Package: age-api Version: 3:0.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: helper-scripts Homepage: https://www.kicksecure.com/wiki/age-api Priority: optional Section: misc Filename: pool/main/a/age-api/age-api_0.6-1_all.deb Size: 15296 SHA256: 1cc69d38d7a494b0f890a19f1c35c34d5b9151d0a4b5f1a8158520e91c2a96e6 SHA1: d2511eefbd55265213130e55f99d359e3c93ed3b MD5sum: e29e11da00482eadd28bc51cc67314a6 Description: Local age bracket storage and query helper (age signaling) DRAFT: Nothing has been decided yet. Much better places to get further information: * https://www.kicksecure.com/wiki/age-api * https://forums.whonix.org/t/whonix-adding-age-verification/22969 . age-api provides a minimal local mechanism to store an age bracket and query it for age-signaling use cases. . The age-api-query tool outputs a machine-readable age bracket number on stdout and a human-readable description on stderr. . DRAFT: Final implementation - if any - would look much different from what is currently implemented. . See also: https://www.kicksecure.com/wiki/age-api Package: anon-apt-sources-list Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.7-1_all.deb Size: 30872 SHA256: 82b0f0c4f50c89c9f4bf6ba712ab31c90fe48459736509c49910b296e19cddcc SHA1: d4bcd6cb30b3e80e35f1fcc6f2f44749c1517b53 MD5sum: afd5ce0abf179818e5a6ed4d8675d4d6 Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.4-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.4-1_all.deb Size: 95412 SHA256: 4d91c9bcc0206781e6e647d71b66f65f1c9e898006531415ae45951fa52b94b6 SHA1: 5e346e606da33354aec822c976edea28f50b52e0 MD5sum: 82a35a03f3fa7fc973e0876f100486cc Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.3-1_all.deb Size: 65284 SHA256: 69ed314afd354902a312e790a2d8f34440ace4d23d2e4b199323d5f8a3076d81 SHA1: 205d7daffe505faae2c75d13fd5ccd53ff812783 MD5sum: 0cb95c65ddd09d26bf6a40ce8a059511 Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.2-1_all.deb Size: 36392 SHA256: 46cba5d279c0a5cfc2c9833b762164443bd061009bc9ace842f88aaca82e6378 SHA1: 937d3a47cca787b2284f305f03cac6be64e6e324 MD5sum: ab675d9d05ff2f80da9aab4902f65b7b Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.7-1_all.deb Size: 24140 SHA256: 87e892db0db1cfbb9e777cb57e803140f80d7452332daae592e51a246b0a5595 SHA1: 63f6fd859100d34e0250d3b9b46b6140dccbfaf0 MD5sum: 5abba8d6fc4062170f0f454cdd88fc88 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.3-1_all.deb Size: 27288 SHA256: 1d6d93cbc57e21ab935acc9f5713650c47cb754f4d20e93143ee0188a2cff52e SHA1: 25becc44047b543196f2aa3a07897a52c45471b8 MD5sum: e04b6408a6114387f56daa0e871de265 Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.9-1_all.deb Size: 35080 SHA256: a276a11ba5f4a4658bb4fb7ee0b764f78d6d446ef665aabefe17ff3af6a8c35d SHA1: 4dbe393dd2e71c5b6cb7c25c77cd66afe36fc5cd MD5sum: d937d85ae04c5d7444fe7a65e3277c13 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_36.9-1_all.deb Size: 86256 SHA256: f73d27a35237c9195b8ae224a0af27ead3de6ed25fd23112ae24ddc1c65c38aa SHA1: 681e24e0eb1d6fe90b8ae4f4fa3adf9ff32a68ea MD5sum: 9a6f44d3f2b2e27eac318f51b228ba8d Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.5-1_all.deb Size: 11492 SHA256: 3d78fd9075cd4974878a907f4465885df98967532df3ef317fdad8b113c502dc SHA1: 873cc93a10cb95a325968f4582a2ed78d975ea54 MD5sum: e8a66e63f8989738fda944b6afb39488 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.8-1_all.deb Size: 15896 SHA256: b7216eb4d4cb2f290e7d5bbf5b1d51640c050ca09753217ce44b37e8d0cf5e09 SHA1: 8b538e5cf4fc34756276334c7971aecc2628df25 MD5sum: 55f84913b975866902f18157628e5194 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:8.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_8.1-1_all.deb Size: 32168 SHA256: a2e422dbe37cc98a3032c39a22bad92068859a6dbbf863454beec862853cf653 SHA1: 63c502f3d975e8eb1fc7179fc229327d001d86de MD5sum: e22548d06b7b0ceb0007e0f9c0619934 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 286 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.9-1_all.deb Size: 62796 SHA256: 8c147dfde7cef15f5b51965a87efa958c664a51073198c287eb13378735e7ae3 SHA1: 017ce900007115f7f6d5d30d7f72155438d2e4e2 MD5sum: f48e545f25c3f02037109eb600f63f16 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.9-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.9-1_all.deb Size: 129384 SHA256: acb936338d60918ec0768b7b11a955c5b7d2a4cc86a745a48245ee557b46880e SHA1: c705fd8dc697d9709574428851bf3d20ea9403b1 MD5sum: de2d3bd03e3e45783d2935d358473f2d Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.9-1_all.deb Size: 14140 SHA256: 208fcd2049b3f0634bed412c64bff90a0cda0c45a63283df562cb7a4ceece401 SHA1: 4f5c9fb97688cfa33006e86d7e5f0618ba20caa7 MD5sum: 54dbb90fa710892a6050eb32ec807852 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.8-1_all.deb Size: 28268 SHA256: 137bbb2f4564cf7d584a8e73dd528ae0f850d0e003fa7113e27ecd6f1241de12 SHA1: adbe4ec9a96b80380cdbfc2c805561509b5f58a9 MD5sum: 6f392cac950a16ad275017040a8a499b Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:17.