Buster is the development codename for Debian 10.
Details
Details
Description
Jan 19 2023
Jan 19 2023
Dec 23 2019
Dec 23 2019
Patrick updated the task description for T670: Activating Lockdown.
Nov 21 2019
Nov 21 2019
Not a problem anymore.
Oct 4 2019
Oct 4 2019
madaidan added a comment to T670: Activating Lockdown.
It turns out, what I said only applies to the Debian package. The kernel patch and the package are actually two different things.
Jul 22 2019
Jul 22 2019
HulaHoop added a comment to T769: Add LUKS container GUI or CLI utility by default.
Yes Zulucrypt included and functional on KVM 15. However fixes for both zulucrypt and tomb haven't made it into Buster from what I've tested. Zulucrypt has a tomb plugin to open Tomb files too.
Jul 3 2019
Jul 3 2019
madaidan added a comment to T670: Activating Lockdown.
I can test it but I doubt lockdown will help at all.
Patrick updated subscribers of T670: Activating Lockdown.
Could you test this please by installing in VM and/or host please? @madaidan
Jun 27 2019
Jun 27 2019
Patrick added a comment to T769: Add LUKS container GUI or CLI utility by default.
Jun 20 2019
Jun 20 2019
Jun 14 2019
Jun 14 2019
Patrick changed the status of T769: Add LUKS container GUI or CLI utility by default from Open to testing-in-next-build-required.
May 22 2019
May 22 2019
HulaHoop added a comment to T817: install jitterentropy by default.
His detailed reply:
May 5 2019
May 5 2019
Patrick added a comment to T670: Activating Lockdown.
More kernel hardening:
https://github.com/Whonix/security-misc/pull/5
May 3 2019
May 3 2019
HulaHoop added a comment to T670: Activating Lockdown.
Related thread on general kernel hardening:
Patrick updated the task description for T670: Activating Lockdown.
May 1 2019
May 1 2019
Patrick added a comment to T817: install jitterentropy by default.
HulaHoop added a comment to T817: install jitterentropy by default.
user@host:~/jitterentropy-20140131/tests_userspace/timing$ ./jitterentropy-inittest
Pass 10000 - Fail 0 - Rounds 10000
Apr 30 2019
Apr 30 2019
Patrick updated the task description for T817: install jitterentropy by default.
Patrick updated the task description for T817: install jitterentropy by default.
Apr 24 2019
Apr 24 2019
Patrick updated the task description for T817: install jitterentropy by default.
Apr 19 2019
Apr 19 2019
Patrick added a comment to T769: Add LUKS container GUI or CLI utility by default.
Merged.
Apr 18 2019
Apr 18 2019
HulaHoop added a comment to T769: Add LUKS container GUI or CLI utility by default.
I also added the cli version to the non-qubes-vm-enhancements-cli section. It is a dep of a gui install but not vice versa. Zulucrypt plugin package was added there too since enchancements-cli is a subset of enhancements-gui.
HulaHoop added a comment to T769: Add LUKS container GUI or CLI utility by default.
Apr 17 2019
Apr 17 2019
Patrick updated subscribers of T817: install jitterentropy by default.
Could you please test https://github.com/smuellerDD/jitterentropy-rngd/issues/6#issuecomment-483191719 in Qubes / VirtualBox? @TNTBOMBOM
Patrick reopened T817: install jitterentropy by default as "Open".
Patrick added a comment to T769: Add LUKS container GUI or CLI utility by default.
HulaHoop added a comment to T769: Add LUKS container GUI or CLI utility by default.
zulucrypt works in Buster. Tomb does not.
Apr 15 2019
Apr 15 2019
Patrick added a comment to T817: install jitterentropy by default.
Answer by jitterentropy developer:
https://github.com/smuellerDD/jitterentropy-rngd/issues/6#issuecomment-483191719
Apr 14 2019
Apr 14 2019
Patrick added a comment to T817: install jitterentropy by default.
consider installing jitterentropy-rngd to improve entropy collection
https://github.com/QubesOS/qubes-issues/issues/4169
Patrick added a comment to T817: install jitterentropy by default.
ask Xen developers about Efficacy of jitterentropy RNG in Xen
https://github.com/QubesOS/qubes-issues/issues/4174
Apr 12 2019
Apr 12 2019
I don't see anything to do here.
Patrick updated subscribers of T866: check systemd DNS when porting to Debian Buster.
Apr 6 2019
Apr 6 2019
Patrick updated the task description for T769: Add LUKS container GUI or CLI utility by default.
Patrick updated the task description for T769: Add LUKS container GUI or CLI utility by default.
Patrick updated the task description for T769: Add LUKS container GUI or CLI utility by default.
Patrick changed the status of T888: change Qubes-Whonix default applications from KDE-ish to XFCE-ish from Open to testing-in-next-build-required.
Patrick updated subscribers of T386: meek Pluggable Transport.
Patrick changed the status of T595: install onionshare by default in Whonix 15 from Open to testing-in-next-build-required.
added
Apr 5 2019
Apr 5 2019
Apr 4 2019
Apr 4 2019
marmarek added a comment to T670: Activating Lockdown.
This looks like focused on kernel protection from attacker having full user (or even root) access already. Something very desirable on server/multi user systems, but not so much meaningful in a single-user AppVM.
Also, disabling modules loading at all may break attaching devices (block, usb etc).
Other than modules loading, it shouldn't harm, though.
Patrick added a comment to T670: Activating Lockdown.
Any opinion? @marmarek
Mar 22 2019
Mar 22 2019
HulaHoop updated the task description for T769: Add LUKS container GUI or CLI utility by default.