778de6457a6a20863d34531b32aaa239708565 MD5sum: df650ed5d42b8c7f7951d630d0f2d06d Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_35.8-1_all.deb Size: 84528 SHA256: 11f097ad277fc56b9ba1cb07332b655bbe88f678034ac5b349335851e1c56abc SHA1: 8ede51931e9dfe6e6d05fbd5b74a1c8aff5ea8e6 MD5sum: 366fc783900ffbd6cb3a022220443684 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_35.8-1_all.deb Size: 84520 SHA256: 37e0015bcd0ced378820f6d540c187a4a48c961952cd0765ac2dac85a56b9854 SHA1: 733e971d0b2ca50893d85163c6dd70367c7eced6 MD5sum: 37396cc5a246a98bf7b87674b72d90aa Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_35.8-1_all.deb Size: 84500 SHA256: 0392f8c7c4ede3090d581a81d30d87c1e3d0f3ec4d8cf3cddb44580247d19105 SHA1: 15df32c6fde582bd1932820110a82497509f6f7b MD5sum: 6154b8d7a7ed329eda381f32c34977b9 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_35.8-1_all.deb Size: 84568 SHA256: 6dcf8619d6edca2eadf0193df72b51bb7eda1ac7519aa4c69d050dd73795afe9 SHA1: d28162300471c74d6d84d54dd6a06c934649b96a MD5sum: e560a1cc1129ef3a13c0b052768075c1 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_35.8-1_all.deb Size: 84572 SHA256: 2f56660be01d3bd3705609b9ebddca4b3cfa41a9005564cb901af3b58e758ca6 SHA1: d328695ba3f9b9e54a7d48bc5dde24a3d5020d24 MD5sum: 8543ee1164de5b4d4c37cd69f9840ba7 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_35.8-1_all.deb Size: 84560 SHA256: 7e8304f83b2f0387ec38730e45bf1bdfdebd5821e96b5d0c6f854244c1785889 SHA1: 301f1b402c96fd4f81f92f46a1a42eafc3a43b69 MD5sum: 532c0c2d46898aa1ce11e8f8b276163f Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_35.8-1_all.deb Size: 84528 SHA256: 87b82a3f17882ff107a14c0ee0d92c5a6e7dc54a07dd08917c4aeb08ae6afb39 SHA1: ee7aa3d852885c08c8288f8077806965d309aede MD5sum: 161abeb2e6737d4b4893c4aefa64d3e4 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_35.8-1_all.deb Size: 84536 SHA256: 1c7d192e10adfb6358da794746bb5af929725d1bb82fcd35e2ce5130a45a11c9 SHA1: eed871886eff76ceffaa254b6f6e6fe5d3041ec4 MD5sum: 46c68af182064a26b038f88ace2c681d Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_35.8-1_all.deb Size: 84540 SHA256: 96598e611b3fa2c30ca488638c415316935cbcf14840a5ebaa41232c2b99a119 SHA1: 9c908826ecae21df779e49aaef5444d2b94ba7b3 MD5sum: 463727b4b9eeacc3cd2fa253cb87da1a Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_35.8-1_all.deb Size: 84512 SHA256: d150a9e2e456c3499b25eac482e9d96395ea76ba98e60ace9c020e1256fe480e SHA1: 045435b2dbd2f397a71643705296a44ca24a695a MD5sum: 04dbd782112c0ef599e6e2bf4c729c75 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_35.8-1_all.deb Size: 84516 SHA256: ab525d8fabf1514e6c016a806cfc86cb670bd4cdfcc08ba56b6ad2f0f15fdf94 SHA1: 3aece0346895777016a31e4a9ad40360964e000c MD5sum: 4a0c99f0ad010fe5058354cff5b053f4 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_35.8-1_all.deb Size: 84528 SHA256: 6d4c6c543433200981df8de3cddd9c574c65a59b0bb8e56502f05fd18539f4b6 SHA1: 206dcb6efa90c8380f8434172f4b50625bca0cd0 MD5sum: 71d8d61f3d629273cf8afd8d188f3ecb Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:17.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 164 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_17.4-1_all.deb Size: 61680 SHA256: 7678a95575e8a8637e4e56ffde5990120348235fdb9bd295619d8e411aed14cb SHA1: f8ad667913317af78929f06d11812c05c1858088 MD5sum: 7c1616c581fe73686680b3dc53299442 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.3-1_all.deb Size: 490888 SHA256: d046437346f7fa334b0cef971f0a6732ac3d13d2f26e05fd792bd5fc2d58ab37 SHA1: 5b885600182572cb99b145480a1cf00e3648f730 MD5sum: cf13eecd72090e7117e1c4e42ab8790e Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:10.