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 346 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_17.9-1_all.deb Size: 99932 SHA256: dc8806c4b1a39d5c9392a12168be21cca5571972cd166db42479e8f4510c05f4 SHA1: 3b6cb016e03b958ae102af215575a0b6852b0bdc MD5sum: 623d33220d6a2bb90c2799950f232448 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:17.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 76 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_17.9-1_all.deb Size: 47688 SHA256: dc13520e18d6802fa345a22ddceb05119ebf5ea9abf291f53dbc5242b8bb8e1c SHA1: 02b1ab3d779ee0df8da957d86ddc52c6677e4f89 MD5sum: 8e57805b3e5a751c66858f1df03bbf5b Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:56.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 827 Depends: python3, python3-debian, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_56.4-1_all.deb Size: 381636 SHA256: 451e01a0e154c3bb38c20784b43f4383c641332efeddad158aa5794197cb5a57 SHA1: 7558c96a0a9afaa8b092281464ba28ef0825ee2a MD5sum: 4704d19e4bd7d65d2cdfb46c8edf5d3b Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_36.9-1_all.deb Size: 86184 SHA256: d997b19fdbec9ca6574cebb11e00d133a7b8fe1ac3382304a2236f3a1e34f01d SHA1: 86f50892ef426a9c070ac85892720c7691b0df6f MD5sum: db7d15354a231da7d3238598cc6d8151 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_36.9-1_all.deb Size: 86208 SHA256: 55237eed85bbaf375eeb0de190f544ca7120fd212252c375609857a83d110e69 SHA1: c511122eef6da6316aff3061ff670bdf22f9e71f MD5sum: 4db907cc63c4dc6e3c3aebb07fe86089 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.9-1_all.deb Size: 194384 SHA256: 34b0f0d6d17098ce9c6c487ae3f75b92db1a2280c2184a52d1a289382af67d58 SHA1: 0a8733495f70690f3cb97abc8810963b31f80e16 MD5sum: 42a959a6c3698c73ebb06602ecc38f73 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, sq, sqv, sqop, sequoia-git, sequoia-chameleon-gnupg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl, mokutil Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_36.9-1_all.deb Size: 86816 SHA256: 206318ed019f842b9f4884094e07ebef9e0d11304f8b84b2e62995c9a7b11e6c SHA1: 76d7e48ebabc17aa4565504fdd32b661498383c9 MD5sum: 36c391b780d963603af2a2dfce4c310a Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_36.9-1_all.deb Size: 86380 SHA256: 3ee251874d04d6223ea0db0f6d5851cc9c3a6d26d0a2ea387ba81583304fff50 SHA1: 3d50c3bb478fc51cd6a213d48ac173e6c10fb116 MD5sum: 64c1d611f9cd5278b23e3a4abbe5cba3 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_36.9-1_all.deb Size: 86556 SHA256: 2e39e2e57d2441aeeef5445accb56f33609d3378b588535fab905740d41361ac SHA1: 06b90ae2fd14cbb161cac3549d6376aff689a0b7 MD5sum: 03bd9601429676c4123ce808842ec951 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_36.9-1_all.deb Size: 86160 SHA256: 0435d58e06b6d02fd07babdbceb9f9d50d810b7b042547e004ad14e7f2851d0b SHA1: 2364f7d7c11fb98644f403e5f9e7f4c03be06473 MD5sum: 2f81d7f82367582856cff3ec5a9cecb3 Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_36.9-1_all.deb Size: 86304 SHA256: 51c2d5584d1e3b0502ae87acdd79a97a2ac55b526d6ac05c6de80d83409598b8 SHA1: 0851cf24aff8491ea128365898808a84181c963b MD5sum: 81df275568834f96ca7cdffd48e0843c Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_36.9-1_all.deb Size: 86288 SHA256: dd533c1260ac12f3301b16c3f7228d7708d8f23b630a972918565ba6f46c2ca2 SHA1: e0294ef2e655b3e826bc963b8cd6d061b72520cb MD5sum: 29165b3c3ce6082ff267f6f0548c18a4 Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_36.9-1_all.deb Size: 86344 SHA256: b78ffa8b2281f4f9e4e09093d2d3f1e2f2da8c634b3c65855a40c5c5b2ce0dd8 SHA1: 305599bf03606a809346e7996988eb675618c523 MD5sum: 4bcd71e0b58446c8b21c8b21aa907ca7 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_36.9-1_all.deb Size: 86248 SHA256: 09235776383d0781dab7ae5cbae5741c5d3ffd0d970f70649cb68ca1e3a6505d SHA1: f9af433e558ac7828502e7bd6428f5a6377a9b96 MD5sum: 685660451c955492e1edfa2a6d2f8a01 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_36.9-1_all.deb Size: 86256 SHA256: a4a8091008092eff569e4bffd552022e87b0d734aa6852b4f17ecc16fa41193c SHA1: f6fa0dc982721bb6a97908cdabf29e899c8aacbe MD5sum: 2d1fe2e08cd4f0deb8216fcc404e3f97 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_36.9-1_all.deb Size: 86180 SHA256: 5a56229bfb29274c5a1d2e9710479d22bc451b12b1734d736f31caa77c4b1f76 SHA1: 1272ed4c382603074c3d8c2745ec44b24eb28fa7 MD5sum: e0da3b5dd6e5304a7cee23c798cd13ca Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_36.9-1_all.deb Size: 86164 SHA256: da96a0b268ce272e7201e3bd510ee455a73d24148d27adbaec4c51bc840c06ea SHA1: 00962576041055842ef6fa0c3130bc6be60abae9 MD5sum: cd66cd492a35084a49c4ab9e9d175fbe Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_36.9-1_all.deb Size: 86212 SHA256: b70514826574f923636e9d1d84ce0ac30bb8a0175e7ce7b06980b7ae5041ffe6 SHA1: d2ba11cdf7068db270070d34386c69566e938c18 MD5sum: 81419639f7ff7da1f984f6d3b5b50c3f Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_36.9-1_all.deb Size: 86208 SHA256: dc1ef9eccc8b7d2f678c685fac55c1548654a812cad33c47e02e6a91a1b652a0 SHA1: 8205535e72d011a5e201ebaa142b3d241caaa4cf MD5sum: c0161067dbb8742d345bed12244fc1e8 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_36.9-1_all.deb Size: 86228 SHA256: 1cf03eefc8db8c3846ef4fbd878d6ebc3a4a3a76ba794eb2e9588a9bdb9fc8b2 SHA1: 908ec9f355b509258efc94c0bf98d8c670f57d2d MD5sum: db2415420d317552a1092e9a1eaa0a3e Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-efibootmgr Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: efibootmgr Provides: efibootmgr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-efibootmgr_36.9-1_all.deb Size: 86236 SHA256: ba66593e6ac1ad3354a5ad52024caeb79b20d9644d92deec3db5f7fba600f592 SHA1: 7c195f79dbdc921052571f130a35a8441dac492f MD5sum: 9edfffed721c38ef69ab63e764bb21f5 Description: dummy package efibootmgr A metapackage, which satisfies the dependency on efibootmgr. Because efibootmgr is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_36.9-1_all.deb Size: 86216 SHA256: 93510e05171b5090807ec3ba217b79714aa5652d03d8dca1f741f46a660e6067 SHA1: 9ca04b762e5e022abb714e3068617c33a7a441f7 MD5sum: 8b6e1bbe8c41ee7caf6743624a145915 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_36.9-1_all.deb Size: 86228 SHA256: a27a2ef01dfe8d95e27ce6fc1c7f3bfea6d56b62b546e39a96ac825542d2f755 SHA1: 4734468360bd365521cd921b7b25b74c2985ab5c MD5sum: 35615ed0d74848dec864619beb1c5ccb Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_36.9-1_all.deb Size: 86216 SHA256: 8d2f609649cb74e239a36a63ff5f355cbc566bcfe18f510735e61afc4b05662b SHA1: 8732a2d42adf8009d521092d6801a14d619fa196 MD5sum: a77830be6a2029d98f25c87baaa33c80 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-keyutils Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: keyutils Provides: keyutils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-keyutils_36.9-1_all.deb Size: 86224 SHA256: 4900ed833cf4e5c03114205de2fc055580307f4a7c4347b4ef748721d802de3a SHA1: bba647eaae9f6f88551d2de2a9d53d5b1678c762 MD5sum: 6f8a3c1f1b4b1f70c95e7c36a83baad2 Description: dummy package keyutils A metapackage, which satisfies the dependency on keyutils. Because keyutils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_36.9-1_all.deb Size: 86208 SHA256: 3a8b2451f81e9cac0593e3c4d205c08124cb83745ed3390511133964d9d86488 SHA1: 55a335323a4d4395d5861676930af8c6e6d64078 MD5sum: 5a6339dd94661929b773480a2487a1ca Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_36.9-1_all.deb Size: 86248 SHA256: d1f37d187f96e649f27872fa49b81ac6b356d021fb84d4165860bb6e4b34596c SHA1: f078b51f2eb569f5a5917fe598ffce7f034eba5c MD5sum: 5d734111af53e3a398c5298d269b68d0 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mokutil Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: mokutil Provides: mokutil Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mokutil_36.9-1_all.deb Size: 86224 SHA256: 7eb760004386da7c4815648b2dda69c6a8f08ab4ad45dfc8b9a57df02ceadade SHA1: ef46362ae6c92f8e19c8979053050e91ca98a329 MD5sum: 0507f39c078b404b8e629e24586461f2 Description: dummy package mokutil A metapackage, which satisfies the dependency on mokutil. Because mokutil is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_36.9-1_all.deb Size: 86264 SHA256: 25229b2f99c70b4df554910fefaaefe6607053b67f2c25d481a639af4fc1eb2c SHA1: 52cc03c4b8a937dd3942d94ba0c15a20d16216ff MD5sum: 77e6dd297416ad72b95f78245f716ec0 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_36.9-1_all.deb Size: 86248 SHA256: cc59582fb5d37129f97e8a35c8e1b42a8ed7f4bdab4457fb5740a2018cab2ead SHA1: ea205713d48bd135f9ac7d52debf187eb40f4525 MD5sum: 22d057a2420c080097ec3f033899b115 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sbsigntool Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: sbsigntool Provides: sbsigntool Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sbsigntool_36.9-1_all.deb Size: 86232 SHA256: 51ecc95ea28c11b1a2ab0454e6ce4be705cf9bf97e652f3e1ba77623672a82d1 SHA1: 14e2c2b7823b5bfb56d0034acc90ad44730c7405 MD5sum: cbb309bb737f8dce09f8ef398860e01b Description: dummy package sbsigntool A metapackage, which satisfies the dependency on sbsigntool. Because sbsigntool is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_36.9-1_all.deb Size: 86208 SHA256: ab4ceb954e9013cea2f015893bc2062e47f4ce2c5efe7b161a711ec8c97d25ea SHA1: 1438c852ebef486f81a5d60bfa58aeb49c25ff05 MD5sum: db709a3a8787cf2632b25fcf1122c1b3 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_36.9-1_all.deb Size: 86216 SHA256: f8890a77d12d6ace011f67a91a331f1b5e9d0eaeceb7822d0c4ca2a8316df32b SHA1: 6396c6e5ad3b072193c0c5965e555b81afc0f6f9 MD5sum: dada78ea18e18738de3878ff11639b4d Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_36.9-1_all.deb Size: 86228 SHA256: 593405757ee43e33a573fcb3dfe97885fc6bbfb86df730d7dbbc3376b943349c SHA1: 550793aefc92165320103068a042a0be2882f930 MD5sum: cfe127339cf3e541830a0941c5baed72 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_36.9-1_all.deb Size: 86200 SHA256: 3ac43ec2727697a75a025ab330d0b7cf4788c755ce9b1d8e467bbf88503cfb0b SHA1: 8fc33b0fab60911f9ae94effaae9b4699947a474 MD5sum: 1f048a2c033de4f05aef08ee149a8032 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-utils Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: virtualbox-guest-utils Provides: virtualbox-guest-utils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-utils_36.9-1_all.deb Size: 86244 SHA256: 210e3fb50920cabfca46433f6fdb1914925726429731649ba9dbc10507a89c03 SHA1: 8927d6178a8a585ef119b7842b7c27b253b2da2c MD5sum: 0b93fa049cff3f56aa140eb1982d51ca Description: dummy package virtualbox-guest-utils A metapackage, which satisfies the dependency on virtualbox-guest-utils. Because virtualbox-guest-utils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-x11 Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: virtualbox-guest-x11 Provides: virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-x11_36.9-1_all.deb Size: 86244 SHA256: f6b557c26661d43ac29ccc0031eb5463d14ea526f56dfe52e98fef1591f3cffd SHA1: c4c40985a26823e1e201171e3ec44cee9a18e82d MD5sum: 2fa9c3f9bae11f1ab1ce476d73d5e50a Description: dummy package virtualbox-guest-x11 A metapackage, which satisfies the dependency on virtualbox-guest-x11. Because virtualbox-guest-x11 is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_36.9-1_all.deb Size: 86212 SHA256: b6ebabaf7f484efb9c951d81e5492827d18da8924dded12cccbf259407e3f29a SHA1: 9e3e226e8754e19b3996c7445c87ed62809b8db9 MD5sum: bbb1af8ccfd4a6aa0fc0896c757701e8 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_36.9-1_all.deb Size: 86232 SHA256: 17a3be96c5d57255fc70c959b6d7ae3873ae656fc28d2908c51111d5f5108be2 SHA1: 273523a4ca225e4b4330f18307bec5ad279a9619 MD5sum: 8dab2506e7d40195219f17f96c90a85a Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:19.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 190 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3, dctrl-tools Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_19.9-1_all.deb Size: 85092 SHA256: f3b14d53488bc4dce93eef99b1289e8a03fbaa56f956ac02dec65ef1a41e5675 SHA1: 4df1cb6493f2600f2c60e7a521b795e9837fdcd1 MD5sum: c18634c395b0f0d0245f557868912121 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.5-1_all.deb Size: 491108 SHA256: 4693375626e0b7bcf9e5992ee0ee9a66156df6909ebc8663dc684d368a14d656 SHA1: 6005be50ce30ad4a8b616ea1148ea4ad27c1da0e MD5sum: db8bc0a9d6893876453a09b499b79899 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.3-1_all.deb Size: 42080 SHA256: 29872d109f97a0848293de799ece9251978387e1ce64803e98fb2ea8cd0f139e SHA1: bd3396141bf9d4224be1b0bf493cafaac33665bd MD5sum: 0b7ee3ab6f59936fc3edf7e1e89f5d61 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.3-1_all.deb Size: 33548 SHA256: c595b03c7414976974a841cdd8e37de62baf0ebfa26d1aafb072f01cff6bb4cb SHA1: d61a3f717402e6a66ae315a9b4aab42774c62b36 MD5sum: 4b02e9ff71be5477a6cba990ecfa0342 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 475 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.5-1_all.deb Size: 158508 SHA256: a4b1b82341fbb23c1cea9ae3e5efa87f8bd8a5bf079657e9e1388dd90c9bcccb SHA1: 4c86585ee5c17290a81bc17a9135fc1733dfcfe5 MD5sum: 1abb77a7e5f335cd60dc43ab141dfcfa Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:51.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1168 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_51.6-1_all.deb Size: 344468 SHA256: 2887db8940d62397fc9742b49adc1d32bfdb08682dd4bf128ad5f25876959e14 SHA1: 6b0029ad739768c1bc0c434721c60b594c216f9b MD5sum: 998f4fbf29d7f17b4ae40d4a809105d6 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:51.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 203 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_51.6-1_all.deb Size: 170792 SHA256: 03043e7fa9a604ba5e55dc87a3d7c0e74b39621004df3e6f4e422a0b99a8f762 SHA1: ed501252680197422b1111cc42d9651ba7214555 MD5sum: a2278dc4577fe70c5a88ca388fa2fb4b Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.4-1_all.deb Size: 1440008 SHA256: 9a3e87e94fb80ccf591bc7e75c1c0fe545d84ca59c1b6203a9850c5bfd448fb2 SHA1: 995df465d9c0f8c60fb9e4d27227f7a6e0feeea6 MD5sum: d56db62c73e8dd693f2c39a0bb74d4ff Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.7-1_all.deb Size: 35124 SHA256: e09b12b5ffe642e5ce09192fd01fce58af7523326e1a15af234e8ab99ef48148 SHA1: 6d207c589aad80f8b966a4f5012fdf5967e715bd MD5sum: 55eadd6d88865cb37bb8026186442ad6 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_36.9-1_all.deb Size: 86248 SHA256: b3ca33966dd4b7c34d96ba46808e8f21431923ca4f62efc4c3526e13319d07a9 SHA1: 9aff6a665a5d39842a0efb7f838d28ef193cc791 MD5sum: cc43d5c7065fe80be8ce50e202e2287a Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_36.9-1_all.deb Size: 86264 SHA256: 3c2ff719a68f4b8866fd671ea54365bf3714c299bd3279747704a69410fe8ab0 SHA1: a3da2a727da9468ba388d87c4c0462d2c84ae25e MD5sum: b906905230ef0d52dfe1f17fa5d4a08e Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_36.9-1_all.deb Size: 86200 SHA256: 75e3dd0c87381dc4da2dd66ddcf1e15d6b34719889240e5037870ed0fc6a02c4 SHA1: a5589d0a9b7c4ee828fbc56cc937173aed65add8 MD5sum: 5da6f17f0eb3b23cc8cd87e4c81313c1 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.7-1_all.deb Size: 2633012 SHA256: 2c6fc64131e5dd87e6d5ea4515ab09948c102f07186f209aa8ceaf5f9e9df952 SHA1: 01097648544ca8a6375a4ef60975e575f0336302 MD5sum: b983bdc8e8142833dc2889ee8acdc207 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_36.9-1_all.deb Size: 86248 SHA256: bbc088a49d36ec5f2a3ec37fc63505d1190acea8f4232b80271b1bedde9c603f SHA1: cba3c7739c74efcb7753aac6f508235d35314880 MD5sum: 60e43c806ce40609567664a13cd7767f Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_36.9-1_all.deb Size: 86288 SHA256: 5e5933ea94afcd7dbbe63db05afefd96e8d8e6a243a8f1231a45c0a29d6e9459 SHA1: 9c8854bae63ab9fcaca97e8d80ac3c6d35ed37d1 MD5sum: be9acfe4ef66b1cec93902197e479407 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_36.9-1_all.deb Size: 86240 SHA256: 71af82e7591e586ac31d3962f7ce444d579884978e1576b8ae1fe8fb04ef978e SHA1: ffd57cc6f79f7b9c3b999d7260bd28c437efe7e4 MD5sum: cc08a734b50a612217bc64f018f84c8d Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_7.1-1_all.deb Size: 23092 SHA256: 868d123412250789480ecbdedd1728fe9e3af7314956154112ed4ad09432bcc3 SHA1: 6dce58e63b0e4ed28e2eb910e8b7984ab6590365 MD5sum: efe00dd9a96883ea6b77782e176e379b Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_7.1-1_all.deb Size: 19736 SHA256: 8342a329cc95f369edcbd43b9b76cef77f821d418b86442a368b11b4e0576265 SHA1: 483a6ec95cdf4c193bd93320906a087c1a57bc96 MD5sum: 46fac60d0d686416a531f94e47d286ac Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_36.9-1_all.deb Size: 86188 SHA256: 2e77d08a89cc13dc9aaba9d0da25e4cece00624e584e362444c53b1615fbef78 SHA1: 9ac8a1e0a6822047fcb41633afa0b15864e6e4f8 MD5sum: f44d2409b7eed7a8c8fe9015e21bd81a Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_36.9-1_all.deb Size: 86200 SHA256: 5fc676bb734be5d6c86e5026935d0a24524906601bec4431eebdfcb540d2d076 SHA1: 9f5344006ee854d6f57659f0497bd1ce78d68f2f MD5sum: 394884feceac50d9b5171fcdaaff5691 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_36.9-1_all.deb Size: 86220 SHA256: 6cafd901653df71ee6d949cb3c812ad8f85cd0d999f724d9654cb41ca08f5f85 SHA1: b3b6fc4a9497e35c7d2ef3630b49d05ffe60575e MD5sum: cf8e0ce1e2baa721b22b4e044eecd53f Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_36.9-1_all.deb Size: 86212 SHA256: 820f428f786ac86faf521b1aa67345a31011fe6c2e74d378410c25c16a39ec6b SHA1: e2b0522180ff0d7230c176eba0ce05fee787f315 MD5sum: 2895f83baf30eb78c7a7efc821b479d9 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, split-gpg2, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_36.9-1_all.deb Size: 86248 SHA256: df3b757f80cead7908ce82dcb2a3a0fa13701a7e6b1776d6adbb0292ffdacf3a SHA1: 3109fcef134286a7d707a42781581f3476a0091f MD5sum: 2cc36ce226d8843139d5d065156eb926 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_36.9-1_all.deb Size: 86176 SHA256: 7c84f427b4aa65d777f091251623f804e95343809a9d15cb5b795a1ec1da01ba SHA1: 1ff393efe784d395e0bb5ccd7a373c5dd4dfb2e2 MD5sum: 0a9ce447e8f882d4c4200d779add0d5c Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_36.9-1_all.deb Size: 86252 SHA256: 047add64a1e2568426f828c4e21e72940d0bf5c6bfcea86b297844777dcc19b8 SHA1: 900a84dc7d2061cb41268cf90dc2ef80ba706967 MD5sum: 5e3416aa1858eae107e112b23e2e2104 Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_36.9-1_all.deb Size: 86196 SHA256: 02adee9d6be2f4cf9be37f6a3db190c77e4f8460898c8c715cf13ebb3248186a SHA1: 8f04f186d32afa3aac41b972556bcbca65884b36 MD5sum: ab9a4f12cd4ef9aadb22b8aab5f17787 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_36.9-1_all.deb Size: 86224 SHA256: 7422a612ca7d1f2ad8fa12f7f703645651e87934fe2159205ac7b61cc3c5dd7e SHA1: 3b6a3b6ffe496cd3156d3814ba0eafbc9833c20e MD5sum: 823762d5c45ccc686b036b2043b23340 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_36.9-1_all.deb Size: 86272 SHA256: 98e945c0b2cfe335b3d25933ad72dfdfbfb77632eda76e4ba19b5057e16abd7f SHA1: 8527bf1d5eda2dd13be6386b8ecaf07b3601343b MD5sum: af4eb04d041edd69f850fc8085057764 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:36.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_36.9-1_all.deb Size: 86192 SHA256: 5edbb19770ef996f3ded5e18f2dd5cf253f8d27b5ec0e1cd43fb6c1823ac560b SHA1: c1e051c49f39f4bc70eb78c8b145b0fecb674d6c MD5sum: bac6b9f0704bb1877cda644fa1d344a3 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.9-1_all.deb Size: 922816 SHA256: 2edd29dd3c71da6438737d65e6b2a563dd6d49ef014eda7b4f81fe916629efd5 SHA1: bd1786b34faa351b5fbb6fe94b6fd788bc8b4b8d MD5sum: 310f6ba1a283b2ca823fd84996128ea6 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:20.