Migrated remaining task to T868.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Fri, Nov 8
Fri, Nov 8
Wed, Nov 6
Wed, Nov 6
Patrick updated subscribers of T362: systemd SystemCallFilter= containment option seccomp hardening.
This was done. If not, please create specific tickets where it isn't done.
Mon, Nov 4
Mon, Nov 4
Installed. See screenshot on how to use:
Sun, Nov 3
Sun, Nov 3
Fri, Oct 25
Fri, Oct 25
Sitemap was broken. May be unrelated to https://github.com/WhonixBOT/whonix-wiki-html/blob/master/scrape-whonix-wiki.sh. Just a follow up issue. Not cause. In progress of fixing this.
Wed, Oct 23
Wed, Oct 23
Mon, Oct 21
Mon, Oct 21
NonaSuomy:
Added requested NFTables example from duclicsic #netfilter freenode.
Thu, Oct 17
Thu, Oct 17
Starting with Bullseye nftables will be the default:
Tue, Oct 15
Tue, Oct 15
Oct 13 2019
Oct 13 2019
Analysis by Cyrus cited here for completion:
Oct 10 2019
Oct 10 2019
HulaHoop renamed T931: Testing tpm2-pkcs11with KVM vTPM 2.0 from Testing tpm2-pk11 with KVM vTPM 2.0 to Testing tpm2-pkcs11with KVM vTPM 2.0.
HulaHoop renamed T931: Testing tpm2-pkcs11with KVM vTPM 2.0 from Packaging for tpm2-pk11 to Testing tpm2-pk11 with KVM vTPM 2.0.
Already packaged in Debian but is currently orphaned and needs a maintainer accoridng to its ex-maintainer:
Oct 7 2019
Oct 7 2019
An alternative proposal for editing ISNs without involving the kernel:
Oct 6 2019
Oct 6 2019
Implemented for some time now.
Reported build failures:
When an implementation is decided, let's decide if we can include this in security-misc for use on Linux hosts and Kicksecure. We would need some way in detecting the active NIC since on wireless systems wlan0 is the interface of choice and not eth0
tc-netem is a utility that is part of the iproute2 package in Debian. It leverages functionality already built into Linux and userspace utilities to simulate networks including packet delays and loss.
Oct 5 2019
Oct 5 2019
TPM hw not working. Troubleshooting thread:
Oct 4 2019
Oct 4 2019
It turns out, what I said only applies to the Debian package. The kernel patch and the package are actually two different things.
Sep 28 2019
Sep 28 2019
Patrick added a project to T930: whonix.SdwdateStatus service starts VMs that were killed: sdwdate-gui.
Sep 27 2019
Sep 27 2019
Sep 23 2019
Sep 23 2019
Patrick updated the task description for T895: Proposed Download Directory Structure / download redirects / stable download links / permalinks.
Patrick updated the task description for T895: Proposed Download Directory Structure / download redirects / stable download links / permalinks.
Sep 14 2019
Sep 14 2019
Aug 31 2019
Aug 31 2019
Aug 30 2019
Aug 30 2019
This forum thread will be used for community documentation discussions (currently under Organizational sub forum).
Aug 23 2019
Aug 23 2019
Patrick renamed T900: Installation and setup of Kicksecure tutorials from Installation and setup of Hardened Debian Linux tutorials to Installation and setup of Kicksecure tutorials.
Season of Docs starts on Sep 02 2019.
Aug 21 2019
Aug 21 2019
Patrick changed the status of T914: Whonix Host Live - enable KVM readonly mode - virt-xml vm-name --edit --disk readonly=on from Open to testing-in-next-build-required.
Should work on manual invocation.
Patrick added a comment to T914: Whonix Host Live - enable KVM readonly mode - virt-xml vm-name --edit --disk readonly=on.
For the record, this is the diff being generated.
Aug 19 2019
Aug 19 2019
Patrick triaged T928: install xfce4-power-manager on Whonix Host and Kicksecure Host as Normal priority.
Patrick added a comment to T914: Whonix Host Live - enable KVM readonly mode - virt-xml vm-name --edit --disk readonly=on.
By default, the VMs do not start because the virtual disks are not set to readonly. This is only needed when using the ISO though. Might stay this way as long as the user is correctly advised to change to set the disk to readonly mode.
Aug 17 2019
Aug 17 2019
Aug 16 2019
Aug 16 2019
Aug 11 2019
Aug 11 2019
Aug 9 2019
Aug 9 2019
install electrum appimage by default:
https://github.com/Whonix/anon-meta-packages/commit/71d40f5316ee7eb38eb04142d80d23c56a48407b
Jul 27 2019
Jul 27 2019
Looks like mine.
Jul 25 2019
Jul 25 2019
TNTBOMBOM renamed T926: TBB removed obfs3 support But still in ACW from TBB removed obfs3 suppor But still in ACW to TBB removed obfs3 support But still in ACW.
Patrick added a project to T926: TBB removed obfs3 support But still in ACW: graphical user interface.
Patrick added a project to T926: TBB removed obfs3 support But still in ACW: anon-connection-wizard.
Patrick edited projects for T921: Installing git-all will delete some Whonix packages , added: Whonix; removed anon-meta-packages, Whonix 16.
Patrick updated the task description for T921: Installing git-all will delete some Whonix packages .
remove qubes-core-agent dependency on initscripts
https://github.com/QubesOS/qubes-issues/issues/5133
but it doesnt happen on plain debian-qubes template , any idea why?
<?xml encoding="UTF-8" version="1.0"?> <actions> <action> <icon>utilities-terminal</icon> <name>Open Terminal Here</name> <unique-id>1555514114536034-1</unique-id> <command>exo-open --working-directory %f --launch TerminalEmulator</command> <description>Example for a custom action</description> <patterns>*</patterns> <startup-notify/> <directories/> </action> <action> <icon>folder-copy</icon> <name>Copy to VM</name> <unique-id>1507455450991127-4</unique-id> <command>/usr/lib/qubes/qvm-actions.sh copy %F</command> <description></description> <patterns>*</patterns> <directories/> <audio-files/> <image-files/> <other-files/> <text-files/> <video-files/> </action> <action> <icon>folder-move</icon> <name>Move to VM</name> <unique-id>1507455437157027-3</unique-id> <command>/usr/lib/qubes/qvm-actions.sh move %F</command> <description></description> <patterns>*</patterns> <directories/> <audio-files/> <image-files/> <other-files/> <text-files/> <video-files/> </action> <action> <icon>document-open</icon> <name>Open in VM</name> <unique-id>1507455471075266-5</unique-id> <command>/usr/lib/qubes/qvm-actions.sh openvm %F</command> <description></description> <patterns>*</patterns> <audio-files/> <image-files/> <other-files/> <text-files/> <video-files/> </action> <action> <icon>gtk-convert</icon> <name>Convert in DisposableVM</name> <unique-id>1507455488971315-6</unique-id> <command>/usr/lib/qubes/qvm-actions.sh pdf %F</command> <description></description> <patterns>*.pdf</patterns> <other-files/> </action> <action> <icon>gtk-convert</icon> <name>Convert in DisposableVM</name> <unique-id>1507455503129941-7</unique-id> <command>/usr/lib/qubes/qvm-actions.sh img %F</command> <description></description> <patterns>*</patterns> <image-files/> </action> <action> <icon>document-open</icon> <name>Edit in DisposableVM</name> <unique-id>1507455559234996-8</unique-id> <command>/usr/lib/qubes/qvm-actions.sh opendvm %F</command> <description></description> <patterns>*</patterns> <audio-files/> <image-files/> <other-files/> <text-files/> <video-files/> </action> <action> <icon>document-open</icon> <name>View in DisposableVM</name> <unique-id>1507455559234997-9</unique-id> <command>/usr/lib/qubes/qvm-actions.sh viewdvm %F</command> <description></description> <patterns>*</patterns> <audio-files/> <image-files/> <other-files/> <text-files/> <video-files/> </action> </actions>
Jul 22 2019
Jul 22 2019
Yes Zulucrypt included and functional on KVM 15. However fixes for both zulucrypt and tomb haven't made it into Buster from what I've tested. Zulucrypt has a tomb plugin to open Tomb files too.
Whonix 15 has since come out. Has this been resolved? Not reproducible on Debian Buster either.
Problem has since been reported and fixed upstream. Let's look into re-including by Bullseye.
HulaHoop added a comment to T897: Unable to write to '/sys/fs/cgroup/blkio/machine.slice/machine....
This bug does not exist on Debian stable after I upgraded. I have it documented for Arch and a work around for it. Nothing more to be done on my end.
Jul 21 2019
Jul 21 2019
Sounds good, thanks.
Done in git master.
Sounds good?
Does lowering "severity could be lowered to "info" and not causing non-zero exit codes" + `journalctl -p err -b` sound like a good solution?
journal keeps metadata about each message, so it's possible to avoid it with `journalctl -p err -b` (I've added `-b` to avoid listing messages from previous boot).
Jul 19 2019
Jul 19 2019
Jul 16 2019
Jul 16 2019
marmarek added a comment to T913: bug: not all files form /etc/skel are copied to /home/user / create user "user" at boot time.
In T913#18744, @Patrick wrote:Do you see any issues with "create home directory on first login" in Qubes?
Patrick added a comment to T913: bug: not all files form /etc/skel are copied to /home/user / create user "user" at boot time.
In T913#18743, @marmarek wrote:Can you give some more context here?
Jul 15 2019
Jul 15 2019
marmarek added a comment to T913: bug: not all files form /etc/skel are copied to /home/user / create user "user" at boot time.
Can you give some more context here? Is it the problem that user is created too early (before /etc/skel is fully populated)? Or is it a problem that it's created at all? Should there be a difference between Qubes and non-Qubes case?
Whonix Issue Tracker · Unread Notifications · Open Issues · Homepage · Blog · Forum · Github · Legal · Imprint · Privacy Policy · Terms of Use · Disclaimer