Patrick Schleizer

various suggestions

1

* to dpkg divert files use https://packages.debian.org/buster/config-package-dev / https://debathena.mit.edu/config-package-dev/ rather than directly using dpkg divert * avoid dpkg diversions by making use of default PATH? If you were to ship...

Debian packaging

2

Is this lib available from official Debian repository? If not, could you add it please?

Started in Qubes Debian buster based DispVM. ``` Apr 13 14:17:05 disp6704 systemd[1]: Started dhcpcanon DHCP client Anonymity Profile. Apr 13 14:17:09 disp6704 dhcpcanon[1338]: Unable to init server: Could not...

VirtualBox guest VM reports: an up-to-date CPU microcode is needed to mitigate this vulnerability

2

spectre-meltdown-checker `v0.42` `spectre-meltdown-checker --paranoid` on a Debian buster host: passed (exit code `0`) `spectre-meltdown-checker --paranoid` in a Debian buster VirtaulBox VM: failed > CVE-2018-3640 > an up-to-date CPU microcode is...

please do not depend on python-pip3 - security risk - use dependencies available from distribution package repositories

25

Instructions on Linux currently require to run `sudo python3 -m pip install -r requirements.txt`. Please consider to drop this if possible. python pip is a security risk since it does...

get GlobaLeaks into official Debian repositories

7

For inclusion of GlobaLeaks into Whonix (https://www.whonix.org), it would help a lot of GlobaLeaks was properly maintained in Debian. Installation without third party sources would then be much simpler. Please...

`make clean VARIANT=light` broken

1

``` ~/hardened_malloc$ make clean VARIANT=light rm -f out-light/libhardened_malloc.so out-light/chacha.o out-light/h_malloc.o out-light/memory.o out-light/pages.o out-light/random.o out-light/util.o out-light/new.o make -C test/ clean make[1]: Entering directory '/home/user/hardened_malloc/test' Makefile:5: *** testing non-default variants not yet...