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 157 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Breaks: kloak (<< 0:0.6.3-1) Replaces: kloak (<< 0:0.6.3-1), vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_20.8-1_all.deb Size: 63056 SHA256: e72463a53c0886c7045e989fe6a614e3ce31f23d56845233737bae618f0f391f SHA1: e45af82925517bbc513d4e64cabccfb81c7f0dc1 MD5sum: 3ea16cf34d3ad2798b3894163eb518bf Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:12.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_12.0-1_all.deb Size: 56088 SHA256: fa5dc6b6f02ce0f51493ada5ee1e793deeea634c9c55897e1f17c9bee4448a64 SHA1: 7ff96d88ee5d57ad8cd0eb14ef4b4789e0530ddc MD5sum: 4e6abc41eed90d9d13b4195d2a322c67 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:10.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_10.1-1_all.deb Size: 149000 SHA256: ecd70a75f7cb6c11a1a028946cd7a2be2eb9f96c397c4bc186969e768ea6ead5 SHA1: 8229839182ce408eff1b528173afd23e902b85b7 MD5sum: 5c1432c8fba9caf31673e753baf6b301 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.3.0-1_all.deb Size: 342180 SHA256: 737c5dd87a7a9ed38fdec91ec7277dd11313a6a87878f15f8f565eb09d3e7f21 SHA1: eb5a76da374b9e55d7b3e4ee011fc8dcb7448f93 MD5sum: 033d3e0edaaa86f47452afb8a4b5a1b9 Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 239 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_6.6-1_all.deb Size: 77064 SHA256: e3f9b55c88dbed30a31138554a6cf7425aa073aa2b4df7260c809ce342098fba SHA1: 8312e7797cdfac1779d95ff8d3ea62470b8cb8d6 MD5sum: 2c068fc22eedf917f033f58a4efa1902 Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:17.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 241 Depends: python3, inotify-tools, procps, safe-rm, moreutils, helper-scripts, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_17.1-1_all.deb Size: 88924 SHA256: 2859216a6fc7555dc2ad30ad8fadc43379914e8653a76e139446ad7d13d1d662 SHA1: 7f48d6bc21848fee0b7eb499e6ec9c718b3a7581 MD5sum: 6a5283f4d1bcae4ccf56e0cb955d0246 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:17.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 92 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_17.1-1_all.deb Size: 65216 SHA256: 3683023f3cd9fbc17adfb8c9ef3d93648d3d9f243200556cf7f72162f8bc0b9d SHA1: db5ab7b49b65d076d3bb7203db6d813a040bef85 MD5sum: 55918c6bc01b2b20e019c0968b2f84dd Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 106 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils, helper-scripts Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.6-1_all.deb Size: 35668 SHA256: 8370a11e5914b973da0a6fdd2e2385869a12e3d8f296b0882c0cd95996c6b804 SHA1: b692d257f54d3e144dbda5a8a9ecce22e8ee748f MD5sum: 496028881e9c8f0db68eb3df484307d8 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 460 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_5.7-1_all.deb Size: 82376 SHA256: 6c2782e5bbea0cf27b945880a7e2eab64f7ed2b646a88f72c81631b43687c920 SHA1: e5bb0f0edcc3130253f799bc754efeaae98ac847 MD5sum: 24fd4b5bf50003be6850030d7f055aae Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.8-1_all.deb Size: 37080 SHA256: 6fd01a06eb92a6107e236a5919fbdb3c9d0dcefc372c3d52a60ad084fad9ed60 SHA1: 753ef3d1917901685166bcbf5b870d8ca36cc934 MD5sum: 28adac348094e5780d0dcfe5138eb753 Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.6-1_all.deb Size: 25892 SHA256: e04c24d84d913e9241138e9f722aaed2391248fda8ff2a1e5f9e7eaf02c0f797 SHA1: f2f19c8dbc0a235b1c89b4fa33dbcc8021a207c9 MD5sum: 881d5e86a8bf8da7f1984d02dd20d9bf Description: Wipe RAM on shutdown and reboot Helps protect sensitive data by wiping RAM during shutdown and reboot, which can help defend against cold boot attacks. . This package requires dracut. It is incompatible with systems using initramfs-tools unless they are switched to dracut. . Implemented as the dracut module ram-wipe. . Only tested on systemd-enabled systems. . User documentation: https://www.kicksecure.com/wiki/ram-wipe . Design documentation: https://www.kicksecure.com/wiki/Dev/RAM_Wipe . Discussion: https://forums.whonix.org/t/is-ram-wipe-possible-cold-warm-boot-attack-defense . Related links: * https://www.kicksecure.com * https://www.kicksecure.com/wiki/ram-wipe * https://www.kicksecure.com/wiki/Dev/RAM_Wipe * https://www.kicksecure.com/wiki/dracut * https://www.kicksecure.com/wiki/systemd Package: repository-dist Version: 3:13.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 145 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.5-1_all.deb Size: 58680 SHA256: d247f0d6e6784807ae9ca286ce03535eb19f897156bade633c02e7f208ffe61d SHA1: f362a465e9d60b1ae9c7e24f345f2570e1666cdd MD5sum: 78f76aa693a6fc73d836d3c7b8a846a0 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.5-1_all.deb Size: 41528 SHA256: c925c33161f37e0f1dae694e30aab09d6d8646ed6104f5f943805fc6b6e21b16 SHA1: bf1a51804b5c471ed7c5faa9f45d69f960cfd92e MD5sum: 3b8d5c5d60279fc4fa09b46bb73200b2 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.6-1_all.deb Size: 19880 SHA256: 173a0fdfa4782eaad88b8d8f93b73c2eaaf495dc5df7b48a0ab5bf7d67e5f3bb SHA1: af95b0d98e47c1e7ada01da7a15de79654daedd4 MD5sum: 878810b208f881cc9ffdbdc93a0301ce Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 132 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.5-1_all.deb Size: 49288 SHA256: 71d02e298531f228a3ea9895272e41a089ff48b05684f3f0a471ceeb0f3239b3 SHA1: 522f9d220772f980549c661b5bb3d456ba6125db MD5sum: 651035ef64a978e57139e3260eed0345 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:28.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 348 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_28.2-1_all.deb Size: 154976 SHA256: 1e8ec459f02bd235513b4be64253fba166856e2a1294c5f434d424377c2a68ef SHA1: 6deb3629a4d7521bb196de49976ee1fed3f08530 MD5sum: 3b5d29a96bb29ba0a62a218e26e11741 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:14.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 291 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_14.4-1_all.deb Size: 108844 SHA256: 4e6aa3497947d56a42946e8c1a89d68b9336ea372c5628c00345aff8200fd1bb SHA1: 24abc8f90c512760b56cd771d049a79b32878430 MD5sum: cb6230cb11489c761ad08dc4524c87d7 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:53.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 236 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_53.0-1_all.deb Size: 198168 SHA256: c103dcbaadd58bdbaf7cca1ad3379db4b85d8b1e5e50d0bcf4a903e06f8435fe SHA1: e4678aa826563a177ad430828c0ee8c0f14dd068 MD5sum: c3025348e753ab22491a1a39b4af9efd Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:53.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 224 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_53.0-1_all.deb Size: 197032 SHA256: e3aeeddd966dde28f91c62ce277903ec811a390404adb494aaaec8e25129bb23 SHA1: 521555419dcfb1d4cd9285891d81bf102ed92c16 MD5sum: e5192eed364771ad8acd3d5f7bed9ae9 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:53.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 843 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_53.0-1_all.deb Size: 295552 SHA256: 2e5cd91084081f623614990fc771542e21903b75f460d7b229bc8e2df9475558 SHA1: 84febf1c1b797dc553bd3a38788904d4b96471fa MD5sum: 17227086e31c7a534e09118cb3f5607c Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.9-1_all.deb Size: 18628 SHA256: 643a69f58330562c1e7dbb78003d9be5d20f65295c7af85369ee4701a6b0bbb3 SHA1: ae06cbbfdc8876b691a1b959dfd794606763f99a MD5sum: 1139ecd011e95b4c6c7295986121cdce Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.3-1_all.deb Size: 43040 SHA256: a09ab1ef23e1c7c2a8df1179472769fff990fed57052df0e10fbd02e6e256c56 SHA1: 7c2038d0306125f58439a14e02be635229a45667 MD5sum: 9da09f19112df2dccdfb8696d6ec19e4 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.4-1_all.deb Size: 61424 SHA256: 6607003fd131f55085a6c71df6e34d4ba03a8ae79157a0c6b6b02d0682e5d6c2 SHA1: b36b820b8d4fb19db4c12e2f9f463cfea8114754 MD5sum: ab4904ba64dac66efd8e82af8a70337c Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.7-1_all.deb Size: 38112 SHA256: dedd1de7d2fe995048c575ca81c7caacb2a0569ab2fdfe254da39c122328a8a8 SHA1: c5d4df79ae3e270f597f8543e81be0269ba96ad5 MD5sum: 8afab731c3cdb906c5293797f648120c Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_5.1-1_all.deb Size: 33180 SHA256: 01f4d6e81fcc848a225b1e38152262847c9caaf9480b1d193531be12b83281de SHA1: 535a4694fc83cb310e1725d968c2509f8dc9ca47 MD5sum: b220d1df0eeb969fb19b505e1f91b21e Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:51.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 648 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_51.9-1_all.deb Size: 212996 SHA256: 0ddd9bde27cdf601456f105513960ccecf6f45a550c606ddcbc02150afaf4b74 SHA1: b0673df069251e092c8fd2d42fd4dbe2dddd8a8f MD5sum: dce2dc6c24dcb5b05ca75044d163261a Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 63 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.6-1_all.deb Size: 29556 SHA256: 2e271ef6faa6cb95df5a074aa45e64e591b58c24da53c34959b79f97d9cc30b9 SHA1: 71fe25f6e4cbc3d2a922570e570d7c985445bcc0 MD5sum: 4142baf7e4f96c2919d27f56c08f891c Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.8-1_all.deb Size: 68744 SHA256: 693f6371bb86e11cff1cdd339b11f6dfc63a38c277468131c68595da1f3a14cb SHA1: d4eb1283e79af2b380bfda4f66805ee2b9eb432a MD5sum: 25616ac92650d7ea76bb6e6870017fe3 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:46.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 535 Depends: msgcollector-gui, curl, psmisc, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts, sq, sqop Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_46.3-1_all.deb Size: 279548 SHA256: b52917db871f4aa7f60d420652f44cfa9cefa9dc0d7fec963fe846f8cf18a55f SHA1: 60908bc9ad84717ba275395d68aad3991e09aff9 MD5sum: 3709e5060723ae38f9f847116271404c Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_9.4-1_all.deb Size: 29064 SHA256: 71c225df3e7bac35379f10321797b5b7dca90d0026eb4002b50dafe6b0cd1d3c SHA1: a95069cff50726be521791a0ecc9cde74065b435 MD5sum: da8abe1831b77343148e48fa6192ee0a Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tirdad Version: 0:0.3.2-1 Architecture: amd64 Maintainer: Patrick Schleizer Installed-Size: 21 Depends: tirdad-dkms Homepage: https://github.com/0xsirus/tirdad Priority: optional Section: kernel Filename: pool/main/t/tirdad/tirdad_0.3.2-1_amd64.deb Size: 16244 SHA256: c40066e083a4258314389271b821950f3bac1bef395e445c0fc52a7c1b247b1a SHA1: 8ef0b241174b82afc770c0817684c28d3841556e MD5sum: 4abadb83f66ba679b1b4fdc55cc14fa2 Description: TCP ISN CPU Information Leak Protection TCP Initial Sequence Numbers Randomization to prevent TCP ISN based CPU Information Leaks. . The Linux kernel has a side-channel information leak bug. It is leaked in any outgoing traffic. This can allow side-channel attacks because sensitive information about a system's CPU activity is leaked. . tirdad is a kernel module to hot-patch the Linux kernel to generate random TCP Initial Sequence Numbers for IPv4 and IPv6 TCP connections. . This metapackage depends on tirdad-dkms. . References: https://www.kicksecure.com/wiki/Tirdad Package: tirdad-dkms Source: tirdad Version: 0:0.3.2-1 Architecture: amd64 Maintainer: Patrick Schleizer Installed-Size: 41 Depends: linux-headers-generic, dkms (>= 2.1.0.0) Homepage: https://github.com/0xsirus/tirdad Priority: optional Section: kernel Filename: pool/main/t/tirdad/tirdad-dkms_0.3.2-1_amd64.deb Size: 19168 SHA256: dec5b2a85a22c19cce00d84c18c353d20f3da373e46bb0d20b804784e0aa89cb SHA1: be9da25c08f0bf464a6bce59f4f69acb66a86bb6 MD5sum: aa34faca0d8262f926bd146f17c846fd Description: TCP Initial Sequence Numbers Randomization - Source Code and DKMS tirdad is a kernel module to hot-patch the Linux kernel to generate random TCP Initial Sequence Numbers for IPv4 TCP connections. . This package uses DKMS to automatically build the tirdad kernel module. Package: tor Version: 0.4.9.6-1~d13.trixie+1 Architecture: amd64 Maintainer: Peter Palfrader Installed-Size: 5875 Depends: libc6 (>= 2.38), libcap2 (>= 1:2.10), libevent-2.1-7t64 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libseccomp2 (>= 0.0.0~20120605), libssl3t64 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.5), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.9.6-1~d13.trixie+1_amd64.deb Size: 2082116 SHA256: 835075d00ce48a975b1d1694a7d18805abfa5f2bef23824978ebcb78cb9b948d SHA1: 377d2c63fc7440ebfc42857853c24217af891218 MD5sum: c97f054c9be4fef19381862387457fb0 Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:8.3-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.3-1_all.deb Size: 72032 SHA256: f278bbe3cf201519a000c8ed0501a6e0476532a586194db8ec39b6550fd20ce5 SHA1: fbd315f42ce1501c60f6f175352cff7b5785944e MD5sum: 0e9cf04d35846abc878bfd96df7bdd5e Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_7.0-1_all.deb Size: 31172 SHA256: 5e20dfd2b6f4c7314b790e3ac8a75f9263ccff94352213efc69aeaab37dde8c8 SHA1: 352f39a1ef562039c4ddc96f767f7654dab4d927 MD5sum: 593bba02cb50872a760a8384cccf2d41 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.9.6-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25124 Depends: tor (>= 0.4.9.6-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.9.6-1~d13.trixie+1_all.deb Size: 2739552 SHA256: a7e6c605a0ef8af68a5596803c3b93dbba322d8d1705f74db490b534967b9ded SHA1: f86410b3858fb9435931e79f69995e970868bff1 MD5sum: d6a6e0356d9a06a8b024d5a821b09ece Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:39.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 790 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_39.3-1_all.deb Size: 227764 SHA256: 2a288a4b3e5d5494c594900d778d8244f51a50bd862654f2371748902075bc8f SHA1: 00e84b2608ba8696a630f547d05a11d8009d2846 MD5sum: 60ba06ace7e8996ba397f3eab5eafc70 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 205 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_12.2-1_all.deb Size: 56772 SHA256: 156717a958fc6b85850650ac8aa5b52dbc1c2374ec91f7aea6c768ff4174853e SHA1: 05cc0c151d3c997ac1d9f7e9643b5ea1f4ab8b91 MD5sum: 0cced865c616ac855ba4bd1d7a8ab10d Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:16.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 206 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_16.3-1_all.deb Size: 63324 SHA256: 5cc69be260046c20d45b9d714fe519aa8350693ef7f0bf4add98ced749ab1e0b SHA1: fd447dc7ac088f27dda26bad8c9de78c5b03994f MD5sum: f5ee09e2505ccef1a325ca1af582a28f Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer