Page MenuHomePhabricator
Feed Advanced Search

Mar 21 2020

Patrick edited projects for T904: Whonix-Host Swap Considerations - Swap Partition vs Swap File vs No Swap By default, added: Whonix 16; removed Whonix 15.

Whonix-Host considerations:

Mar 21 2020, 11:48 AM · Whonix 16, Whonix-Host, Whonix

Mar 12 2020

Patrick added a project to T929: Whonix XFCE Wallpaper / Background Image: Whonix-Host.
Mar 12 2020, 3:14 PM · Whonix 15, Whonix-Host, whonix-xfce-desktop-config, Whonix

Dec 23 2019

Patrick triaged T952: warn against superadmin / superroot in grub boot menu or initramfs as Normal priority.
Dec 23 2019, 4:00 PM · Whonix 16, Whonix, apparmor-profile-everything
Patrick triaged T951: sign kernel modules as Normal priority.
Dec 23 2019, 3:15 PM · Whonix 16, Whonix, security-misc

Oct 6 2019

Patrick closed T596: keep an eye on kloak anti keystroke deanonymization tool as Resolved.

Implemented for some time now.

Oct 6 2019, 9:54 PM · Whonix 16, security, Whonix

Aug 31 2019

Patrick triaged T929: Whonix XFCE Wallpaper / Background Image as Normal priority.
Aug 31 2019, 3:50 PM · Whonix 15, Whonix-Host, whonix-xfce-desktop-config, Whonix

Jul 27 2019

Patrick added a project to T803: coyIM: Debian version 11 codename Bullseye.
Jul 27 2019, 1:27 PM · Debian version 11 codename Bullseye, Whonix 16, anon-meta-packages, Whonix

Jul 25 2019

Patrick updated the task description for T921: Installing git-all will delete some Whonix packages .
Jul 25 2019, 5:08 PM · Whonix
Patrick added a comment to T921: Installing git-all will delete some Whonix packages .

remove qubes-core-agent dependency on initscripts
https://github.com/QubesOS/qubes-issues/issues/5133

Jul 25 2019, 5:08 PM · Whonix
TNTBOMBOM added a comment to T921: Installing git-all will delete some Whonix packages .

but it doesnt happen on plain debian-qubes template , any idea why?

Jul 25 2019, 3:33 PM · Whonix

Jul 22 2019

HulaHoop added a comment to T803: coyIM.

Problem has since been reported and fixed upstream. Let's look into re-including by Bullseye.

Jul 22 2019, 2:35 AM · Debian version 11 codename Bullseye, Whonix 16, anon-meta-packages, Whonix

Jul 6 2019

marmarek added a comment to T857: Why? Keep? Qubes-Whonix /sbin/ethtool -K ${INTERFACE} sg off | /sbin/ethtool -K ${INTERFACE} tx off.

It was copied from native setup_ip script, details here:
https://github.com/qubesos/qubes-core-agent-linux/commit/5cbb38a2
https://github.com/qubesos/qubes-issues/issues/700
It definitely was relevant for old stubdomain hosting qemu (which is still possible to use in R4.0). Not sure if applies to new linux-based stubdomain.
It may be not needed anymore. To verify that, try removing those lines and check networking in Windows (or other OS without Xen PV drivers).

Jul 6 2019, 3:45 PM · Whonix 16, qubes-whonix, Whonix
Patrick added a comment to T857: Why? Keep? Qubes-Whonix /sbin/ethtool -K ${INTERFACE} sg off | /sbin/ethtool -K ${INTERFACE} tx off.

Any idea? @marmarek

Jul 6 2019, 12:32 PM · Whonix 16, qubes-whonix, Whonix

Jun 27 2019

Patrick added a comment to T818: simplify tb-starter function tb_detect_starter_bin.

Blocked by Qubes.
Qubes start menu incompatible with DispVMs launching GUI applications into the background
https://github.com/QubesOS/qubes-issues/issues/5129

Jun 27 2019, 3:26 PM · Whonix, Whonix 16, tb-starter
Patrick added a comment to T582: revisit handling of /var/lib/dbus/machine-id.

Will keep watching what Tails is doing.

Jun 27 2019, 10:33 AM · Whonix 16, research, Whonix
Patrick edited projects for T582: revisit handling of /var/lib/dbus/machine-id, added: Whonix 16; removed Whonix 15.
Jun 27 2019, 10:33 AM · Whonix 16, research, Whonix
Patrick added a comment to T818: simplify tb-starter function tb_detect_starter_bin.

https://github.com/Whonix/tb-starter/commit/11ed26d14ed308891db5fc366a1002da41bdd3c1

Jun 27 2019, 9:13 AM · Whonix, Whonix 16, tb-starter
Patrick edited projects for T921: Installing git-all will delete some Whonix packages , added: Whonix 16, anon-meta-packages; removed Whonix 15.
Jun 27 2019, 9:01 AM · Whonix

Jun 23 2019

madaidan added a comment to T631: re-enable tor-controlport-filter.service systemd hardening.

Does it work after you comment ProtectSystem=strict and ReadWriteDirectories=? I think on Qubes-Whonix it is trying to write to a directory in /var/run (probably /var/run/qubes-service). I can't test as I don't use Qubes.

Jun 23 2019, 8:25 PM · Whonix 15, Whonix, enhancement, systemd, onion-grater (Control Port Filter Proxy)
Patrick added a comment to T631: re-enable tor-controlport-filter.service systemd hardening.

Unfortunately not. On Qubes-Whonix. Could be Non-Qubes-Whonix vs
Qubes-Whonix?

Jun 23 2019, 7:53 PM · Whonix 15, Whonix, enhancement, systemd, onion-grater (Control Port Filter Proxy)
madaidan added a comment to T631: re-enable tor-controlport-filter.service systemd hardening.

Does it work using this? It looks like it needs the openat syscall which it now allows.

Jun 23 2019, 4:31 PM · Whonix 15, Whonix, enhancement, systemd, onion-grater (Control Port Filter Proxy)
Patrick updated subscribers of T631: re-enable tor-controlport-filter.service systemd hardening.

Does not work yet. @madaidan

Jun 23 2019, 10:27 AM · Whonix 15, Whonix, enhancement, systemd, onion-grater (Control Port Filter Proxy)

Jun 14 2019

Patrick edited projects for T803: coyIM, added: Whonix 16; removed Whonix 15.
Jun 14 2019, 3:30 PM · Debian version 11 codename Bullseye, Whonix 16, anon-meta-packages, Whonix

Apr 14 2019

Patrick edited projects for T551: enter Whonix firewall timesync-fail-closed mode before suspend / enter Whonix firewall full mode after resume and clock-fix, added: Whonix 16; removed Whonix 15.
Apr 14 2019, 3:38 PM · Whonix 16, Whonix, sdwdate

Apr 6 2019

Patrick closed T801: use libresolv-wrapper rather than functional Whonix-Gateway system DNS resolver? as Invalid.

Unfortunately, not possible.

Apr 6 2019, 8:32 PM · Whonix, Whonix 16, research, anon-gw-dns-conf
Patrick closed T704: VB (5.1.22 mac) drag and drop file doesn't work as Wontfix.

To solve this:

Apr 6 2019, 8:25 PM · Whonix 16, Whonix
Patrick edited projects for T766: use tinyproxy socks proxy support once available in Qubes-Whonix-Gateway, added: Whonix 16; removed Debian version 10 codename Buster.
Apr 6 2019, 5:20 PM · Whonix 16, Whonix, qubes-whonix
Patrick edited projects for T653: update /etc/whonix_version, added: Whonix 16; removed Whonix 15.
Apr 6 2019, 4:52 PM · Whonix 16, whonix-base-files, Whonix

Mar 28 2019

Patrick added a comment to T596: keep an eye on kloak anti keystroke deanonymization tool.

release kloak v0.2

Mar 28 2019, 12:55 AM · Whonix 16, security, Whonix

Mar 1 2019

Patrick added a comment to T596: keep an eye on kloak anti keystroke deanonymization tool.

Many code enhancements were recently added by its author.

Mar 1 2019, 9:03 AM · Whonix 16, security, Whonix

Nov 20 2018

Patrick closed T738: Change default application to not use kmail as Wontfix.

https://forums.whonix.org/t/user-poll-xfce-vs-kde-kde-deprecation-considered/6235

Nov 20 2018, 5:00 PM · usability, kde, Whonix 16, Whonix
Patrick closed T705: Add /media to desktop icons as Wontfix.

https://forums.whonix.org/t/user-poll-xfce-vs-kde-kde-deprecation-considered/6235

Nov 20 2018, 4:59 PM · Whonix 16, Whonix, kde
Patrick closed T706: Add /media to pinned places in dolphin as Wontfix.

https://forums.whonix.org/t/user-poll-xfce-vs-kde-kde-deprecation-considered/6235

Nov 20 2018, 4:59 PM · Whonix 16, Whonix, kde
Patrick closed T733: disable/remove KDE System Settings - Network - Settings as Wontfix.

https://forums.whonix.org/t/user-poll-xfce-vs-kde-kde-deprecation-considered/6235

Nov 20 2018, 4:59 PM · usability, kde, Whonix 16, Whonix
Patrick closed T734: disable web shortcuts as Wontfix.

https://forums.whonix.org/t/user-poll-xfce-vs-kde-kde-deprecation-considered/6235

Nov 20 2018, 4:58 PM · usability, security, kde, Whonix 16, Whonix
Patrick closed T735: settings-plasma search/configure search configurations from Whonix-Gateway as Wontfix.

https://forums.whonix.org/t/user-poll-xfce-vs-kde-kde-deprecation-considered/6235

Nov 20 2018, 4:58 PM · security, usability, kde, Whonix 16, Whonix

Oct 28 2018

TNTBOMBOM added a comment to T804: ParrotOS's Firejail Code.

No problem, but needs to add the commands manually to firetools in the GW.

Oct 28 2018, 6:35 AM · Whonix 16, Whonix
HulaHoop added a comment to T804: ParrotOS's Firejail Code.

I disagree. Firetools makes administration easier and has a place on both VMs.

Oct 28 2018, 4:49 AM · Whonix 16, Whonix

Oct 26 2018

TNTBOMBOM added a comment to T804: ParrotOS's Firejail Code.

firejail is enough for Whonix-GW
firejail + firetools for Whonix-WS

Oct 26 2018, 9:21 AM · Whonix 16, Whonix

Oct 13 2018

TNTBOMBOM added a comment to T804: ParrotOS's Firejail Code.

@HulaHoop that doesnt mean we dont install firejail by default.

Oct 13 2018, 7:00 PM · Whonix 16, Whonix

Oct 1 2018

Patrick placed T596: keep an eye on kloak anti keystroke deanonymization tool up for grabs.
Oct 1 2018, 1:17 PM · Whonix 16, security, Whonix

Sep 20 2018

Patrick triaged T857: Why? Keep? Qubes-Whonix /sbin/ethtool -K ${INTERFACE} sg off | /sbin/ethtool -K ${INTERFACE} tx off as Normal priority.
Sep 20 2018, 11:47 AM · Whonix 16, qubes-whonix, Whonix
Patrick added a parent task for T856: whonix TemplateVM time fetching qrexec service: T387: Qubes-Whonix-Gateway as ClockVM.
Sep 20 2018, 11:45 AM · sdwdate, Whonix 16, Whonix, qubes-whonix
Patrick updated subscribers of T856: whonix TemplateVM time fetching qrexec service.
Sep 20 2018, 11:44 AM · sdwdate, Whonix 16, Whonix, qubes-whonix
Patrick triaged T856: whonix TemplateVM time fetching qrexec service as Normal priority.
Sep 20 2018, 11:44 AM · sdwdate, Whonix 16, Whonix, qubes-whonix
Patrick triaged T852: research and document how to shut down system on removal of some USB device as Normal priority.
Sep 20 2018, 11:39 AM · Whonix 16, Whonix, research
Patrick triaged T849: make onion-grater resilient if networking is down as Normal priority.
Sep 20 2018, 11:33 AM · Whonix 16, onion-grater (Control Port Filter Proxy), Whonix
Patrick updated the task description for T827: make whonixcheck work outside of Whonix.
Sep 20 2018, 11:30 AM · Whonix 16, Whonix, whonixcheck

Sep 15 2018

Patrick added projects to T833: Software to inlcude from backports: Whonix 16, anon-apt-sources-list.
Sep 15 2018, 2:54 PM · anon-apt-sources-list, Whonix 16, Whonix

Sep 10 2018

Patrick updated the task description for T827: make whonixcheck work outside of Whonix.
Sep 10 2018, 11:04 AM · Whonix 16, Whonix, whonixcheck
Patrick triaged T827: make whonixcheck work outside of Whonix as Normal priority.
Sep 10 2018, 11:03 AM · Whonix 16, Whonix, whonixcheck

Sep 6 2018

Patrick added a comment to T737: Desktop Session Login better to start it with empty session / kdesudo error popup window ( sdwdate-gui ).
Sep 6 2018, 9:05 AM · Whonix 15, security, kde, Whonix
TNTBOMBOM triaged T737: Desktop Session Login better to start it with empty session / kdesudo error popup window ( sdwdate-gui ) as Normal priority.
Sep 6 2018, 2:35 AM · Whonix 15, security, kde, Whonix
TNTBOMBOM raised the priority of T737: Desktop Session Login better to start it with empty session / kdesudo error popup window ( sdwdate-gui ) from Normal to Needs Triage.
Sep 6 2018, 2:35 AM · Whonix 15, security, kde, Whonix
TNTBOMBOM added a comment to T737: Desktop Session Login better to start it with empty session / kdesudo error popup window ( sdwdate-gui ).

linking to forum:

Sep 6 2018, 2:34 AM · Whonix 15, security, kde, Whonix

Aug 15 2018

Patrick updated the task description for T631: re-enable tor-controlport-filter.service systemd hardening.
Aug 15 2018, 1:04 PM · Whonix 15, Whonix, enhancement, systemd, onion-grater (Control Port Filter Proxy)

Aug 10 2018

HulaHoop reopened T596: keep an eye on kloak anti keystroke deanonymization tool as "Open".

He was busy those past few months and thought there was no interest. @Patrick Expect a new release this coming week.

Aug 10 2018, 4:37 PM · Whonix 16, security, Whonix

Aug 9 2018

HulaHoop added a comment to T596: keep an eye on kloak anti keystroke deanonymization tool.

Ping:
https://github.com/vmonaco/kloak/issues/10

Aug 9 2018, 9:37 PM · Whonix 16, security, Whonix

Aug 8 2018

HulaHoop added a comment to T596: keep an eye on kloak anti keystroke deanonymization tool.

Why not ping him first? Its a waste of good work otherwise.

Aug 8 2018, 4:55 PM · Whonix 16, security, Whonix
Patrick closed T596: keep an eye on kloak anti keystroke deanonymization tool as Invalid.

Dead upstream.

Aug 8 2018, 10:28 AM · Whonix 16, security, Whonix
Patrick edited projects for T596: keep an eye on kloak anti keystroke deanonymization tool, added: Whonix 16; removed Whonix 15.
Aug 8 2018, 10:12 AM · Whonix 16, security, Whonix

Aug 1 2018

Patrick triaged T818: simplify tb-starter function tb_detect_starter_bin as Low priority.
Aug 1 2018, 7:28 AM · Whonix, Whonix 16, tb-starter

Jul 12 2018

Patrick added a project to T804: ParrotOS's Firejail Code: Whonix 16.
Jul 12 2018, 4:54 PM · Whonix 16, Whonix

Jun 29 2018

HulaHoop added a comment to T801: use libresolv-wrapper rather than functional Whonix-Gateway system DNS resolver?.

Check these alternatives out:

Jun 29 2018, 11:58 PM · Whonix, Whonix 16, research, anon-gw-dns-conf

Jun 23 2018

Patrick triaged T802: whonixcheck should check if torsocks IsolatePID stream isolation is functinoal as Normal priority.
Jun 23 2018, 9:57 AM · enhancement, easy, whonixcheck, Whonix 16, Whonix
Patrick triaged T801: use libresolv-wrapper rather than functional Whonix-Gateway system DNS resolver? as Normal priority.
Jun 23 2018, 9:49 AM · Whonix, Whonix 16, research, anon-gw-dns-conf

Feb 3 2018

troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Implemented some defensive code against qubes-dband qubes-qrexec-agent just in case. Now if one or both of those services stop, it just ensures that the sdwdate-gui programs don't crash, and that's it.

Feb 3 2018, 11:15 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Feb 2 2018

Patrick added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Only small issues for now.

Feb 2 2018, 3:47 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

sdwdate-gui-qubes will be shortly ready for packaging.

There are files for the gateway, files for the workstations, none for non-qubes environment. At this stage, for review, it would be easier to make a standalone package before merging in sdwdate-gui.

It was actually easier to merge directly, if only for the new user sdwdate-gui created in postint.

Feb 2 2018, 1:47 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Feb 1 2018

troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

sdwdate-gui-qubes will be shortly ready for packaging.

Feb 1 2018, 12:22 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Jan 29 2018

marmarek added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Json handling looks fine. Not sure about using the data loaded from there - for example if self.message require sanitization. AFAIR some Qt widgets support html formatting, so it may be undesirable to allow that.

Jan 29 2018, 3:44 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
Patrick added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Relevant code excerpt sdwdate.

Jan 29 2018, 3:37 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Jan 26 2018

troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Probably no. But I,m not an expert in security or attacks.

pickle load deserialize an object, in our case a DICTionary. Anything not in that form would raise an exception.

How do you ensure that? Normally pickle.load would gladly deserialize any object, even if that results in executing code inside of it. See https://docs.python.org/3/library/pickle.html
Better use json or such if really a structure (rather than a single value) is needed.

Jan 26 2018, 9:11 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

What happens if a workstation is killed, and then later restarted?

Jan 26 2018, 8:52 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
marmarek added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Probably no. But I,m not an expert in security or attacks.

pickle load deserialize an object, in our case a DICTionary. Anything not in that form would raise an exception.

Jan 26 2018, 6:49 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Probably no. But I,m not an expert in security or attacks.

Jan 26 2018, 5:12 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Jan 25 2018

Patrick added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Then //pickle.load status-file

Jan 25 2018, 2:35 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
Patrick added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Update.

The submenu commands are implemented. Looks nice and handy.

Jan 25 2018, 2:32 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

The submenu commands are implemented. Looks nice and handy.

Jan 25 2018, 12:21 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Jan 22 2018

troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

>>! In T534#15414, @marmarek wrote:

Jan 22 2018, 10:52 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

troubadour

For now, the qrexec commands are issued from the workstations sdwdate-gui,
for practical reasons, the main one being that it's easy to restart sdwdate from there.
Obviously they'll have to be in sdwdate.

Patrick

Possibly, yes. Necessarily, maybe not. Keeping all the "if Qubes then"
logic outside of sdwdate may also be an option.

That would help a lot. There are not that many "if Qubes then" in sdwdate -- actually we also check if we are not in sys-whonix --, but when it comes to run the qrexec command in sdwdate, the problem begins. Have tried all sort of things to get the call, Popen or even os.system command working in sdwdate, to no avail, although call works in many other places.

Jan 22 2018, 10:42 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
marmarek added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Obviously they'll have to be in sdwdate. They are some issues regarding the format of the argument in qrexec-client-vm sys-whonix whonix.test+"[argument]" when it reaches the target vm. It's sanitized, no problem there, it can be parsed, but it's truncated at 51 bytes, which limits what we can pass.

Jan 22 2018, 3:11 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui
Patrick added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Awesome progress! :)

Jan 22 2018, 2:53 AM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Jan 20 2018

troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Some progress on this one. A summary without literature.

Jan 20 2018, 11:30 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Jan 16 2018

troubadour added a comment to T534: make sdwdate-gui Qubes friendly (sdwdate-gui-qubes).

Playing with tags.

Jan 16 2018, 1:12 PM · Whonix, python, Qubes, usability, security, enhancement, sdwdate, sdwdate-gui

Dec 21 2017

Patrick added projects to T738: Change default application to not use kmail : Whonix 16, kde, usability.
Dec 21 2017, 9:48 PM · usability, kde, Whonix 16, Whonix
Patrick updated the task description for T737: Desktop Session Login better to start it with empty session / kdesudo error popup window ( sdwdate-gui ).
Dec 21 2017, 9:47 PM · Whonix 15, security, kde, Whonix
Patrick updated the task description for T735: settings-plasma search/configure search configurations from Whonix-Gateway.
Dec 21 2017, 6:03 PM · security, usability, kde, Whonix 16, Whonix
Patrick renamed T735: settings-plasma search/configure search configurations from Whonix-Gateway from settings-plasma search/configure search configurations - GW to settings-plasma search/configure search configurations from Whonix-Gateway.
Dec 21 2017, 6:03 PM · security, usability, kde, Whonix 16, Whonix
Patrick added projects to T735: settings-plasma search/configure search configurations from Whonix-Gateway: Whonix 16, kde, usability, security.
Dec 21 2017, 6:02 PM · security, usability, kde, Whonix 16, Whonix
Patrick triaged T734: disable web shortcuts as Normal priority.
Dec 21 2017, 6:01 PM · usability, security, kde, Whonix 16, Whonix
Patrick renamed T733: disable/remove KDE System Settings - Network - Settings from disable/remove System settings - Network - Settings , as it doesnt belong gw (konqueror browser only) to disable/remove KDE System Settings - Network - Settings.
Dec 21 2017, 6:00 PM · usability, kde, Whonix 16, Whonix

Nov 3 2017

marmarek added a comment to T725: add proxy capabiltiies (provides_network) to Whonix-Workstation / move Qubes updates proxy to Whonix-Workstation.

VM do not need to be a ProxyVM or have provides_network=True to serve as updatevm on Qubes 4.0. You just need to start updates proxy there (tinyproxy, enabled with qvm-service --enable vmname qubes-updates-proxy), and just qrexec policy of qubes.UpdatesProxy to direct the traffic there.

Nov 3 2017, 2:46 PM · Whonix, Whonix 16
Patrick created T725: add proxy capabiltiies (provides_network) to Whonix-Workstation / move Qubes updates proxy to Whonix-Workstation.
Nov 3 2017, 2:16 PM · Whonix, Whonix 16

Oct 23 2017

Patrick added a comment to T706: Add /media to pinned places in dolphin.

Implementation advice:

Oct 23 2017, 4:50 PM · Whonix 16, Whonix, kde

Sep 7 2017

HulaHoop added a comment to T706: Add /media to pinned places in dolphin.
  • For KVM, should shared folder helper put shares into /media to match vbox? Is /media a better place than /mnt/ anyway? Being consistent is a positive, in any case.
Sep 7 2017, 5:30 AM · Whonix 16, Whonix, kde

Sep 6 2017

JasonJAyalaP updated the task description for T706: Add /media to pinned places in dolphin.
Sep 6 2017, 9:20 PM · Whonix 16, Whonix, kde
JasonJAyalaP updated the task description for T705: Add /media to desktop icons.
Sep 6 2017, 9:19 PM · Whonix 16, Whonix, kde

Aug 31 2017

Patrick added a comment to T706: Add /media to pinned places in dolphin.

Packages as per Debian policy must not write into /home or /root. It
causes an interactive dpkg conflict resolution during upgrades. It
causes a lintian warning. It makes the package unfit for inclusion into
Debian. It conflicts with users settings, can leave the file in a messy
state and break the desktop. Hard to upgrade/change without breaking the
desktop on major Debian upgrades. It's a very unprofessional bad solution.

Aug 31 2017, 11:01 PM · Whonix 16, Whonix, kde
JasonJAyalaP added a comment to T706: Add /media to pinned places in dolphin.

It could do more than nuke their current settings? We would have to check each time dolphin upgrades to make sure the format is right, of course.

Aug 31 2017, 10:39 PM · Whonix 16, Whonix, kde