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_10.9-1_all.deb Size: 39960 SHA256: ce89101786616d17e1fa18c4bbd7b963005926d49ac8070b9a926c13b9dfb214 SHA1: ce8eceb3a7422632d349c0fc6d830b6be2f26380 MD5sum: 392c26436e9ec8bc7bc2bf3e1c965101 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:10.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 63 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_10.9-1_all.deb Size: 31688 SHA256: a79bdf3272dda52f422e2b255827e260f3a1b9f78937af10343e301829278d5b SHA1: 82cdfbc27dddc9b2508c77f7f5febca0b629c7ec MD5sum: 7274a74dbf07e72deccaf3af4ab99908 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.2-1_all.deb Size: 158220 SHA256: fde543735888fbf54002055ace8171e4bb0a58e7cb103c9a909b2de8d7d374a9 SHA1: d86d6c5d078bf869d7016783ac2f76939c383799 MD5sum: bb77f496c08afd14bc7ca350ba184292 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:46.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 968 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_46.1-1_all.deb Size: 257664 SHA256: d07e61fc66d2dfb0c4de7523bf2f1e832a0751feb316889c3b84aed680947f1e SHA1: b806f6ede95bc4418c24a32f4a0ae42952755b22 MD5sum: 74b6b2adde29992e359b1e8786f77a5b Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:46.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 155 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_46.1-1_all.deb Size: 123096 SHA256: aef51487eb5ab1773fcbc4be2a6edb64975481488b968f31c2dd8353861eefc3 SHA1: 03ee1047f52e7fc5c17ff62ffba75f061bb0f357 MD5sum: 98f58dd5484d39fdb7b5673399f7cd19 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.2-1_all.deb Size: 1440004 SHA256: 9378144200a6e3a752c0573094875a312768cfd7c8ee907e232a002217b354fb SHA1: 208a251970fb27b3929cafb46a957054a167d597 MD5sum: fb8943cda1cd798238a370d333005c3e Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.4-1_all.deb Size: 34568 SHA256: 0568b2a039fefc110aa150394ad9bcbd5f3bd72d5d6526d97b27d12df2d00188 SHA1: 5fbdaf1c52a9ac24462de376acfed415a851b827 MD5sum: 8fafe12d8c25eff17360d03286e11a1f Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_35.8-1_all.deb Size: 84532 SHA256: 571a22e37dfd5c3c254e4badb8133c534804be12758a4916cd2eee27ca4b4e48 SHA1: e8d0f189798cff456936acfb4015004259f0ba34 MD5sum: 82ac31e68b69e32c8eb9186df36296a2 Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_35.8-1_all.deb Size: 84568 SHA256: 0eda550ea0422ca72d8256d07ed31fe75fbe7675df2a2c770ab3ae833eac567b SHA1: 30f1e639d6416a126b354d11c863fce1b0877983 MD5sum: 003741cf33816f4160932d34f344b31d Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_35.8-1_all.deb Size: 84508 SHA256: 9e29eb69e387c5f4344565bf57e70b92e57faf3299867946163de48209fdbf79 SHA1: b3ad50bb81113ee0639d846e2b1cbd58cbed91c7 MD5sum: 94ec62f1857f280055df0e7eecae5986 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.3-1_all.deb Size: 2632500 SHA256: f5e4e9beaa7e080bb71194ccf5134262789271ef851da12c8d821d27f13ccb64 SHA1: 04ce6b783bc21213db13167f9ea7af0832c209dd MD5sum: 1f839d954b44eca83aab4f0f7d040e90 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_35.8-1_all.deb Size: 84552 SHA256: f242c0fd9201194d8fd9d8fdc96286f23f44d652f7b4d1dfe17ada519645b9f4 SHA1: 6531f15ec34c8253fe1b319088dafa7e985afab7 MD5sum: 7d7c9110cc558c22697cd4f64ed34220 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_35.8-1_all.deb Size: 84592 SHA256: 657399d309a3f5f3e8c9d965d5f753580bcaf3f7c90a990eebca0264b587a795 SHA1: 42b29b50fe32e0f8765c415894ec3a99ef373d14 MD5sum: 2be7e2c8c5b88430fc04c4af6ccc6dd3 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_35.8-1_all.deb Size: 84540 SHA256: 2a9a4cab806b2b6f7c09e7a04fb3f961f54eff47185bea57858dd1b204de2b43 SHA1: 478f1ab176fcbf5fd84ebf09f756c2dd1101d3f1 MD5sum: 909b35c9e3c1a57750d7123b93a5ec55 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.9-1_all.deb Size: 22864 SHA256: 655af1aaae912f74335aee678a10f8b122945b75a6d6fb33dc4785a8024a60f8 SHA1: 51384d44e39eb647f6d4e4d7c37c833fbd65abb6 MD5sum: 859df84ecaccfd70f9e928054a131392 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.9-1_all.deb Size: 19488 SHA256: 2ed67ecfc4e6d8d74360d83e3e0c30f970a33a8a62c103143af034ed76223402 SHA1: 26149acd768ae533e766b34a5a9fe6d2d73b9f80 MD5sum: 608af953ef551749d55fa14c8b21b762 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_35.8-1_all.deb Size: 84512 SHA256: f0688a15bed7dfd5468899b8e2b814e71e8b04bbeb5e9aefc37db701042998ab SHA1: 729762f9a592a4d21ec5a066812ac7b36705650c MD5sum: 861f7738b5521926e2104e6080b78794 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-network-conf-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_35.8-1_all.deb Size: 84512 SHA256: 667b26890458b06632684d01f02fd1a689c046bc876e370ee8ae5fa3fbd6912b SHA1: ecf7883309e83a7cdd58d8896a76b8fbc7d88163 MD5sum: f88411d3583e9681f6eb723cd071ade0 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_35.8-1_all.deb Size: 84528 SHA256: 3cbb60a3a34eb8a62663887d27cb388c1a282036e123ad275491ff74d4f9a13b SHA1: 10000eccd75cfa82af943a3be495ac413f5db4ac MD5sum: 26b339ea8cacf812f0d4c4b5d7d0e26d Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_35.8-1_all.deb Size: 84520 SHA256: ef0a554a8e3dd1c8dba194a21939e4b6f7ad513052247ac5a7092d3357ab6f3b SHA1: 76ac58791000acac7b28f72be28668d1e9a47f82 MD5sum: c0ae3ba0351bff78be23637e935e362c Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant, firmware-nonfreedom-network Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_35.8-1_all.deb Size: 84552 SHA256: 7d922b76cf25bd05d1eee04ef27096ea8279bf9c788940da934c369c6f0e5687 SHA1: 41af9f500ac0a88da181554206f2532080b2fbf0 MD5sum: de00ae43c69236c13a12a4af9c310567 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_35.8-1_all.deb Size: 84484 SHA256: 8561e2edcda1f8780ddbd753b93446cd78732b9ed5f2663c835f0c1f1ec0445d SHA1: 953ebd109727dd87c44fe783790534cf8760057c MD5sum: 030f854cdbb3069c55e930fbbb424109 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_35.8-1_all.deb Size: 84560 SHA256: 70d3bd26865d3a606d2c3acf28b30029723c64b02842fc649212481f10de989d SHA1: bb3852137167a8e0750226436cc2e3811916742f MD5sum: b4e5f2ed546c1aba308f07ad255a3a0a Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_35.8-1_all.deb Size: 84488 SHA256: 15e137fb8ea4a7bfdd60fd096d30387e9f780ea1af501302f745375252a5ed20 SHA1: b686105f0010fbf404bd3571e679cc0daa1c213c MD5sum: c6a5ace62cb0acbbaa0ca121a9237642 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_35.8-1_all.deb Size: 84484 SHA256: 22ea92e6b590b92f8b6a86a39ae911e76466dc8028b9a6336157da8f9b804be9 SHA1: 1dd5dad8617ed9b9da691e7bc8463d2f07bf84ad MD5sum: c85b0caa9b242a689f93215800294459 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_35.8-1_all.deb Size: 84568 SHA256: 7f773210611d539ce79bece78623639c989f65f92f5baa72643b5d8739506f76 SHA1: 90437b1283defc0ba9d46ffd9d8185fb647d8067 MD5sum: a870287a5d4b94079e1412e992f2e4c8 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:35.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 111 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_35.8-1_all.deb Size: 84504 SHA256: 0b6a26ac7225902a808ef2ba16a95fc4339d98684af6535922096fd40b862718 SHA1: 3264dcee11cde77cf314a21b83b99e7f254cbf17 MD5sum: 969cc9628780fa9d39b3de9a65c6c120 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.7-1_all.deb Size: 922556 SHA256: dad058a70e183c212ad660f4aeb0149772718f3b335cd6dbdd11f67c08621f65 SHA1: a18b9e85c08286e4ac900248b34c9dbc296ed4fc MD5sum: d2583cc1d1b15564feecc40c484da1b7 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:19.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 146 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_19.2-1_all.deb Size: 58704 SHA256: 26195808726cc0664f4e04a49e0c240d5c073a0cfff6d4a24551b429a4bccf1f SHA1: c7058b0a8e8400dfee8c39ea9688a7fc256111d0 MD5sum: b02c883b9437cccd071f1ce985792300 Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.8-1_all.deb Size: 55936 SHA256: 1decab7adfd5784713815bb059c502335d91b6cac8a5958d6ea81b5a19488f7a SHA1: 9d10851cb6592bca52f70f7e3bfeeab8f17afc8f MD5sum: 05d6f63b603f24a761786aa3cf9a399f Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:9.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 314 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_9.8-1_all.deb Size: 148984 SHA256: f82c29110925dfe3ae0b2029c08c1196a090e7a3f4ee71e56d0b9450464c014d SHA1: 9def7833d1e4e5a527e71e6befb86f95c0104e9f MD5sum: bdec449f1b2df706c8f86acfe44b5c00 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.5-1_all.deb Size: 342108 SHA256: ffd6c93cd5881c69578c603259f63e3f0fbb80f4ec8bc2bdaf30533b332659c5 SHA1: e74363a30b413e9526bfb1baead75082dd1ed259 MD5sum: b79c75db4bbc415dc5e022d9a821653c Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 153 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_4.7-1_all.deb Size: 46436 SHA256: c121d06d4124cb398a1ccfcecf70a51a17cd0faa01540225ab538eb2abebfb23 SHA1: 4844db173808e33e489fb37c0fe63bea7b736e78 MD5sum: 1b5fd00bf8eb84633a53c98df44924cf Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 217 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_16.0-1_all.deb Size: 71492 SHA256: 4408d838abdc7deb9e6c4ae41392383de93f80fb13217cc5fb2248e90fda570b SHA1: babe7ec6a46c2e2f7baff5a920019fbd54f1a47c MD5sum: c76b72567083158b4a8add8a7fc5ae8f Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_16.0-1_all.deb Size: 50084 SHA256: d97b3cf02f21adb1bc6ddb6bc8cf0a37e15805f2e2f3faca762419a3443f9123 SHA1: c22eac4efce55beda2fa2280396c29d740bcef1d MD5sum: 0376f6281dcc7143c1bf47651e214fb1 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.1-1_all.deb Size: 34908 SHA256: cc67c51209edea9efeb08bf0a11fae09588dd99a2a2e83f8c44590579fcd1fa7 SHA1: 10ec5c3c86216dd2ff3adcb8f9785afce40e5d03 MD5sum: 0f59e3913e08c33a3f4190a5c779cc67 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 386 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_5.1-1_all.deb Size: 73096 SHA256: 8670d4207ef086c63bcde64cd385724acb8d638e7ffd3ad37232bf3da77a4786 SHA1: d1b2d38704ace53b9e0d45d54952c78668b69508 MD5sum: 0cae6b17d38a1aa804cb26552d38cb7d Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.5-1_all.deb Size: 36692 SHA256: 9f9ad12520d33f1551d0546e37766eff637ecfd63fab2a3be75a8d7029f406fe SHA1: 6f95b18ecc08984401ba4a2cee6e04ea754a2826 MD5sum: b68dd790aada8d798fc309635d5d18cc Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.2-1_all.deb Size: 24980 SHA256: bb166f2e4536bcc2276d5bd7c8dbb4044a7795d59032ddcc0c34d6c89fe133eb SHA1: c6ac0941040172114e4da6f72c04eed704ba1ccc MD5sum: e4ae7bdb87bfec7ff2048ab396f6927b Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs-tools. Package: repository-dist Version: 3:13.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.2-1_all.deb Size: 112560 SHA256: 2c0c4df38d2d824e13e67d8b68bb86a8d79d5c1ac4b163c7c97cdc432cb5535d SHA1: e6c3a9f2d51f961c8c2721ca2f9447fb351ef218 MD5sum: 7d4c42080f7d71af1d3bce6b4fee238e Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.2-1_all.deb Size: 41212 SHA256: 708752becf65b0d3c4b2a4aa4a9c515c1e2d62b75c6fc35e2f6c4feede1a7545 SHA1: 762e040bb2d70ac03ec0953a7be712d138a2b8a9 MD5sum: b55b208a720274cc26844192f638d6ac Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.4-1_all.deb Size: 19648 SHA256: f02f010e5c16e48f19d196a4cb98e331c5c8c738a13ba4def5da44f411d3ad13 SHA1: 9df20e2b5c06eba1bbcaafb0b06bbb4d9c34015f MD5sum: ee48fcae2f3ebd17dc0881c95a3b7640 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.3-1_all.deb Size: 49068 SHA256: d114d5fc42a6a5d5d6d2cbc4f4e52757dc9bd1c6fe3654c278d30a1cdf0c1b23 SHA1: 9e1106436835ce41dd7d40ac4f86270c1a15ffb7 MD5sum: 1b2be03c1467f57c664a789300b962b3 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:27.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 346 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_27.5-1_all.deb Size: 153700 SHA256: 4f67823559f76f33b4e788c227097efdae71b48d95465c2b5c275f2fe6263726 SHA1: f683eabe9a7a8e90752e94a0d91867d16a0ae699 MD5sum: da67b1644981e6f76a97b60b1b8feaa6 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:13.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 280 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_13.7-1_all.deb Size: 105020 SHA256: d98643a609c802258468cbc45b8e80bb0b316d16036792bc3fc1010a450e74ef SHA1: 815abae0ba60094f09153400029fe1c491c31bed MD5sum: e048e518ce88916ab92f8df846035e0f Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:51.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 215 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_51.3-1_all.deb Size: 177036 SHA256: d0e6b010a9e2c4f8cfbfed9df35c4ca92be518aeccfb6794c86fff3978035ddb SHA1: a8135ca27ca959509e825e69dc2b829aaf6b3939 MD5sum: b5e90a660eb4e5bc79d45714916654cf Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:51.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 203 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_51.3-1_all.deb Size: 175912 SHA256: 882c67937fdddb434228454feb35fb34d46673ef8324327a0e7c98083cca5ff2 SHA1: 8c9e11c0dda92d342c4ec7803735d789e0686af3 MD5sum: c0bb10380533a0bb9638bee7b9218317 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:51.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 762 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_51.3-1_all.deb Size: 262580 SHA256: 22630711866f60f7bc7b4f2592578ea3ec37fb35449b6dc06cddf20d572af45f SHA1: e1574f9bb53fcd18c08c5afbcbeae687e49eb478 MD5sum: 5d8e95348beddac299714538d243b055 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.7-1_all.deb Size: 18388 SHA256: 4457fc290936428f1a1535cff54e79bf56b596167b58a67c5e50d0dad47f8902 SHA1: 8427733d56e011533d717ef66a4c7865ca045c6e MD5sum: 8e48b27742b459c08631390a6d343a2f Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.1-1_all.deb Size: 42792 SHA256: 0e98cfff9f17a2348f725d15b82f82394da375b694806acb774816e8971d820b SHA1: cbc861ec6b1abd92e8451f97c3c77822cb619036 MD5sum: f3d340b036b8667cdf096a1048033b99 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.2-1_all.deb Size: 61196 SHA256: 70856f61d1dcd0fc5411f92cd43b4d6fbf9fb3c6d7e6a1744654b49971d88c06 SHA1: 1695651331902ed0a2108728c5ce5de113ab4edc MD5sum: 7c35bf04145bf63c7b715ad3364425b1 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.5-1_all.deb Size: 37888 SHA256: 5b4157a72e84b90886f5507af95e81c3472ebb8a794fca6a967eef9995858325 SHA1: 66c69f56198e4fd4e69514f2544e9f841e1d44c1 MD5sum: aa7d23c7ed53aba78d43bb1e07c19538 Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_4.7-1_all.deb Size: 31876 SHA256: 73a9cee96011dd98283f74e87770954b2b38a9df11df12de686476c144689c8d SHA1: da82a35281c3b9d1fce664af5ff2c21b20a0d4a4 MD5sum: 26d58d0fc965f7e0cd99e7bd94b4b685 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:49.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 606 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_49.1-1_all.deb Size: 200532 SHA256: 077d2dd2fd3f81e8d4435dfdaf67a2dddd23609b530d361fa468cecc2fe9d82b SHA1: 0431356d7c4f6485d9941fa7900de3b1e7017c4f MD5sum: 5e26a8343a341808eb8805211fdfb8b9 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.1-1_all.deb Size: 28876 SHA256: 77cf3ab93c93cf5c05ad5c38acfa9aa3c4a312df71ce0aa7b65ea784cd8c97f8 SHA1: f019798f58994ee8e84cebb762b1ae93e4bfb034 MD5sum: 2a70ad8599c22738b4225e7bbf14cf40 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 171 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.4-1_all.deb Size: 68272 SHA256: f265c0eb910a81d78a8820a58b5e5f3afe31c57c8818ccc10cb987dd6b474524 SHA1: c3c828c79216f9a5720d5d2d89a696557d79c44d MD5sum: c891a53981be1d023c654da8f08c291f Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:42.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 471 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_42.5-1_all.deb Size: 248028 SHA256: 6e43241a4121c69e8f43607d59f77646eee32e96309295007d2b736c3d06a4e2 SHA1: b66c00638af86b57508f142e2d1bd76547d01fd9 MD5sum: 68dd4e177ce63b4090abaf94e41136c9 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_8.4-1_all.deb Size: 28176 SHA256: 9b55f9e2ef6a94ec9b19a1278840e854618004426807017acb69f454ed39dbb3 SHA1: 3170a8cb0752f482f41c0c904d428c68e3ae49e4 MD5sum: a815a02ff3dc8895ebd925b312a72d85 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tirdad Version: 0:0.2.4-1 Architecture: amd64 Maintainer: Patrick Schleizer Installed-Size: 19 Depends: tirdad-dkms Homepage: https://github.com/0xsirus/tirdad Priority: optional Section: kernel Filename: pool/main/t/tirdad/tirdad_0.2.4-1_amd64.deb Size: 14928 SHA256: 7b6dc2480d6ce3e01e352d81bbc0cc5c790a5aed143066ece524961e5bbd95be SHA1: d8a5c8c73226356003c1fb6078f87fd0a77af104 MD5sum: 916b35602f1f1902a76b39f24826e370 Description: TCP ISN CPU Information Leak Protection TCP Initial Sequence Numbers Randomization to prevent TCP ISN based CPU Information Leaks. . The Linux kernel has a side-channel information leak bug. It is leaked in any outgoing traffic. This can allow side-channel attacks because sensitive information about a system's CPU activity is leaked. . It may prove very dangerous for long-running cryptographic operations. [A] . Research has demonstrated that it can be used for de-anonymization of location-hidden services. [1] . Clock skew, . - is leaked through TCP ISNs (Initial Sequence Number) by the Linux kernel. - can be remotely detected through observing ISNs. - can be induced by an attacker through producing load on the victim machine. . Quote Security researcher Steven J. Murdoch (University of Cambridge, Cambridge, UK) [B] . "What the Linux ISN leaks is the difference between two timestamps, not the timestamp itself. A difference lets you work out drift and skew, which can help someone fingerprint the computer hardware, its environment and load. Of course that only works if you can probe a computer, and maintain the same source/destination port and IP address." . Quote Mike Perry, developer at The Tor Project [A]: . "... it is worth complaining to the kernel developers for the simple reason that adding the 64ns timer post-hash probably *does* leak side channels about CPU activity, and that may prove very dangerous for long-running cryptographic operations (along the lines of the hot-or-not issue). Unfortunately, someone probably needs to produce more research papers before they will listen." . tirdad is a kernel module to hot-patch the Linux kernel to generate random TCP Initial Sequence Numbers for IPv4 TCP connections. . You can refer to this bog post to get familiar with the original issue: . - An analysis of TCP secure SN generation in Linux and its privacy issues - https://bitguard.wordpress.com/?p=982 . This metapackage depends on tirdad-dkms. . References: . - [1] https://www.cl.cam.ac.uk/~sjm217/papers/ccs06hotornot.pdf - [2] http://caia.swin.edu.au/talks/CAIA-TALK-080728A.pdf - [3] http://www.cl.cam.ac.uk/~sjm217/papers/ih05coverttcp.pdf - [4] https://stackoverflow.com/a/12232126 - [5] http://lxr.free-electrons.com/source/net/core/secure_seq.c?v=3.16 - [6] https://trac.torproject.org/projects/tor/ticket/16659 - [7] https://phabricator.whonix.org/T543 - [A] https://trac.torproject.org/projects/tor/ticket/16659#comment:10 - [B] https://trac.torproject.org/projects/tor/ticket/16659#comment:18 Package: tirdad-dkms Source: tirdad Version: 0:0.2.4-1 Architecture: amd64 Maintainer: Patrick Schleizer Installed-Size: 38 Depends: linux-headers-generic, dkms (>= 2.1.0.0) Homepage: https://github.com/0xsirus/tirdad Priority: optional Section: kernel Filename: pool/main/t/tirdad/tirdad-dkms_0.2.4-1_amd64.deb Size: 16624 SHA256: f467c9a2e5d1f0bd3e362b1927d1aec9945e24e60cd87a5bdc2fe4e0a344afd2 SHA1: 1506d89d33b2c3c9e37205cf7efade38be15297e MD5sum: a8573ad1899d0f8053c99d8bb7855324 Description: TCP Initial Sequence Numbers Randomization - Source Code and DKMS tirdad is a kernel module to hot-patch the Linux kernel to generate random TCP Initial Sequence Numbers for IPv4 TCP connections. . This package uses DKMS to automatically build the tirdad kernel module. Package: tor Version: 0.4.8.18-1~d13.trixie+1 Architecture: amd64 Maintainer: Peter Palfrader Installed-Size: 5815 Depends: libc6 (>= 2.38), libcap2 (>= 1:2.10), libevent-2.1-7t64 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libseccomp2 (>= 0.0.0~20120605), libssl3t64 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.5), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.8.18-1~d13.trixie+1_amd64.deb Size: 2058276 SHA256: a0c0e5dd247d0907b40f2d8582feba324b60eef075b9df121a6ba6bae84c3d56 SHA1: 9bca60cf05c1369698a1908dec728739d59b9252 MD5sum: e0b2312b405e601407242a785801cbeb Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:8.0-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.0-1_all.deb Size: 71652 SHA256: 103f0e4c0b61292d2322e8588d46233403d715067cf107484e2efaab141d71d0 SHA1: 238d0ef7687a9159478451907f3b63bbb234b3a9 MD5sum: bedc2c98f9792909fbffb677cabf06b4 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.4-1_all.deb Size: 30348 SHA256: 7009dac131b6e27f00755d0daeb8d35145ed8b79bc255c8d43eaf47dcf4055c8 SHA1: 7d8a55607faab90871824977d4a82a89b08d6705 MD5sum: 99de1e5c81560eaed6e4267ec41cc788 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.18-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 21151 Depends: tor (>= 0.4.8.18-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.18-1~d13.trixie+1_all.deb Size: 2480972 SHA256: 631da58912d92d7cfb07426646eb309310039437e1394f9a9dcb2897d6a25495 SHA1: 6d5edca3164679dab6270c2d496658f010259b90 MD5sum: b3f68a95b363eb504510f6730252b9ad Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:35.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 794 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_35.7-1_all.deb Size: 252036 SHA256: 3957954b37ece3f8cc5f575049930d136ee603a48b0819e8d427c2ab7569e020 SHA1: 5146820c9e8db3a7835a17402d6c72e85d7a6228 MD5sum: af927a0cbae6fee71096f133b2ad2dc1 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:10.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 195 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_10.9-1_all.deb Size: 53528 SHA256: 97c068339364537f08df572c5e3c0c5ccbd8dab86c909a9892d9040eddfa3b76 SHA1: 8b8ca8e61faacb54795dcca77c7df6fdfabba1c3 MD5sum: 16a09daf9064c34c02e37443459a4f4b Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:15.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 190 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_15.3-1_all.deb Size: 58568 SHA256: b1f3e8807b6bd685dc3e8245236c7434506701637c04152e331cd90ab849e875 SHA1: 575ee5f6db0566c379fdcc57a806d0481c9933c5 MD5sum: de186558aa7bf3cd928386942b49fa32 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer