Package: anon-apt-sources-list Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 77 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.5-1_all.deb Size: 30652 SHA256: 220a6d8646abc6594bacdefdb06ed05eb0522af1a415df304ba3905728e8be85 SHA1: b6e14f0086e49a37795e91d9f5cff1a8b86931cc MD5sum: c4d94aa23c594a872c1bfcd5855c939a Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.2-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.2-1_all.deb Size: 95320 SHA256: 8e2be5f079858c0066f35db9a2c4bff6db6aa385e5a3fdf5c7b33546a0976110 SHA1: 66e2bdedd20867075d710f9aca7c6b31c00d9ca7 MD5sum: 54996913ab338b4337b01b753881aa36 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.1-1_all.deb Size: 65076 SHA256: fee1afcd32f4217f3a49e445e4563d97e64d424c757e8cc0dea0d067b567ffd7 SHA1: 7344db2ea09b445091701989bf140eb6814b44fb MD5sum: 844760661bcc12a682d1600c47b4c9ec Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 96 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.0-1_all.deb Size: 36124 SHA256: 34e33eb6a47c7bd2b026f77877b37e3584dd3f991a5de0ea845302fdf99e597c SHA1: c0f37265317fbc32104b195b68d042ae2042d2b0 MD5sum: 7e0c6537761cf89fc63b608627b73292 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.5-1_all.deb Size: 23912 SHA256: cde89ba8fb7e6965feeb7d72c9dedc6f6c602268122981343fb2c906b9702f0e SHA1: c3e19c274b3dea735cd3b598e11db50fc597cb59 MD5sum: b0b3af0563aa9d6afbf41fabb2ecaf69 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.1-1_all.deb Size: 27056 SHA256: 6b3734055d7123cdc291377d0beecbef74a84085af5b9dc0e9b13b8886d6df79 SHA1: 543793f64ec43200ae051cf2b292f772411deec1 MD5sum: e7b01d88386fbffff39511f7db4ee9cc Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.7-1_all.deb Size: 34852 SHA256: 8d34f303bcf7018e35bdeb17cb7c2e2e993b6eae8b683a914fc990f198c61b4f SHA1: 034631d4720819dcab967050af72446f72ded803 MD5sum: 0c8650b06d1805c0470f1666c84888a8 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_36.2-1_all.deb Size: 85252 SHA256: 3b8c080cb49b610cb783c3f484d3a35ba913d7a10072a8ea19c1459cf72b14f0 SHA1: bad7cd7e71daca7006f5711d4c28561a14b2a690 MD5sum: bb96057cd5578374938a27d2cde64296 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.3-1_all.deb Size: 11256 SHA256: 4f15f98eeded72e6f3fb11e8ac35ff178daf199e9d1e40c2e345d743d2cdffb8 SHA1: 44fd15e99f54a64915e3077725e22d2211d6518d MD5sum: 1bfff5aa44643bc8e79203beedadfce8 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.4-1_all.deb Size: 15372 SHA256: b6b6959444cf1c6aec49eb4bfafc5c1cc8c0dbb7c1ddf0441e0a10ed683ef649 SHA1: 5b0d60aa31a26ebc8c48830ff749ffe9e9b3f827 MD5sum: 41c7554dfa6b94d745ec04b432ec8af1 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_7.9-1_all.deb Size: 31928 SHA256: 2d724bf4e51b2a54e0bf4d5596287b609a07f285575aa0860c0e03e1b960dacb SHA1: 89e08f77a307dab12b87f520e432dd4014dca377 MD5sum: b034b482ae78c941beb281206ff7201f Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 286 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.6-1_all.deb Size: 62328 SHA256: 21c3800a50db27d536c7c6a30f55b97cff15ff254bb13713d681f8a9e7249ca1 SHA1: 4ecbfcce0a2a6ee7d136a7dd6f5c039d2006b5af MD5sum: 84f4e235fa9527173b348bdb5c3af0e8 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.7-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.7-1_all.deb Size: 129348 SHA256: 5dd9fc074112120361f680d154137d2ba8903e5a3e82b8da6da999f4a4a1721f SHA1: ebbc3f9de752c82940f829c4380d7ca28819f4e4 MD5sum: d3d540c5c601972131aa08588a339967 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.7-1_all.deb Size: 13908 SHA256: 185ec283e8b9742605175a53101da145dcd0b6956db55d54d82723b8fe48e8f9 SHA1: 2d91780bd5275d5565603b1d6d0e4eb5e53d1906 MD5sum: 4a3ba279be5d15c5a0c3ea8f3f1ee62b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.6-1_all.deb Size: 28028 SHA256: 86ccc6f4587c024fcb561d1022bfba8c4a2c8265d102cc150cc525f42e8c514a SHA1: 8fe5cbeaf54658fef31464737aeeb4eb2e9c21c9 MD5sum: 9d3e2cbdd3a2ec7cf683530f9b0d36c4 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:17.3-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 345 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_17.3-1_all.deb Size: 98848 SHA256: 34ab96efcb40b868635192a1c04d14b57cb01675354f20ea85fd2d3b8dd870be SHA1: c4d7d180d0a952d7f1cca89920ed26c43ca8872d MD5sum: 1e23cf383d9d7ba48900cb266040199d Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:17.3-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 76 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_17.3-1_all.deb Size: 46808 SHA256: 30017dc097faf7ac93de36037f6a6952ec3d2484a0cdb927a64d378d874643d4 SHA1: 66af66214ad9b3a65f15e0087fe884aab6df81e3 MD5sum: dc276465e92a09f2fd68eaf08f44c9c2 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 423 Depends: python3, python3-debian, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_51.4-1_all.deb Size: 156496 SHA256: 8be953927ffae4d7310e130d65a8f418267dde4e416bf48073694b90bcf5349c SHA1: 66f9ef46d9af677c85599d361a869e33ab76d0bf MD5sum: cbebc80c12a4adc9c85688b06c5a0fc6 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_36.2-1_all.deb Size: 85176 SHA256: 46c4edd03b19c417606469219bf30446182184c873887d16749a1ce4b63a8e90 SHA1: fc69aa244d5abe0b61b79c087f192383c68c6ddb MD5sum: dfa7d6f9c71a8a5e1df2ea2f223daa62 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_36.2-1_all.deb Size: 85208 SHA256: 630b209c2ace608cb274ebaf25692891f5ac1472b736baff3421b3bb82143111 SHA1: ac786a218aefb74a09efdfc7a63ec06cba2ab880 MD5sum: a94e1812594161b1adb75a4f41c29319 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.7-1_all.deb Size: 195352 SHA256: 6feb3448e9a54bca99a8a9cb55b10a3ae5eaad8b01dbb30074de5e445696a1ba SHA1: b7ec990dc34073040d1b245a3990a8065115ddac MD5sum: 451910ab5e2f5e9d738488c42c0ca0db Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, gpg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_36.2-1_all.deb Size: 85792 SHA256: 3764e3488e208dd56e7cd6256b9288367d52731517c4f21c1ed758940978a6fd SHA1: b9a007f38b50b6497359bf71a96b11344add1964 MD5sum: 7e4eaf32a5ee57c0aa9a131517f41b37 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_36.2-1_all.deb Size: 85376 SHA256: 717616c014c7b24b21e493f0fa696b66bbc308c1321af5c2aed6fda00c6a7930 SHA1: f510c9392cf99f6e6e3e47b4b6d015c17ffdbaff MD5sum: 87e06d005c8605e6bb583868bc202417 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_36.2-1_all.deb Size: 85564 SHA256: b5c8221d47fdc47e0669c4a5c1d4a6bad3e59b36a45941ac0dce8d31e8445096 SHA1: 01efcafa57321d3cfe13b9edd3f9f32f22342179 MD5sum: a09f08aca288b5553fe0414cfe8b8d30 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_36.2-1_all.deb Size: 85164 SHA256: 67990de0f2cb0f2ef3a1ab76be9208f6d7a2fc18d9a5b1846517c8f66300ec98 SHA1: 7f9a22d60690ede8c38f3599704c1962dc1de09c MD5sum: 38f3bd81aa58cba804fda523cd5bbcae Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_36.2-1_all.deb Size: 85312 SHA256: c40565aedd54630bf595eb582ae9c403d5c1580866d6bede0208335baf784cc9 SHA1: 0d68327d28f445ba311fbe1a90a2740bab53533e MD5sum: ee998624a7b138174821c732da90c47f Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_36.2-1_all.deb Size: 85284 SHA256: eb86d4f5ff06fef2f1e2a6be48b1693b1c84570712dde519a707d8e72be96c52 SHA1: 9a6f9753003bf7ede035045f25db59aefc716fc0 MD5sum: cfb2c9315d1f083ebc7d3d84b6f670f2 Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_36.2-1_all.deb Size: 85332 SHA256: 58d594d30a04957b921fc8d047117dcf5c92d1707e6f8b4ec4e78abbbbf999a4 SHA1: cb3dc73463ba10d96c91144030b95f90e18126fc MD5sum: 331f993f656c33fc53a637a319591068 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_36.2-1_all.deb Size: 85248 SHA256: 75e18b8723efc4d1bdba9c6fa9cf75207e97f5ee6d67d7338f49f3f7b70f601e SHA1: 2a6265fb099e68d70a045bdb97a480acbbe52536 MD5sum: 3a8a8e619aeabe63b44fd7050c4e1faa Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_36.2-1_all.deb Size: 85252 SHA256: 5420daef4361e8641af85d7381bdec3295213637d64a089d3bf9d120c56669c3 SHA1: 763e1cbd6d9cdebf32c50971337374c45e94c039 MD5sum: 68cd971e0ea7fece3fed0cffeca2c731 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_36.2-1_all.deb Size: 85184 SHA256: 655900260025501e0ddc8b3ef0bb3325336e3141995e500f8d954f605b2b81ea SHA1: 382f6879276a8151322caf131a99b581eddd0ed8 MD5sum: 039026e0cc1f5adeb5b1905ee0e44b44 Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_36.2-1_all.deb Size: 85168 SHA256: 395d0179dd126eff64f21f12f53a6d0c26b498f8b2539e77ffc83f6a8736d967 SHA1: d268e41832410410daac824416de067124ba0a1b MD5sum: 1210095fc5c77d5399c23581e39cd040 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_36.2-1_all.deb Size: 85228 SHA256: c434be14b7fd016bd05c2a3a45eae6404cc39fdd3181aff5af36ffd00bb69e1d SHA1: 6d4978490c6c7cf8650e5ca6e7a74f2cc112feaf MD5sum: 64c91c22de06547a662ed2344b036e77 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_36.2-1_all.deb Size: 85208 SHA256: 2074723c2ac388ae95b0398a9caa32c0dabef1de946a9e5f19dc68545ef9fdf4 SHA1: 83137f854475e1294b51f4b782d51945362c44b4 MD5sum: fe945e868352695ae4eb87356277f730 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_36.2-1_all.deb Size: 85228 SHA256: 527eb9f0405d4e3978b5df0e08ef76bb0cc421b4cd56672b5dd7352d40c3ec20 SHA1: 31894084223fb7160195c07b78eb003ebd0e41d6 MD5sum: 632779506f2fbe6cc4dc5246d016febf Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_36.2-1_all.deb Size: 85232 SHA256: fd8ee5b34d27e2e0bc03bdd63aeb23487a80cd51f264232b12b30df0ec082b7a SHA1: 8dba1bdd7d46b9cc89d0295e65bb4d03a0980499 MD5sum: 6935cac26143055bfb132c02dc04c4a1 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_36.2-1_all.deb Size: 85224 SHA256: 41d84779cd6586e94d66aa4fd4532fbc8852cbec79e3ecdbc194c4d6dfb2c234 SHA1: 0721ea0143192a098c633b016fd9cbed48a105ac MD5sum: 42143dad1f095e2172b5cc92e4985785 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_36.2-1_all.deb Size: 85232 SHA256: bdc9dc20c3a514156eb53da28cb2e54fa667e06f3c72ec03d0c20a16758a2b44 SHA1: 2110d0626a5155cddb4c54973343c4b7af0cef48 MD5sum: 2446d214042b67ea16486bef67434539 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_36.2-1_all.deb Size: 85208 SHA256: b4bceaaa67cf6d9610cd1f213d41fab17e3396b16db839a1191788f14b6cf1bc SHA1: ff08e8a64afe155b74ecabb510a23f3997ac6701 MD5sum: c20218e2ca01b12cc5f59bed90dcf6ae Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_36.2-1_all.deb Size: 85260 SHA256: 4f787498d50b37511b587da8d74e2da2808e68ecfd352259d918ac03397056ae SHA1: b17c46d90f13456633012cd288a8530d16feb3ae MD5sum: 36f5482547c02ced457e5b58e1d8d770 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_36.2-1_all.deb Size: 85264 SHA256: a833ac8bb0e5e3facfba7d9c2706d0cc7361dfcc57727e64a31a2330d6c2fde2 SHA1: ab785ecb20a0740845f108b73251d43e5a055f2b MD5sum: 88611af8e02c3629c1de24e87c4bd9a4 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_36.2-1_all.deb Size: 85256 SHA256: 6938e407ccd93cdb92e3843dcc0d08a3ff1f3707b8cfbaaab8fa1b8405dae813 SHA1: 2f2ac0aa07b33ce2a838a428e5aa0fb94f12b7eb MD5sum: 331a2e25bc61f3c9ef9da561c1a82b5e Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_36.2-1_all.deb Size: 85212 SHA256: 796f0b3ada1c24108ed493b3bd4f33851c24bdea6af973f249419b543d4417b9 SHA1: 403768ca4768797475735b4ddab2704f1c849d12 MD5sum: d42f9d80ed4e4c581aace3acc6dba753 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_36.2-1_all.deb Size: 85236 SHA256: d179c611cb0d7601cde8579cb4139eef257198a24dde676a83fe488dfbc2ec4d SHA1: 62306f5334c541a6cd8e8c53f1682b3c83ec4c3b MD5sum: 4b29858a6db51c8f79b55e23d665ee7c Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_36.2-1_all.deb Size: 85228 SHA256: 9af651c2ff85a85b3aacc1f1a8539aa9ac6819b5d77b4b7ce6dceff0a7679dd2 SHA1: bd8b3f23a1566cfc90c3b176da12f2c834d4446e MD5sum: 999ad5f95703e3b7db1d123ab4e49163 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_36.2-1_all.deb Size: 85208 SHA256: 036f54f6e2011cca4d0779d6d974a8470a9d713c595f5509885d225260467f51 SHA1: 0db9fe45539157d9e204ddd38269813d2f6fb1b0 MD5sum: 3587e5c45638595fdf9bc0800fb8fcd4 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_36.2-1_all.deb Size: 85220 SHA256: 2e3bf40c7d383cbed6df08d499497fbd49c9b3cc88d958dfade1fc7ee26278e0 SHA1: d3695ecfcf6f01394cc1a3e7c63c0b1869acfe74 MD5sum: e50e8d06d21401edca40794920ddc6fc Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_36.2-1_all.deb Size: 85232 SHA256: d8808e3ed26e1644cf3fdb4986ec2ff88b03439f0084b29c93d3adecfb10d8fc SHA1: 4f0c3184f8ee7ddeb692a68ddcc522d830afd73d MD5sum: e828140ec38210fe09d64cf25ba13bc1 Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:17.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 165 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_17.6-1_all.deb Size: 62024 SHA256: 13f0ad9f7b91d4632904be9d2e9c240ddedb4200aee4fcc1b32d916eaf117cee SHA1: bbbfe0bd91df9f6eb0fea78e4f335727525c410f MD5sum: a45c7c9a0fd1fae189b19ba66abdd559 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.3-1_all.deb Size: 490888 SHA256: d046437346f7fa334b0cef971f0a6732ac3d13d2f26e05fd792bd5fc2d58ab37 SHA1: 5b885600182572cb99b145480a1cf00e3648f730 MD5sum: cf13eecd72090e7117e1c4e42ab8790e Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.0-1_all.deb Size: 40120 SHA256: e4537bd2c3cd66195d5c448c3b1cd6a06e164cef0793c676f04ef10a06a2b17a SHA1: c5281224dedb50fe7fef02ea340b29a4b33f93cd MD5sum: 1542d9fbb61988c7e266ed1530c53fcd Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 63 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.0-1_all.deb Size: 31832 SHA256: aa2b52fe4ea6a945abec81bd543066c0a2c25c46a20668d37e510e503cc1422f SHA1: 71a207c62eecd03846ec3285346fb611d79c0d41 MD5sum: 756831ba3c9263f350160b2435855a24 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.2-1_all.deb Size: 158220 SHA256: fde543735888fbf54002055ace8171e4bb0a58e7cb103c9a909b2de8d7d374a9 SHA1: d86d6c5d078bf869d7016783ac2f76939c383799 MD5sum: bb77f496c08afd14bc7ca350ba184292 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1030 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_48.2-1_all.deb Size: 273968 SHA256: 5ad7866f4b861f1e669c60dad6ef973046f5ba817a7d4562f4b412e5e0b243db SHA1: 62298d7e951e3947d37998a078a6a9eb6cdd23f9 MD5sum: 0791fe5ecdaa403c5a72a92d35bc4d67 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_48.2-1_all.deb Size: 128424 SHA256: 4b5a6c542e43eb1b5d089473e90fd7e17033beedad95f6d9e2bc5fda680482b5 SHA1: 94375735b7b918dc82cd19ce03bb9301dced3020 MD5sum: 6118f8f59ce56a6881822e85bf42ca96 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.2-1_all.deb Size: 1440004 SHA256: 9378144200a6e3a752c0573094875a312768cfd7c8ee907e232a002217b354fb SHA1: 208a251970fb27b3929cafb46a957054a167d597 MD5sum: fb8943cda1cd798238a370d333005c3e Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.5-1_all.deb Size: 34912 SHA256: 08adeaad3121c711700c3b1b5d7bea36f9e3432c183f0d221c50da6ed486ac63 SHA1: 7a26d3db1c50afab64764827f3f37aab84df041c MD5sum: c44abd11833cd4753f95256048d58009 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_36.2-1_all.deb Size: 85256 SHA256: 909dd0e1ec3e856451b1487968c06aad57e3d33cc37e2bc8ff6d997d14f4eb47 SHA1: 8fe45460f7f9333fcedc6e880b9fc388528b07f9 MD5sum: c1ecea29c304d0a8d2bee4e54ccd7620 Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_36.2-1_all.deb Size: 85268 SHA256: 51a000dfce7256e1392a4435033a570403514022f6bdf11648c14aa0ce750064 SHA1: 87d459a47a9e8bf79d78f75570755036bcc96ada MD5sum: 7965cbfd37e6cf3e3c817a51e2aade34 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_36.2-1_all.deb Size: 85200 SHA256: dbf86d035c981a165aadc86b4ab6f25ab92d5ccfea9a5622e29bad33a29e0a28 SHA1: 69a2355b6191fe20c5a9dd9fc9c9abe1839b3a43 MD5sum: b683d9615562315619a77ca6b9dd8d6b Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.3-1_all.deb Size: 2632500 SHA256: f5e4e9beaa7e080bb71194ccf5134262789271ef851da12c8d821d27f13ccb64 SHA1: 04ce6b783bc21213db13167f9ea7af0832c209dd MD5sum: 1f839d954b44eca83aab4f0f7d040e90 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_36.2-1_all.deb Size: 85240 SHA256: 37fa4dbdc8df56b2873e760823af268d855dc2391d68e5176fee1b720b4f266b SHA1: 8fbe678f73fd1eaded271dc8fe01d2880a30afd5 MD5sum: 34cd94448c3bbe592532ddfaced22f68 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_36.2-1_all.deb Size: 85300 SHA256: 180b60b4838bda9e09efc7d49d01d3c5a4494b2322f6a1cef19bf6e4783a739a SHA1: a4f509ea822fdb32f2f8e06cf3cc810dd3a3d904 MD5sum: a6afbd824973f184c4e0e5918dcac7b5 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_36.2-1_all.deb Size: 85240 SHA256: d372f04db6164f6d1e20d62a8de5717aceaedcf1f995bab8cfb6334fcde8f0e0 SHA1: 9ed6251e769531bba47c2fcb324dd07e448f498c MD5sum: f5180d6e5f9562a17908f12b97576e7f Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.9-1_all.deb Size: 22864 SHA256: 655af1aaae912f74335aee678a10f8b122945b75a6d6fb33dc4785a8024a60f8 SHA1: 51384d44e39eb647f6d4e4d7c37c833fbd65abb6 MD5sum: 859df84ecaccfd70f9e928054a131392 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.9-1_all.deb Size: 19488 SHA256: 2ed67ecfc4e6d8d74360d83e3e0c30f970a33a8a62c103143af034ed76223402 SHA1: 26149acd768ae533e766b34a5a9fe6d2d73b9f80 MD5sum: 608af953ef551749d55fa14c8b21b762 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_36.2-1_all.deb Size: 85196 SHA256: 35c673a38ac1534b8fa904dc85d29fcd226d37626eac8252d9ac0736f5b702ce SHA1: bd25c5d6866c84eb5b88c1def4f45ca24350a36b MD5sum: d72481835188a6a36a1de48b2b9e6084 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_36.2-1_all.deb Size: 85196 SHA256: 53c249db978d607f9f5a4385da804a70cc93e2f5a94f79fc60cc30f158f2a805 SHA1: a04b7025d19de6403fec56718c74f54df28d0637 MD5sum: 71d86d4c83ea254bc92fdda68bfe6838 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_36.2-1_all.deb Size: 85220 SHA256: 4c92680629528923c1afceb21325f7fb0c37219eb2cb69a57e246cb45a4c20dd SHA1: 0986d3b369915ec0d965d9d916ccfbd361673c48 MD5sum: a2e2fe8d23889d8c2717be4cf8b65e57 Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_36.2-1_all.deb Size: 85220 SHA256: 409924717386beaa4b61421138b8f56548b658a92004725c61adf5465a28f586 SHA1: 98b7207f6a1a3c6b494092118ff21bc500bdc8ab MD5sum: f473b47db554665a8dd54bc1f98a6309 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_36.2-1_all.deb Size: 85252 SHA256: 2d9929ade4e3e84792f5df93584c9ee3ace5d57d28bbe05bc272d4ffc536027c SHA1: 4859980202982276e15de324295bf99c39c63583 MD5sum: 56fef2345adcc3a6ddea8500cd4d99df Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_36.2-1_all.deb Size: 85180 SHA256: 523634367c46be1d736e2247bacf91f25632c0bcffd67630934887b05767bd91 SHA1: 516ceb28e35037e40c385b0bb447e0039a85810d MD5sum: f7ec87eca0a105c4925435063ed49090 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_36.2-1_all.deb Size: 85260 SHA256: 679e94302cec72650f580aae423e9e2f6baf277daaadd674e285ae4939f9308d SHA1: 69e7de741ed59d9e2e67b76f44a172744e8d8164 MD5sum: 52d195a1db8acb144d6bb254c29ecd4d Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_36.2-1_all.deb Size: 85192 SHA256: 3a9552c6b95ac13900a2a9616d8dc6a4f71556954907fbf238515e5738bd76db SHA1: 720da27d91f397957577e89c137e6b00e42f874c MD5sum: 62ce276bb1480fd933ea204c0be3b51b Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_36.2-1_all.deb Size: 85216 SHA256: b601614f3258c93b2e07c744238d8af62095f86f645c9204d961921b4e589f4d SHA1: 0288583358d07d07f3780cca7c5bd73d0a827b22 MD5sum: d13ba6875a3cf4899dec45332e8e9b4f Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_36.2-1_all.deb Size: 85272 SHA256: d0fc0d5860c7e2183f431b9a00f29804666ae819363ed89e7162f6f629f6219e SHA1: 7b32784c5c9c3f758883c4abfa7f745552bbb5ef MD5sum: e3f5862862dafcc3330357ff9b08fb88 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:36.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_36.2-1_all.deb Size: 85204 SHA256: 0ba48be31a1b58f0bba7d5dfdc2d743bdeb705ae0dd12ea981866542d47f05af SHA1: ae29309b5748444dff350610abb4283801133b24 MD5sum: fd785e14ad09c5484d6babbdb9d00698 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.7-1_all.deb Size: 922556 SHA256: dad058a70e183c212ad660f4aeb0149772718f3b335cd6dbdd11f67c08621f65 SHA1: a18b9e85c08286e4ac900248b34c9dbc296ed4fc MD5sum: d2583cc1d1b15564feecc40c484da1b7 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:19.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 151 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_19.9-1_all.deb Size: 60896 SHA256: 5808c7fa527ecb6b7a49e744eaf5b4c6700b266aa5330b5f6d1a79711b4e56d5 SHA1: 4ac98eed237e541bab04275921ba77ffeea6c2a5 MD5sum: 8ecf7fe68749d0bc55a06f5f036ba94a Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.8-1_all.deb Size: 55936 SHA256: 1decab7adfd5784713815bb059c502335d91b6cac8a5958d6ea81b5a19488f7a SHA1: 9d10851cb6592bca52f70f7e3bfeeab8f17afc8f MD5sum: 05d6f63b603f24a761786aa3cf9a399f Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_9.9-1_all.deb Size: 148788 SHA256: 0e79c5c0085cfed9b5dddd0f6bbf7c116a5b3e63fe1c90f243e3e04227a390b4 SHA1: 3c86b8d322e4a10755a3837e9184f238079e1ca2 MD5sum: dd583223ab983f25b40d4f5d6fb2cd26 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.6-1_all.deb Size: 342096 SHA256: 8f38a2628beb9d80936f08de310a5eb8c4b58e7338c4d16907ca671740558200 SHA1: a05c949a9c7b4b6b7c1f425b291bd589c8ff7651 MD5sum: f2c1cbeea5d4eecfc751a6a0a75209af Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_5.4-1_all.deb Size: 49196 SHA256: c10ce5ad98efe30c9cd09e8fe86a3432694bf3a061da97ecc39bb102774e995f SHA1: fd7c94f5ffed492c32204337d541183913e5921b MD5sum: 6411503f45816463b3db36bd439728f5 Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:16.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 217 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_16.1-1_all.deb Size: 71660 SHA256: be735b7ebaaac085f80c4a0f1b573ee7e1d0a9c0ae161cefeef48d888f8bd0df SHA1: a9c9c2980b2814cb1f9df421204b651a4efbfaa1 MD5sum: eb92708ef9d59acf37b71f26f55f506c Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:16.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_16.1-1_all.deb Size: 50292 SHA256: 0f88814936daf045ccdae4ad5e4543bf4d52453025cc6e1e171f9ac1230fb8c0 SHA1: 9b3427d800d158efa68d1b194b225c5689947a83 MD5sum: 0c36446e1ff9be51812d42eeec7edbdb Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.2-1_all.deb Size: 35000 SHA256: c2ccacb27d1d3cabdc87d04263597d63f4e362ec023740d983ce310dd03981df SHA1: 9daa9d960c62f6414651a13ff499f8c3ed52d2d1 MD5sum: b6862f47bedaa6b12deb8109c82ab8a6 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 385 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_5.2-1_all.deb Size: 73108 SHA256: 3ebf2268ee1b0cff095ba9dbea77a6c3f372cd61c696b97bf93d4b78157c7566 SHA1: 8130f48481de25c075a184cb30621baa54a943cc MD5sum: 7018dca11f8dd2afb0f266317579f7f5 Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.5-1_all.deb Size: 36692 SHA256: 9f9ad12520d33f1551d0546e37766eff637ecfd63fab2a3be75a8d7029f406fe SHA1: 6f95b18ecc08984401ba4a2cee6e04ea754a2826 MD5sum: b68dd790aada8d798fc309635d5d18cc Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.2-1_all.deb Size: 24980 SHA256: bb166f2e4536bcc2276d5bd7c8dbb4044a7795d59032ddcc0c34d6c89fe133eb SHA1: c6ac0941040172114e4da6f72c04eed704ba1ccc MD5sum: e4ae7bdb87bfec7ff2048ab396f6927b Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs-tools. Package: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 145 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.4-1_all.deb Size: 58656 SHA256: 5eb7f8a7090ac82f424ea945d6d04fc70cc80fc70b491b44ddd12012710bb3ef SHA1: c087b8d9e2364f263a9f242587fb3b3c3e4e0ce8 MD5sum: 3a882a295f681775210b6d4d77fa2b98 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.4-1_all.deb Size: 41460 SHA256: c9a075ec8fa9540ec1c8c674b7d7c5d83ea3659e1a1887505de1ccb6371d9e6d SHA1: ca9cbc5e3189c6e410cbca3474627beeecee4c09 MD5sum: c3879ac99db0ef1e4b0d4d12b7dd6a4b Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.4-1_all.deb Size: 19648 SHA256: f02f010e5c16e48f19d196a4cb98e331c5c8c738a13ba4def5da44f411d3ad13 SHA1: 9df20e2b5c06eba1bbcaafb0b06bbb4d9c34015f MD5sum: ee48fcae2f3ebd17dc0881c95a3b7640 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.3-1_all.deb Size: 49068 SHA256: d114d5fc42a6a5d5d6d2cbc4f4e52757dc9bd1c6fe3654c278d30a1cdf0c1b23 SHA1: 9e1106436835ce41dd7d40ac4f86270c1a15ffb7 MD5sum: 1b2be03c1467f57c664a789300b962b3 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:27.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 347 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_27.7-1_all.deb Size: 153944 SHA256: e4790a22d06ab21b7d8e86d8ece4e650a3ccb5074dbcd3ed3c2b6673c8ee8faa SHA1: 047707c084085f36650615abe221b6c07c1e4db4 MD5sum: 382189c3c6fc55346167d64d7cbb26c6 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:13.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 283 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_13.8-1_all.deb Size: 106200 SHA256: ecb8306189adc71a6697ff6adb65dd088f3a551c80a80a0755a4116c8fabbe94 SHA1: 5867c05d83629cf9f6f8ec1ca5161dcf2bce89ae MD5sum: 76a919c17c8a62ab6ff44528545b109d Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 216 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_51.4-1_all.deb Size: 177224 SHA256: 09dc679d604bd736afb24dab1b2baa7cbf70ae6f1e92e1b08ebb6496c845e47f SHA1: 409809ec5bcb5d998db192c4b0de97c6440a4440 MD5sum: cbdf336cda310a17c0eb6b4deac5339d Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 204 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_51.4-1_all.deb Size: 176108 SHA256: 76271c9a2e7e06b2e6efe291439d4700e95771ef09efc188577c04483c4f2299 SHA1: 711dbe79f003df8e23fcb3ceaf9adf8e9a551e78 MD5sum: 0afa5aa2618bfb684516893720f30049 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 763 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_51.4-1_all.deb Size: 262800 SHA256: f918136fc6ac3115b19e0b93abcaff33fd02d4e1e03961903950cc0acdd413d0 SHA1: 47bda7644efdbb3e530e0b127f719b6cd0c8af98 MD5sum: 680bc1f5d6835c2c02579a0f0e75682b Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.7-1_all.deb Size: 18388 SHA256: 4457fc290936428f1a1535cff54e79bf56b596167b58a67c5e50d0dad47f8902 SHA1: 8427733d56e011533d717ef66a4c7865ca045c6e MD5sum: 8e48b27742b459c08631390a6d343a2f Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.1-1_all.deb Size: 42792 SHA256: 0e98cfff9f17a2348f725d15b82f82394da375b694806acb774816e8971d820b SHA1: cbc861ec6b1abd92e8451f97c3c77822cb619036 MD5sum: f3d340b036b8667cdf096a1048033b99 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.2-1_all.deb Size: 61196 SHA256: 70856f61d1dcd0fc5411f92cd43b4d6fbf9fb3c6d7e6a1744654b49971d88c06 SHA1: 1695651331902ed0a2108728c5ce5de113ab4edc MD5sum: 7c35bf04145bf63c7b715ad3364425b1 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.5-1_all.deb Size: 37888 SHA256: 5b4157a72e84b90886f5507af95e81c3472ebb8a794fca6a967eef9995858325 SHA1: 66c69f56198e4fd4e69514f2544e9f841e1d44c1 MD5sum: aa7d23c7ed53aba78d43bb1e07c19538 Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_4.9-1_all.deb Size: 32896 SHA256: 057584369ae111a1b16dbffdfa548d0a7d56e2fc1d3129357e08bd06c1bf8008 SHA1: ff8eddeb4125e8b0f0f9081d3d1a5d9641ff7cc3 MD5sum: 62f361dab00e1bed46c8437028163b74 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:50.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 635 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_50.7-1_all.deb Size: 207976 SHA256: d168cc6da7449047390a47b90e4445e11ed7c28560ef0f444c0af00474b11e98 SHA1: 324818e7b341ee7412f023a418ba51bfe38deb98 MD5sum: d27d9e54eb3b57029320881b9cec32e4 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.2-1_all.deb Size: 28976 SHA256: 8696b45351f98609e1b7eaddf60a69f15025f49fbb057eb29034cbdcd7ca11f6 SHA1: 40dca0cd5fb65a8061881e68b58abcf94baefcd6 MD5sum: 6f87f5089f3ce4d6bec7b967e37a82e7 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.6-1_all.deb Size: 68512 SHA256: a01a1f496cf6eae67f17ecb606cc54b72c6e53886a131de2da27603338c1ee95 SHA1: 0ac08eca8fb43bd6fd48c7f449281ab86cdf10a9 MD5sum: 7ef76f1ef99075a0b209fe64f4c7309c Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:43.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 489 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_43.8-1_all.deb Size: 254768 SHA256: 5ca636ac559ebdb2d7821be9de142cb28086e53997de340375fbad70f7f566d2 SHA1: 8834567c022a4c685ba22168ebe52ff4edfbc3b7 MD5sum: 5dd2b9b7c0ea9831ddb23f919b5d01fc Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_8.6-1_all.deb Size: 28360 SHA256: 431899e0b95206fa9d2227fffe5949b747d19ad3fe39e5746ff5a526144f72ee SHA1: e116e8c8c876e8c15981ee0dfb051a511b6987f3 MD5sum: 5ad61e94222550dba6fff5b6676bdcd4 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:8.0-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.0-1_all.deb Size: 71652 SHA256: 103f0e4c0b61292d2322e8588d46233403d715067cf107484e2efaab141d71d0 SHA1: 238d0ef7687a9159478451907f3b63bbb234b3a9 MD5sum: bedc2c98f9792909fbffb677cabf06b4 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.4-1_all.deb Size: 30348 SHA256: 7009dac131b6e27f00755d0daeb8d35145ed8b79bc255c8d43eaf47dcf4055c8 SHA1: 7d8a55607faab90871824977d4a82a89b08d6705 MD5sum: 99de1e5c81560eaed6e4267ec41cc788 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.21-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25238 Depends: tor (>= 0.4.8.21-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.21-1~d13.trixie+1_all.deb Size: 2685488 SHA256: a47251b4ba9274ff9596d1a3236603aed03dca67d172122b397902840a3c9efb SHA1: 1073d9b761d46173255cd8baee71e0cce11366b3 MD5sum: 9c46ec3d563ac9fdb446b672783dcae9 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 741 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_36.7-1_all.deb Size: 205940 SHA256: 65df29442059be79c1a81cf9c8e4ecfc0676c405b01a3778166b60613661a2ed SHA1: a97cb3ae829adffc71bcb22e437b80abee6c2e1e MD5sum: ce858c57bfd55537930edbd1c4ef3ed2 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:11.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 203 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_11.7-1_all.deb Size: 55576 SHA256: 1fbe6b3f9f5c3423e48b1541a5df2d903e4bdf7988d8a0e50b8669f7bbf9af9c SHA1: cadf2efe9889f89410f870d8e50ed88974aa6899 MD5sum: dbb1f625167561dd972e18e2bfc23c9c Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 205 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_16.0-1_all.deb Size: 62548 SHA256: 8a4f69f36f7db9e9a1f14dccf816b611a2a1145bc4543a288340af69dc7019d6 SHA1: c19f27863cf71207f76e926a3faf3a67e2219e1e MD5sum: c47e614858372588f18d5e83408fbe52 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer